last executing test programs: 23m47.61311367s ago: executing program 3 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341e6"], 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0xf, 0x8d, {0x8d, 0x23, "98b9797b95bda9d16e9e5edf5bf65071117eeebfee360c448739719c82a1bb94d85fd8eb07cc66895e09ae093ac32705f34140bc6ea608cff0266ac2b12a9999c022cd8a891860d0c0729d24d3ef81a931b7779cc00a84ffa4cc8d594be73c34fa1ef5900a54cf90fab30795a30fde8cd863d8fb79afdfb7d02fe1d5515ad7923e8a345741961cd534d64c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x18, 0x2e, "83384c4366b018060bb8693a9529ed4eb2e90f3cf190b67daabc36a3422fa835e6a13a7df0110c8c0f5a5b5d84a7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x49, {0x47, "0ad970aab1bb2b89d4b8e2d8c73194bb670ee6c7f418128265c731792fbfb77e1a8522fddd3af2efef712a0fbf81e23cbea5493e66a5a57f78d806dcedf0c93ef43b30b06fb896"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x6d}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341e6"], 0x0}, 0x0) (async) syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0xf, 0x8d, {0x8d, 0x23, "98b9797b95bda9d16e9e5edf5bf65071117eeebfee360c448739719c82a1bb94d85fd8eb07cc66895e09ae093ac32705f34140bc6ea608cff0266ac2b12a9999c022cd8a891860d0c0729d24d3ef81a931b7779cc00a84ffa4cc8d594be73c34fa1ef5900a54cf90fab30795a30fde8cd863d8fb79afdfb7d02fe1d5515ad7923e8a345741961cd534d64c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x18, 0x2e, "83384c4366b018060bb8693a9529ed4eb2e90f3cf190b67daabc36a3422fa835e6a13a7df0110c8c0f5a5b5d84a7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x49, {0x47, "0ad970aab1bb2b89d4b8e2d8c73194bb670ee6c7f418128265c731792fbfb77e1a8522fddd3af2efef712a0fbf81e23cbea5493e66a5a57f78d806dcedf0c93ef43b30b06fb896"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x6d}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x7}}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) 23m44.280205651s ago: executing program 3 (id=285): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r7, &(0x7f0000000600)='r:s/p ./file0:0\f', 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b"], 0x48}}, 0x20000034) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) 23m43.114496527s ago: executing program 3 (id=286): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x4, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xd, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0xf1, 0x9, 0x1, 0x16, 0x3, 0x35, 0x3, 0x7, 0x4}], 0x20000002}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x2, 0x0, 0x1000, 0x2, 0x3e32ca72, 0x1000, 0x0, 0x97, 0x200000000010, 0x401, 0x2, 0x4, 0x4, 0x1aa], 0x2, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x3e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 23m30.143751926s ago: executing program 3 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000200)="ac", 0x1, 0x4008005, &(0x7f00000004c0)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4, 0x0, 0xa0}, &(0x7f0000000080)=0x9c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x133}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x100) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x1, 0x3}], 0xffffffffffffffff}, 0x18, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)={0x1dc, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_MASTER={0x98, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9c}]}}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x7}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000940}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050300000000000000000a"], 0x1c}}, 0x20008000) 23m27.432847306s ago: executing program 3 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f0"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xd, &(0x7f0000000480)={0x8, 0x8d}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x1000000000000, &(0x7f0000000340)="cb"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='m'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 23m13.746145288s ago: executing program 3 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a0100000001020001090219000101008032090400"], 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x1, 0x1023, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./dev\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fanotify_mark(r0, 0x455, 0x19, r2, 0x0) fanotify_mark(r0, 0x80, 0x1000, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./dev_mnt\x00') 23m13.53727172s ago: executing program 32 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a0100000001020001090219000101008032090400"], 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x1, 0x1023, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./dev\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fanotify_mark(r0, 0x455, 0x19, r2, 0x0) fanotify_mark(r0, 0x80, 0x1000, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./dev_mnt\x00') 11m15.711406187s ago: executing program 2 (id=2098): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 11m13.954817873s ago: executing program 2 (id=2104): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000001c0)={{r3}, {@void, @actul_num={@val=0x2d, 0x6, 0x6b}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r5, @ANYRES8=0x0], 0x78) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 11m11.85906975s ago: executing program 2 (id=2106): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000001c0)={{r3}, {@void, @actul_num={@val=0x2d, 0x6, 0x6b}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r5, &(0x7f0000019200)=""/102398, 0x18ffe, 0x1000000000) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 11m7.881668743s ago: executing program 2 (id=2114): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80e40, 0x0) io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb, 0x0, r3}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x64}}, 0x44010) socket$packet(0x11, 0x2, 0x300) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r7, &(0x7f0000000000), 0x0) 11m6.505399298s ago: executing program 2 (id=2116): socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x11, 0xa, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000018105e04da070000080000010902240200ff00000009040000090300000009210000000922221509058103"], 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r9}, 0xc) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000100)={@mcast1, @loopback, @mcast1, 0x7, 0xffff, 0x200, 0x500, 0xdd54, 0x80000000, r9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) socket(0x2, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f00000001c0)={0xa, @pix_mp={0x120000, 0x6, 0x3432564f, 0x5, 0x5, [{0x3a, 0x3}, {0x9, 0x8ac}, {0xfffffff9, 0xcf}, {0xddb, 0x7ff}, {0xffff, 0x2}, {0x4004, 0x2}, {0x0, 0x200}, {0x0, 0xfffffffe}], 0x8, 0x5, 0x1, 0x2, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000080)={0x976, 0x6, 0x80, "97c418ab443fd0b192a1d3aaafbb26f9042cc42f644d8506a3093f0389daf788", 0x3447504d}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) 11m3.824923404s ago: executing program 2 (id=2122): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000100)=""/36, 0x24}], 0x8}, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x42000000) 10m48.646474618s ago: executing program 33 (id=2122): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000100)=""/36, 0x24}], 0x8}, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x42000000) 9m40.448112453s ago: executing program 6 (id=2269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r0, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x4008af13, &(0x7f0000002500)) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f0102030109021200010000000009"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r5, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0x1}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 9m34.307359221s ago: executing program 6 (id=2276): r0 = inotify_init() r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000004480)=@file={0x0, './file0\x00'}, 0xffffffffffffff31) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0xd3fd) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=unix,', {[{@dfltuid}, {@uname={'uname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}) 9m32.703789819s ago: executing program 6 (id=2279): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x129, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x2, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80440, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m32.31804966s ago: executing program 6 (id=2281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 9m32.045786037s ago: executing program 6 (id=2283): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x36a1, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x2, 0x50}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x8, 0x6000, @fd=r1, 0x5, 0x0, 0x0, 0x5, 0x0, {0x2, 0x0, 0x8, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000004c0)={0x10002, 0x0, 0xb000, 0x1000, &(0x7f0000002000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r7, 0x0, 0x16, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x0, &(0x7f0000000500)="2517ece57e17db7153f0123468f1379cf0049046f28a42c2ce1c37e6b3c27511d064b195bd34719d6bb6cb70aa81bcfe6ff0f9a0f20d468350eeceb3e22601800000000000004366a84e8519bff4ebf7b3c0b30f41506e5e3c5a0000f24328835cab926b188e0485561bd364ab6baa9d1785e5317e10e97b26c596c65699ef052b3008ad47c500"/162, 0xa2, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x7400}, 0x8000004) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000140)='},{@-\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x27}, 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000041c00"/20, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000050000000300"/28], 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r10, @ANYRES32=r0, @ANYBLOB="1900"/12, @ANYRES32=r9, @ANYBLOB="68b9a611f779ed846fbb416b88e0c4b589beaf9b17bf218efcbcd5b25624e74dfb424ab2b81b995e41e988fb909bd406068ce3d64819e6561c279a1093e5644e5d4fba0e469287ccb92bd19814441ca2c1b4c294ad4c46cffc4745e2a22c22a528e67b4c3bdbf4f7b3f227183ee1ee85f5a85a25b7933037d1bd45075fbf76ae751cd6db6dd49a0ac56570834293949e21ebffba7d8189bdaf68c0c551000025f155af3454170000", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r11, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000340)="7309c2ad4ee5689092c1670f953a80775234b271b0a737eea942c374bb4e8c0523686e49ff6250c145dfeae7c7c192e4a6b50d89f541c4ee267183080a03e4eb7c9cddb78d52ab39d22f968e371ef74a203c758357e71366b7d9d153add3d75f7ccd76f80bf83981ae1795c8152973f4ad75f64b57c194dfbebad09338bef73e236964d506aab40ca189ea53bc5af48b618ff226b57b5cc95a945718ba4b354bdcea4d3436118ff8368298d9e1729f63c1879f926624c147cd9eaa3e75c0201ff2c0bae25870e40cebf36a6b2a8bc426", &(0x7f0000000440)=@udp=r0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r12, @ANYBLOB="0100000002"], 0x40) 9m28.673284197s ago: executing program 6 (id=2294): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x3, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x7fff, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x81, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x2, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xfffe, 0x4}, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x80000) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 9m13.546101305s ago: executing program 34 (id=2294): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x3, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x7fff, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x81, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x2, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xfffe, 0x4}, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x80000) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 12.066993353s ago: executing program 4 (id=4125): r0 = io_uring_setup(0x78fb, &(0x7f00000000c0)={0x0, 0xc63b, 0x8, 0x2, 0x1f9}) io_uring_enter(r0, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 11.885582104s ago: executing program 4 (id=4126): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000005c0)=""/231, 0xe7) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) setns(0xc9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 10.580680157s ago: executing program 4 (id=4131): syz_usbip_server_init(0x1) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rt_tgsigqueueinfo(0x0, 0x0, 0xa, &(0x7f0000000180)={0x26, 0x6, 0x50}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @short}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) gettimeofday(0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) 8.521567431s ago: executing program 7 (id=4135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) (fail_nth: 5) socket$nl_generic(0x10, 0x3, 0x10) 7.963381684s ago: executing program 7 (id=4136): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) unshare(0x2c020400) (async) r0 = msgget$private(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@delqdisc={0x1d4, 0x25, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x2, 0x6}, {0x4}, {0xa, 0x3}}, [@TCA_STAB={0x1a0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4e, 0x1, 0x2, 0xfff, 0x1, 0x8000, 0x7fffffff}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x1, 0x400, 0x6, 0x1, 0x0, 0xc2, 0xa}}, {0x18, 0x2, [0x0, 0x9419, 0xbd, 0x2, 0xf74, 0x4, 0x2000, 0xb, 0x7, 0x2]}}, {{0x1c, 0x1, {0xd9, 0x0, 0xd, 0x1000, 0x0, 0x10001, 0x9, 0x6}}, {0x10, 0x2, [0xf7, 0x215, 0x6, 0x925, 0xfff8, 0xff]}}, {{0x1c, 0x1, {0x81, 0x9, 0xaf, 0x10001, 0x1, 0x2, 0x800, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0xcf, 0x9, 0x101, 0x2, 0x0, 0x0, 0x10000, 0x9}}, {0x16, 0x2, [0xfff7, 0xff, 0x342f, 0xf2e6, 0x2, 0x2, 0x4, 0x9, 0x9]}}, {{0x1c, 0x1, {0xf, 0x3, 0x1ff, 0x4e, 0x2, 0xa, 0x6f7, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x30, 0x7, 0x0, 0x1, 0x0, 0x9b, 0x6, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0x0]}}, {{0x1c, 0x1, {0xff, 0x20, 0xfffe, 0xcd66, 0x2, 0x10001, 0x5b, 0x5}}, {0xe, 0x2, [0x1153, 0xff, 0x6, 0x6, 0x3ff]}}, {{0x1c, 0x1, {0x4, 0x80, 0x2, 0x0, 0x0, 0xe5fa, 0xffffff1e, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x3c, 0x4, 0xc071, 0xfffffffb, 0x1, 0xd42f, 0xc7db, 0x3}}, {0xa, 0x2, [0x8, 0x5, 0x8000]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) (async) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x5, 0x1, 0x3000) 7.806865954s ago: executing program 1 (id=4137): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05070b20"], 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x31, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2008, 0x9, 0x3, 0x8100, 0xe, 0x3}, 0x30, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x5, 0xd4}}, './file0\x00'}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 6.68331055s ago: executing program 7 (id=4139): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003740)=[{&(0x7f00000008c0)}], 0x1) read(r0, &(0x7f0000000000)=""/256, 0x100) 6.464030627s ago: executing program 0 (id=4140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4014) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r4, &(0x7f0000000200)='fdinfo\x00') ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETS2(r3, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x800003f, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000040)={r10}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r10}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ppoll(&(0x7f00000002c0)=[{r11, 0x213}, {r11, 0x20}, {r11, 0x4008}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xa2ff]}, 0x8) 6.195231605s ago: executing program 5 (id=4142): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000005c0)=""/231, 0xe7) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) setns(0xc9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 6.103622994s ago: executing program 0 (id=4143): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002440)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0, 0x9}}, 0x4, 0x2}, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x101042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x100000000) mkdirat(0xffffffffffffff9c, 0x0, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=', 0x1f) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000019500)=""/4096) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000001440)={'pcl812\x00', [0x7fffffff, 0x8, 0x800002, 0x10000010, 0x7, 0x5, 0x0, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000006, 0x489, 0x7, 0x3, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x5) 6.003377394s ago: executing program 1 (id=4144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x48000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) connect$l2tp6(r7, &(0x7f0000000400)={0xa, 0x0, 0xffff, @mcast2, 0x9, 0x3}, 0x20) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:[:/\x00', 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3, 0x7fc00}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x3, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x6, 0x2ec74d53, 0xb, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0xa, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x4, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0xfffffffe, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x1c0000, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x80401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)}, 0x20000885) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000008060300000100070000000900020073797a320000000005000100070000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r11 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x1, 0xffffffff, 0x19}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r11, 0x101, 0x11, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.756905432s ago: executing program 7 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001280)={0xc, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b326d298b089b0708376d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b30300d074b0936c93b78130daa61d8e809ea882f5802b77f072272e0a1ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc81cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000005b00000a3621c56cea8d20fa911a0000db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae26966ad747253eb6d7c39e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213070000000000000090678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f2d87a0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed26e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c14c9dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d452800007edf07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e6588281638e13561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f7b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c717467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04578b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de202007aa49c2d284acfabe262fccfcbb2b75a4183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde70e8c77d95a3d361c0403abb171607caac2a3559ad4f75460849c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed0feffffffffffffffa03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d00007b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a33c715687e9d4afb96d6861aca47da734e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d54390204a4f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dac17b12ae5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a4b14a2bdc331f57a9817139a206fc7695000000002de20a4b8e3737fbb42913779c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12ac8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcaccdb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07080000005e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab6503000000000000007b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b33b895bdada71ac54e5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35ffffffff000000002856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea62fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339ca2fdb4a7f364949da398000000000000000d80a4fe654578376e599aff3565bea9935fd46edb44a78f615255490a4b62150172a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868f2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd66744d3e6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262d589394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7a5ba45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df0776b1b44322269c21bbec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb910000000b6ff957697c9ede5885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901202d9a8a2c3e3a29d070bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000365c870700", 0x1000}}, 0x1006) write$P9_RLCREATE(r4, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x80, 0x1, 0x7}, 0x7fffffff}}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x16}, 0x1, 0x0, 0x0, 0x40440c1}, 0x48094) 4.303403241s ago: executing program 4 (id=4146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) clock_nanosleep(0x2, 0xffc99a3b, &(0x7f0000000100), &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800021000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000080)={&(0x7f0000000040)=[{0x3, 0x1b77, 0x7, 0xfffffffffffffffe}, {0xc, 0x0, 0x9, 0x9}], 0x2, 0x20, 0x11}) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xffffffffffffffff) userfaultfd(0x80001) r6 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x7000000, 0x0) 4.293210865s ago: executing program 5 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000780)={0x0, 0x1828a515}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000800)={r2}, &(0x7f0000000840)=0x8) write(r1, &(0x7f0000000000)='3', 0x3e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x301}, 0x14}}, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/256, 0x100}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) 3.487842059s ago: executing program 0 (id=4148): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast2, 0x3}, 0x11) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='v', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0xec}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000018c0)=[{&(0x7f0000000140)="42300100e63e78906c7d19", 0xb}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 3.109200487s ago: executing program 7 (id=4149): syz_usb_connect(0x5, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0x96, 0x1e, 0x54, 0x20, 0x110a, 0x1653, 0xf500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xbc, 0x5, 0x0, 0x4c, 0x8, 0x64, 0x9}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) cachestat(r0, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) 3.106319021s ago: executing program 1 (id=4150): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x400, {0xffffffffffffffff}, {0xee00}, 0x4, 0x3}) prlimit64(r2, 0x3, &(0x7f0000000080)={0x8, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='<\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usbip_server_init(0x2) write$usbip_server(r8, &(0x7f0000000080)=@ret_unlink={{0x4, 0x1, 0x0, 0x0, 0xe5}, {0xfffffff7}}, 0x30) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYRES8=r6, @ANYRES32=r5, @ANYBLOB="0100000000000000000000000600000000000000370500000000000036"], 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000100)=0x9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.875587848s ago: executing program 4 (id=4151): r0 = userfaultfd(0x801) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xffffffff, 0x32e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x40, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb27a, 0x8000, 0x10000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000000, 0x2000, 0x2, 0xcd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 2.73752045s ago: executing program 5 (id=4152): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) 2.618652155s ago: executing program 5 (id=4153): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r2 = dup(r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r1, 0x80000) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x5a96b714b5118e1a, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r6 = accept4(r4, 0x0, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x121, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x20, 0x60, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x240048d4) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x3a, @multicast1, 0x4e20, 0x2, 'fo\x00', 0x4c8b614c90e92b55, 0x3, 0x9}, 0x2c) sendmsg$netlink(r6, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000002c0)={0x10, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f00000003c0)={0x58, 0x2b, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x46, 0x150, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="e8956d04a5311e4720e0809226fa23ad156ae6561911ac8bbf", @generic="7c7292a864111d50b12f57defc0089e0bfa6e65430ed39877382ce5064a635a8d9ec4b42e2"]}]}, 0x58}], 0x2, 0x0, 0x0, 0x20044880}, 0x24000801) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000300)=""/109, 0x6d}], 0x3}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x1d0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) 2.367882789s ago: executing program 5 (id=4154): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aab1b7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae0104000000000000835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f960b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9e6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def200009538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa423de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786bf2eb5dd386d3f1600efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051960200000000000000328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e04007e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b900c14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7b1164cc20de5b23146baa978611100", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.333912455s ago: executing program 1 (id=4155): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003740)=[{&(0x7f00000008c0)}], 0x1) read(r0, &(0x7f0000000000)=""/256, 0x100) 1.940641492s ago: executing program 0 (id=4156): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2, 0x0, 0x2}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0x100c, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfffe}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff41, 0x3, 0x2, 0x8, 0x3, 0x9, 0xffffffc0, 0xf0000000, 0x688, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0xe, 0x5, 0xe018, 0x5, 0xffffadc0, 0x8001, 0xf, 0x4, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x10001, 0x80, 0xffff, 0x1, 0xb, 0x0, 0x400, 0xe5, 0x93, 0x5, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x2, 0x3, 0x80, 0x0, 0x1, 0x9, 0x5, 0x403, 0x9, 0x3f32f5d7, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x101, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xeca, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x40, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0x5, 0x1, 0x7, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x8006, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x8, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0x4, 0x8005, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x5, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x5, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x804, 0xfffffffc, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x121, 0x7fff, 0x3, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020003, 0x0, 0x0, 0x2, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0xb4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000003, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x84, 0x1ff, 0x1109, 0x9, 0x1, 0x1, 0x2, 0x0, 0x8, 0x7f, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x9c482, 0x0) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.392073035s ago: executing program 1 (id=4157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000068000104030010000000008000000000000000000400020057cefe2d1c23ef2794dcb152c428d938fff464c943f288410a1bee6369d2640a930795f8c0e348e8626b572e154a850179bdc7796b828e9e55835584e6436332671b7aa5e595db6ede9ebdaefa50cd291a24e4faaeca4e7238103b97ef23487432891f2dce6ebb86b1241399ef4e60f78ca96c2353ac73865509c9ed14579b75c3752778fa8ba852fc1749329f55779cf8c77590b935e1fb38f46d031063031dfc44c9bb61178329335e5327ac0e21c75bc290015f04b63d39559ff36a71488fdb15ae65a294"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 605.443547ms ago: executing program 1 (id=4158): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x4, 0x60, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x6, 0x8, 0xa9, 0x10, 0x6}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xd, 0xfd, 0x8}]}, 0x4, [{0x49, &(0x7f0000000200)=@string={0x49, 0x3, "bf50694daf44bb81aa4c6b46461556ef5ff31d1ec20d4166a766c5d0e86a2361dcecab0307370a76515e84a9ede32094944cf7de3db242135f6dbd8477ff60ae06a58e8e9275a9"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0x8f, &(0x7f00000002c0)=ANY=[@ANYBLOB="8f036948437358c23a5e27f206bf42570d3736800f10dfd82031b67c6e83fab231af98cd786b30e7031e3e1337fb20588c13cabf8f427b69ed68a5dca1ced8222b04538736c474a44435c49cd1a20346343f48915ee4649c02fa9b306ea4a3c5a32980a5b2829da9c47708fddbacd4e60ca75de2fa044a731e36260557e4c3a25fa42e24f7f1166242ea13e11ca1d5"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc1a}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mq_open(0x0, 0x42, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r2, 0x5, &(0x7f0000000440)=0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x14, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffd, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000500)={0x0, 0x0, 0x9, 0x2}, 0x10) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x3a1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r11 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r11}}, 0x18) setns(0xc9, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x26e1, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01ff8d00"}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r13, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5, 0x19, 0x20000000, 0x4010005, 0x393a72d]}, &(0x7f0000000040)=0x54) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r1, 0x2, 0xffffff9e, &(0x7f0000000000)=""/36) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="02") 474.199874ms ago: executing program 0 (id=4159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x1f, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 283.830428ms ago: executing program 0 (id=4160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2d, 'perf_event'}]}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x101042, 0x17e) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x4008662c, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getsockopt$sock_int(r3, 0x1, 0x29, 0x0, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r3, 0x5}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='cubic', 0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000003c0)="0f21ee0f58984cd20f06360f01c4d40664660f3880ad0030640f0fe9970fc73a0fc73f0f015fae", 0x27}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$watch_queue(r9, &(0x7f00000002c0)=""/1, 0xfd74) 244.896678ms ago: executing program 4 (id=4161): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xfe, "7bb9595931022a67d559ec07484c6500"}) syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x210000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) 64.443236ms ago: executing program 7 (id=4162): socket(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2840, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xffffffffffffffbe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000000, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="640f00577864676567460fc729675718f4f40f073e0f01c50f01c80f0133263e460f2243c4e27d0e3166ba2100ec", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x6a, 0x1, 0x0, 0x0, {0x1, 0x3, 0x2}}, 0x14}}, 0x0) 0s ago: executing program 5 (id=4163): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xfe, "7bb9595931022a67d559ec07484c6500"}) syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x210000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) kernel console output (not intermixed with test programs): configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1490.858222][T18388] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1490.874554][ T30] audit: type=1400 audit(2273.937:3238): avc: denied { write } for pid=20690 comm="syz.5.3829" name="ports" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1490.998298][T18388] usb 5-1: device descriptor read/64, error -71 [ 1491.016503][T12969] usb 33-1: new low-speed USB device number 21 using vhci_hcd [ 1491.067093][T20705] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1491.067113][T20705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1491.082686][T20705] vhci_hcd vhci_hcd.0: Device attached [ 1491.101981][T18388] usb usb5-port1: attempt power cycle [ 1491.486799][T18388] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1491.541753][ T5831] usb 43-1: new low-speed USB device number 28 using vhci_hcd [ 1491.574131][T20697] vhci_hcd: connection reset by peer [ 1491.725101][ T55] vhci_hcd vhci_hcd.0: stop threads [ 1491.740470][T18388] usb 5-1: device descriptor read/8, error -71 [ 1491.765872][ T55] vhci_hcd vhci_hcd.0: release socket [ 1491.765919][ T55] vhci_hcd vhci_hcd.0: disconnect device [ 1491.867096][T20707] vhci_hcd: connection reset by peer [ 1491.960035][ T55] vhci_hcd vhci_hcd.5: stop threads [ 1491.974039][ T55] vhci_hcd vhci_hcd.5: release socket [ 1491.974079][ T55] vhci_hcd vhci_hcd.5: disconnect device [ 1492.121081][T18388] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1492.141970][T18388] usb 5-1: device descriptor read/8, error -71 [ 1492.245974][T18388] usb usb5-port1: unable to enumerate USB device [ 1492.387563][ T5608] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1492.878601][ T5608] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1493.178332][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.178359][ T5608] usb 2-1: Product: syz [ 1493.178376][ T5608] usb 2-1: Manufacturer: syz [ 1493.178387][ T5608] usb 2-1: SerialNumber: syz [ 1493.419426][T20730] syzkaller0: entered promiscuous mode [ 1493.419453][T20730] syzkaller0: entered allmulticast mode [ 1493.490865][T20728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.504194][T20732] loop7: detected capacity change from 0 to 7 [ 1493.524600][ C0] blk_print_req_error: 15 callbacks suppressed [ 1493.524630][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.524685][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.645269][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.645328][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.666897][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.666963][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.697021][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.697083][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.721391][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.721444][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.739580][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.739647][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.762358][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.762410][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.762765][T20732] ldm_validate_partition_table(): Disk read failed. [ 1493.772825][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.772866][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.773062][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.773099][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.808920][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1493.808991][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1493.850854][T20732] Dev loop7: unable to read RDB block 0 [ 1493.859324][T20732] loop7: unable to read partition table [ 1493.859446][T20732] loop7: partition table beyond EOD, truncated [ 1493.859472][T20732] loop_reread_partitions: partition scan of loop7 (j̖ 8?}X%`ր{֐ȵ4FLQ5) failed (rc=-5) [ 1493.914234][T20740] tipc: Started in network mode [ 1493.914263][T20740] tipc: Node identity 3a1a18c523ef, cluster identity 4711 [ 1493.999683][T20740] tipc: Enabled bearer , priority 0 [ 1494.019000][T20727] tipc: Resetting bearer [ 1494.139320][T20727] tipc: Disabling bearer [ 1494.201764][T20736] ldm_validate_partition_table(): Disk read failed. [ 1494.210769][T20736] Dev loop7: unable to read RDB block 0 [ 1494.217685][T20736] loop7: unable to read partition table [ 1494.217792][T20736] loop7: partition table beyond EOD, truncated [ 1494.239479][ T4968] ldm_validate_partition_table(): Disk read failed. [ 1494.250911][ T4968] Dev loop7: unable to read RDB block 0 [ 1494.259522][ T4968] loop7: unable to read partition table [ 1494.259643][ T4968] loop7: partition table beyond EOD, truncated [ 1494.317726][T20749] loop8: detected capacity change from 0 to 7 [ 1494.324621][T20749] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1494.332097][T20749] loop8: partition table partially beyond EOD, truncated [ 1494.332215][T20749] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1494.354914][T20749] loop8: p2 start 121280928 is beyond EOD, truncated [ 1494.501980][T11122] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1494.655053][T11122] usb 1-1: Using ep0 maxpacket: 32 [ 1494.664100][T11122] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1495.049393][T11122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.075153][T11122] usb 1-1: Product: syz [ 1495.075168][T11122] usb 1-1: Manufacturer: syz [ 1495.075177][T11122] usb 1-1: SerialNumber: syz [ 1495.308710][T11122] usb 1-1: config 0 descriptor?? [ 1495.496363][T11122] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1495.615688][ T5608] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1495.636568][ T5608] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1495.658808][ T5608] usb 2-1: USB disconnect, device number 126 [ 1495.902125][T12969] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1495.968973][ T5714] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1496.073544][ T5608] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1496.113659][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1496.121468][ T5714] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1496.131677][ T5714] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 1496.139883][ T5714] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.139897][ T5714] usb 5-1: config 8 has no interface number 0 [ 1496.139919][ T5714] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1496.139933][ T5714] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1496.139946][ T5714] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 1496.197178][ T5714] usb 5-1: string descriptor 0 read error: -22 [ 1496.203463][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.213962][T20762] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1496.223419][ T5714] metro_usb 5-1:8.109: Metrologic USB to Serial converter detected [ 1496.236345][ T5714] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1496.264716][ T5608] usb 2-1: Using ep0 maxpacket: 32 [ 1496.270309][ T5608] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1496.282809][ T5608] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1496.299843][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.299867][ T5608] usb 2-1: Product: syz [ 1496.299883][ T5608] usb 2-1: Manufacturer: syz [ 1496.299894][ T5608] usb 2-1: SerialNumber: syz [ 1496.336186][ T5608] snd-ua101 2-1:1.1: sample format descriptor not found [ 1496.349742][ T5608] snd-ua101 2-1:1.0: invalid num_altsetting [ 1496.428299][ T5608] usb 5-1: USB disconnect, device number 26 [ 1496.436609][ T5831] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1496.448076][ T5608] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1496.460181][ T5608] metro_usb 5-1:8.109: device disconnected [ 1496.491540][T11122] gspca_ov534_9: reg_w failed -71 [ 1496.516476][ T5714] usb 2-1: USB disconnect, device number 127 [ 1496.768794][T11122] gspca_ov534_9: Unknown sensor 0000 [ 1496.768854][T11122] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1497.005858][T11122] usb 1-1: USB disconnect, device number 126 [ 1497.870659][T11122] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1498.588659][T11122] usb 5-1: Using ep0 maxpacket: 32 [ 1498.595496][T11122] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1498.607954][T11122] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 1498.617896][T11122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.617920][T11122] usb 5-1: Product: syz [ 1498.617931][T11122] usb 5-1: Manufacturer: syz [ 1498.617949][T11122] usb 5-1: SerialNumber: syz [ 1498.652717][T11122] usb 5-1: config 0 descriptor?? [ 1498.667570][T11122] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1498.678694][T11122] dvb-usb: bulk message failed: -22 (2/0) [ 1498.691371][T11122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1498.702087][T11122] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1498.702113][T11122] usb 5-1: media controller created [ 1498.735569][T11122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1498.804937][T11122] usb 5-1: selecting invalid altsetting 7 [ 1498.813649][T11122] cxusb: set interface failed [ 1498.813676][T11122] dvb-usb: bulk message failed: -22 (1/0) [ 1498.841560][ T30] audit: type=1400 audit(2282.305:3239): avc: denied { map } for pid=20781 comm="syz.0.3855" path="socket:[72372]" dev="sockfs" ino=72372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1498.841599][ T30] audit: type=1400 audit(2282.305:3240): avc: denied { accept } for pid=20781 comm="syz.0.3855" path="socket:[72372]" dev="sockfs" ino=72372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1498.911278][ T30] audit: type=1400 audit(2282.368:3241): avc: denied { ioctl } for pid=20790 comm="syz.1.3857" path="socket:[72386]" dev="sockfs" ino=72386 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1498.943780][ T30] audit: type=1400 audit(2282.410:3242): avc: denied { write } for pid=20790 comm="syz.1.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1499.641880][T20795] overlayfs: missing 'lowerdir' [ 1499.647406][ T5831] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1499.731928][T11122] DVB: Unable to find symbol lgdt330x_attach() [ 1499.731947][T11122] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1499.799341][ T5831] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1499.810403][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.827240][ T5831] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1499.880818][T11122] rc_core: IR keymap rc-dvico-portable not found [ 1499.880838][T11122] Registered IR keymap rc-empty [ 1499.881362][T11122] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1499.882200][T11122] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input92 [ 1499.922776][ T5831] scsi host1: usb-storage 6-1:1.0 [ 1499.934300][T11122] dvb-usb: schedule remote query interval to 100 msecs. [ 1499.934328][T11122] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1499.972460][T11122] usb 5-1: USB disconnect, device number 27 [ 1500.070862][T11122] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1500.587395][T11122] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1501.316371][T11122] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1501.421652][T11122] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1501.430748][T11122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.445437][T11122] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1501.445465][T11122] usb 1-1: Manufacturer: syz [ 1501.473132][T11122] usb 1-1: config 0 descriptor?? [ 1501.649452][T11122] rc_core: IR keymap rc-hauppauge not found [ 1501.649473][T11122] Registered IR keymap rc-empty [ 1501.649989][T11122] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1501.650794][T11122] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 1501.733539][T11122] usb 1-1: USB disconnect, device number 127 [ 1501.843511][T20800] usb 6-1: reset high-speed USB device number 115 using dummy_hcd [ 1501.874750][ T5831] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1502.017306][ T5831] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1502.029286][ T5831] usb 2-1: config 128 interface 0 has no altsetting 0 [ 1502.029339][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.035224][T20836] Bluetooth: MGMT ver 1.23 [ 1503.483267][T20847] FAULT_INJECTION: forcing a failure. [ 1503.483267][T20847] name failslab, interval 1, probability 1, space 0, times 0 [ 1503.483329][T20847] CPU: 0 UID: 0 PID: 20847 Comm: syz.5.3872 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.483345][T20847] Tainted: [L]=SOFTLOCKUP [ 1503.483350][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1503.483357][T20847] Call Trace: [ 1503.483362][T20847] [ 1503.483367][T20847] dump_stack_lvl+0x100/0x190 [ 1503.483388][T20847] should_fail_ex.cold+0x5/0xa [ 1503.483405][T20847] should_failslab+0xc2/0x120 [ 1503.483420][T20847] __kmalloc_noprof+0xfc/0x840 [ 1503.483431][T20847] ? rcu_is_watching+0x13/0xc0 [ 1503.483449][T20847] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1503.483466][T20847] tomoyo_realpath_from_path+0xb6/0x690 [ 1503.483481][T20847] tomoyo_path_number_perm+0x23c/0x580 [ 1503.483497][T20847] ? tomoyo_path_number_perm+0x22e/0x580 [ 1503.483515][T20847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1503.483537][T20847] ? __lock_acquire+0x4c5/0x1ec0 [ 1503.483556][T20847] ? __fget_files+0x34/0x3d0 [ 1503.483569][T20847] ? find_held_lock+0x2b/0x80 [ 1503.483584][T20847] ? hook_file_ioctl_common+0x140/0x440 [ 1503.483601][T20847] ? __fget_files+0x21f/0x3d0 [ 1503.483616][T20847] security_file_ioctl+0xd3/0x230 [ 1503.483635][T20847] __x64_sys_ioctl+0xb7/0x210 [ 1503.483648][T20847] do_syscall_64+0x123/0x790 [ 1503.483663][T20847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.483674][T20847] RIP: 0033:0x7f620099e159 [ 1503.483684][T20847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.483695][T20847] RSP: 002b:00007f62017db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.483707][T20847] RAX: ffffffffffffffda RBX: 00007f6200c25fa0 RCX: 00007f620099e159 [ 1503.483714][T20847] RDX: 0000200000000c80 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1503.483721][T20847] RBP: 00007f62017db090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.483727][T20847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.483734][T20847] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1503.483749][T20847] [ 1503.556977][T20847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1503.754639][ T306] nvmet: connect request for invalid subsystem testsubsys! [ 1503.784916][T20834] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1504.030397][T12969] usb 6-1: USB disconnect, device number 115 [ 1504.071392][ T5831] usb 2-1: string descriptor 0 read error: -71 [ 1504.185663][ T5831] usb 2-1: selecting invalid altsetting 3 [ 1504.185689][ T5831] comedi comedi5: could not set alternate setting 3 in high speed [ 1504.185706][ T5831] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1504.236697][ T5831] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1504.248827][ T5831] usb 2-1: USB disconnect, device number 2 [ 1504.607553][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1504.916404][T20853] nvme_rdma: malformed address passed: 1:4420 [ 1504.981475][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 1505.176204][ T5831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1505.328761][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 1505.328793][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 1505.328822][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.463345][ T5831] usb 2-1: config 0 descriptor?? [ 1505.676319][ T5831] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1505.922113][ T5831] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1506.736950][T12969] usb 2-1: USB disconnect, device number 3 [ 1506.970524][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1506.977287][ T5831] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1506.987883][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.987911][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.987939][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.021284][ T5831] usb 5-1: config 0 descriptor?? [ 1507.033069][ T5831] hub 5-1:0.0: USB hub found [ 1507.770414][ T5831] hub 5-1:0.0: 1 port detected [ 1508.100499][ T30] audit: type=1400 audit(2292.016:3243): avc: denied { mount } for pid=20889 comm="syz.5.3889" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1508.249253][T20899] FAULT_INJECTION: forcing a failure. [ 1508.249253][T20899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1508.264204][T20899] CPU: 0 UID: 0 PID: 20899 Comm: syz.5.3892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.264224][T20899] Tainted: [L]=SOFTLOCKUP [ 1508.264229][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1508.264237][T20899] Call Trace: [ 1508.264242][T20899] [ 1508.264248][T20899] dump_stack_lvl+0x100/0x190 [ 1508.264269][T20899] should_fail_ex.cold+0x5/0xa [ 1508.264286][T20899] _copy_from_user+0x2e/0xd0 [ 1508.264306][T20899] __sys_bpf+0x2f5/0x4a30 [ 1508.264321][T20899] ? __pfx___sys_bpf+0x10/0x10 [ 1508.264330][T20899] ? find_held_lock+0x2b/0x80 [ 1508.264347][T20899] ? futex_wake+0x4ea/0x5e0 [ 1508.264375][T20899] ? rcu_read_lock_any_held+0x6a/0x90 [ 1508.264393][T20899] ? find_held_lock+0x2b/0x80 [ 1508.264408][T20899] ? ksys_write+0x190/0x250 [ 1508.264418][T20899] ? ksys_write+0x190/0x250 [ 1508.264437][T20899] ? __x64_sys_futex+0x34f/0x4d0 [ 1508.264450][T20899] ? __x64_sys_futex+0x358/0x4d0 [ 1508.264466][T20899] ? xfd_validate_state+0x129/0x190 [ 1508.264479][T20899] ? __x64_sys_bpf+0xce/0x140 [ 1508.264489][T20899] __x64_sys_bpf+0xce/0x140 [ 1508.264501][T20899] ? do_syscall_64+0xae/0x790 [ 1508.264516][T20899] do_syscall_64+0x123/0x790 [ 1508.264530][T20899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.264542][T20899] RIP: 0033:0x7f620099e159 [ 1508.264552][T20899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.264563][T20899] RSP: 002b:00007f62017db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1508.264575][T20899] RAX: ffffffffffffffda RBX: 00007f6200c25fa0 RCX: 00007f620099e159 [ 1508.264584][T20899] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 1508.264592][T20899] RBP: 00007f6200a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1508.264599][T20899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.264606][T20899] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1508.264622][T20899] [ 1508.312659][ T5714] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1508.370488][ T5831] hub 5-1:0.0: activate --> -90 [ 1508.413104][T12969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1508.545548][ T5714] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1508.559225][ T5714] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1508.559251][ T5714] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1508.559269][ T5714] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1508.559287][ T5714] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1508.559322][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1508.559335][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1508.630955][ T5714] usb 2-1: string descriptor 0 read error: -22 [ 1508.631037][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.647991][ T5714] usb 2-1: config 0 descriptor?? [ 1508.653394][T20895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1508.662197][ T5714] hub 2-1:0.0: bad descriptor, ignoring hub [ 1508.662221][ T5714] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1508.676094][T12969] usb 1-1: Using ep0 maxpacket: 8 [ 1508.682032][T12969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1508.693106][T12969] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1508.693147][T12969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1508.693175][T12969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1508.693189][T12969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1508.693202][T12969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.693223][T12969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.738809][ T5714] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input94 [ 1508.918879][T20901] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 1508.933729][ T5714] usb 2-1: USB disconnect, device number 4 [ 1508.983168][T12969] usb 1-1: usb_control_msg returned -32 [ 1508.983203][T12969] usbtmc 1-1:16.0: can't read capabilities [ 1509.468604][T20916] loop8: detected capacity change from 0 to 7 [ 1509.475927][T20916] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1509.483377][T20916] loop8: partition table partially beyond EOD, truncated [ 1509.483495][T20916] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1509.499447][T20916] loop8: p2 start 121280928 is beyond EOD, truncated [ 1509.713866][T20917] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1509.761039][ T5714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1509.903791][ T5714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1509.914991][ T5714] usb 2-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1509.915029][ T5714] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1509.915044][ T5714] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1509.915064][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.963045][ T5714] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1510.010231][ T5831] usb 5-1-port1: config error [ 1510.021790][ T5831] usb 5-1-port1: connect-debounce failed [ 1510.113849][ T30] audit: type=1400 audit(2294.137:3244): avc: denied { write } for pid=20922 comm="syz.4.3898" name="ports" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1510.138873][ T30] audit: type=1400 audit(2294.169:3245): avc: denied { write } for pid=20922 comm="syz.4.3898" name="ports" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1510.171169][T12969] usb 5-1: USB disconnect, device number 28 [ 1510.198057][ T5714] usb 2-1: string descriptor 0 read error: -71 [ 1510.220441][ T5714] usb 2-1: USB disconnect, device number 5 [ 1510.257340][ T5831] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1510.431562][ T5831] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1510.543369][ T5831] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1510.655377][ T5831] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1511.075796][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.102563][ T5831] usb 6-1: Product: syz [ 1511.102579][ T5831] usb 6-1: Manufacturer: syz [ 1511.102588][ T5831] usb 6-1: SerialNumber: syz [ 1511.295030][ T5831] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 1511.353362][ T5831] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1511.384076][ T5714] usb 1-1: USB disconnect, device number 2 [ 1511.392483][ T5831] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1511.507366][T20933] No buffer was provided with the request [ 1511.876575][ T5714] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1512.198409][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 1512.250218][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1512.484463][ T5714] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.518107][ T5714] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.542013][T20921] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 1512.542045][T20921] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 1512.559704][ T5714] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1512.559719][ T5714] usb 1-1: Product: syz [ 1512.559727][ T5714] usb 1-1: Manufacturer: syz [ 1512.580823][T20921] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 1512.600556][ T5714] hub 1-1:4.0: USB hub found [ 1512.693652][T20937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3897'. [ 1512.720685][ T30] audit: type=1400 audit(2296.867:3246): avc: denied { name_bind } for pid=20920 comm="syz.5.3897" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1513.667510][ T5714] hub 1-1:4.0: 5 ports detected [ 1513.674236][ T5714] hub 1-1:4.0: insufficient power available to use all downstream ports [ 1513.997053][T20954] kAFS: No cell specified [ 1514.002710][ T5714] hub 1-1:4.0: config failed, can't get hub status (err -5) [ 1514.205606][T20964] syz_tun: entered allmulticast mode [ 1514.224990][T20964] dvmrp6: entered allmulticast mode [ 1514.241072][T20963] syz_tun: left allmulticast mode [ 1514.249863][T20966] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3910'. [ 1514.295070][ T5714] usb 1-1: USB disconnect, device number 3 [ 1515.427618][T20976] Bluetooth: MGMT ver 1.23 [ 1515.593950][ T5826] usb 6-1: USB disconnect, device number 116 [ 1515.609446][ T5831] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1515.623001][ T5714] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1515.650538][ T5826] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1515.669309][ T5826] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1515.669724][ T5826] ti_usb_3410_5052 6-1:2.0: device disconnected [ 1515.824374][T20976] nvme nvme0: rdma connection establishment failed (-104) [ 1515.838768][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1515.844661][ T5831] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1515.855614][ T5714] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1515.980583][T20981] FAULT_INJECTION: forcing a failure. [ 1515.980583][T20981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.980614][T20981] CPU: 0 UID: 0 PID: 20981 Comm: syz.5.3916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.980631][T20981] Tainted: [L]=SOFTLOCKUP [ 1515.980635][T20981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1515.980642][T20981] Call Trace: [ 1515.980646][T20981] [ 1515.980651][T20981] dump_stack_lvl+0x100/0x190 [ 1515.980670][T20981] should_fail_ex.cold+0x5/0xa [ 1515.980688][T20981] _copy_to_user+0x32/0xd0 [ 1515.980708][T20981] simple_read_from_buffer+0xcb/0x170 [ 1515.980723][T20981] proc_fail_nth_read+0x1af/0x230 [ 1515.980738][T20981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1515.980753][T20981] ? rw_verify_area+0xce/0x6d0 [ 1515.980769][T20981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1515.980782][T20981] vfs_read+0x1e4/0xb40 [ 1515.980793][T20981] ? lock_acquire+0x1d1/0x380 [ 1515.980806][T20981] ? __fget_files+0x34/0x3d0 [ 1515.980819][T20981] ? __pfx_vfs_read+0x10/0x10 [ 1515.980829][T20981] ? find_held_lock+0x2b/0x80 [ 1515.980844][T20981] ? __fget_files+0x215/0x3d0 [ 1515.980860][T20981] ? __fget_files+0x21f/0x3d0 [ 1515.980877][T20981] ksys_read+0x12a/0x250 [ 1515.980888][T20981] ? __pfx_ksys_read+0x10/0x10 [ 1515.980903][T20981] do_syscall_64+0x123/0x790 [ 1515.980917][T20981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.980929][T20981] RIP: 0033:0x7f620095e98e [ 1515.980940][T20981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1515.980951][T20981] RSP: 002b:00007f62017dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1515.980963][T20981] RAX: ffffffffffffffda RBX: 00007f62017db6c0 RCX: 00007f620095e98e [ 1515.980971][T20981] RDX: 000000000000000f RSI: 00007f62017db0a0 RDI: 0000000000000005 [ 1515.980977][T20981] RBP: 00007f62017db090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.980984][T20981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.980991][T20981] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1515.981005][T20981] [ 1516.233233][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.233264][ T5714] usb 1-1: Product: syz [ 1516.233272][ T5714] usb 1-1: Manufacturer: syz [ 1516.233281][ T5714] usb 1-1: SerialNumber: syz [ 1516.288808][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.288825][ T5831] usb 5-1: Product: syz [ 1516.288834][ T5831] usb 5-1: Manufacturer: syz [ 1516.288843][ T5831] usb 5-1: SerialNumber: syz [ 1516.319216][ T5831] usb 5-1: config 0 descriptor?? [ 1516.331430][ T5831] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1516.370988][T20985] FAULT_INJECTION: forcing a failure. [ 1516.370988][T20985] name failslab, interval 1, probability 1, space 0, times 0 [ 1516.389420][T20985] CPU: 0 UID: 0 PID: 20985 Comm: syz.5.3917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.389443][T20985] Tainted: [L]=SOFTLOCKUP [ 1516.389448][T20985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1516.389457][T20985] Call Trace: [ 1516.389462][T20985] [ 1516.389467][T20985] dump_stack_lvl+0x100/0x190 [ 1516.389489][T20985] should_fail_ex.cold+0x5/0xa [ 1516.389506][T20985] should_failslab+0xc2/0x120 [ 1516.389520][T20985] __kmalloc_noprof+0xfc/0x840 [ 1516.389532][T20985] ? mtd_kmalloc_up_to+0x152/0x190 [ 1516.389553][T20985] mtd_kmalloc_up_to+0x152/0x190 [ 1516.389571][T20985] mtdchar_write+0x195/0x5d0 [ 1516.389587][T20985] ? __lock_acquire+0x4c5/0x1ec0 [ 1516.389600][T20985] ? __pfx_mtdchar_write+0x10/0x10 [ 1516.389617][T20985] ? __import_iovec+0x1d2/0x640 [ 1516.389634][T20985] ? avc_policy_seqno+0x9/0x20 [ 1516.389648][T20985] ? selinux_file_permission+0x8f/0x6d0 [ 1516.389668][T20985] ? bpf_lsm_file_permission+0x9/0x10 [ 1516.389683][T20985] ? security_file_permission+0x76/0x210 [ 1516.389696][T20985] ? rw_verify_area+0xce/0x6d0 [ 1516.389713][T20985] ? __pfx_mtdchar_write+0x10/0x10 [ 1516.389726][T20985] vfs_writev+0x5ed/0xdd0 [ 1516.389747][T20985] ? __pfx_vfs_writev+0x10/0x10 [ 1516.389766][T20985] ? lock_acquire+0x1d1/0x380 [ 1516.389777][T20985] ? __fget_files+0x34/0x3d0 [ 1516.389795][T20985] ? __fget_files+0x21f/0x3d0 [ 1516.389811][T20985] ? do_writev+0x13e/0x340 [ 1516.389827][T20985] do_writev+0x13e/0x340 [ 1516.389843][T20985] ? __pfx_do_writev+0x10/0x10 [ 1516.389864][T20985] do_syscall_64+0x123/0x790 [ 1516.389879][T20985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.389890][T20985] RIP: 0033:0x7f620099e159 [ 1516.389901][T20985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.389912][T20985] RSP: 002b:00007f62017db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1516.389924][T20985] RAX: ffffffffffffffda RBX: 00007f6200c25fa0 RCX: 00007f620099e159 [ 1516.389931][T20985] RDX: 0000000000000001 RSI: 0000200000003440 RDI: 0000000000000003 [ 1516.389938][T20985] RBP: 00007f62017db090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.389944][T20985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.389951][T20985] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1516.389964][T20985] [ 1517.606925][T20993] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1517.627239][ T5831] gspca_ov534_9: reg_w failed -71 [ 1517.958523][ T5831] gspca_ov534_9: Unknown sensor 0000 [ 1517.958582][ T5831] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1518.352075][ T5831] usb 5-1: USB disconnect, device number 29 [ 1518.966077][ T30] audit: type=1326 audit(2303.418:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21007 comm="syz.4.3923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcac8d9e159 code=0x0 [ 1519.055899][ T30] audit: type=1400 audit(2303.523:3248): avc: denied { write } for pid=21012 comm="syz.1.3924" name="subsystems" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.087049][ T30] audit: type=1400 audit(2303.565:3249): avc: denied { write } for pid=21012 comm="syz.1.3924" name="ports" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.128641][T21015] syzkaller0: entered promiscuous mode [ 1519.128665][T21015] syzkaller0: entered allmulticast mode [ 1519.145842][ T30] audit: type=1400 audit(2303.618:3250): avc: denied { write } for pid=21012 comm="syz.1.3924" name="subsystems" dev="configfs" ino=73256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.170898][ T30] audit: type=1400 audit(2303.649:3251): avc: denied { create } for pid=21012 comm="syz.1.3924" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1519.232309][ T30] audit: type=1400 audit(2303.712:3252): avc: denied { write } for pid=21012 comm="syz.1.3924" name="subsystems" dev="configfs" ino=73256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.472997][T21027] batadv_slave_1: entered promiscuous mode [ 1519.766220][T21011] batadv_slave_1: left promiscuous mode [ 1519.966974][T21037] bridge_slave_1: entered promiscuous mode [ 1521.064972][ T5714] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1521.065442][ T5714] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1521.099476][ T5714] usb 1-1: USB disconnect, device number 4 [ 1521.215790][T21055] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1521.215808][T21055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1521.215869][T21055] vhci_hcd vhci_hcd.0: Device attached [ 1521.273762][T21060] FAULT_INJECTION: forcing a failure. [ 1521.273762][T21060] name failslab, interval 1, probability 1, space 0, times 0 [ 1521.273795][T21060] CPU: 0 UID: 0 PID: 21060 Comm: syz.5.3937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.273811][T21060] Tainted: [L]=SOFTLOCKUP [ 1521.273816][T21060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1521.273822][T21060] Call Trace: [ 1521.273827][T21060] [ 1521.273832][T21060] dump_stack_lvl+0x100/0x190 [ 1521.273853][T21060] should_fail_ex.cold+0x5/0xa [ 1521.273869][T21060] should_failslab+0xc2/0x120 [ 1521.273883][T21060] __kmalloc_cache_noprof+0x91/0x6d0 [ 1521.273900][T21060] ? proc_thread_self_get_link+0x1a6/0x210 [ 1521.273918][T21060] proc_thread_self_get_link+0x1a6/0x210 [ 1521.273934][T21060] pick_link+0xac2/0x13c0 [ 1521.273943][T21060] ? selinux_inode_permission+0x14a/0x1130 [ 1521.273958][T21060] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1521.273975][T21060] step_into_slowpath+0x9ba/0xf90 [ 1521.273989][T21060] ? __pfx_step_into_slowpath+0x10/0x10 [ 1521.274003][T21060] ? lookup_fast+0x2da/0x600 [ 1521.274012][T21060] ? inode_permission+0x374/0x620 [ 1521.274030][T21060] link_path_walk+0xf28/0x1cc0 [ 1521.274046][T21060] path_openat+0x1ac/0x2440 [ 1521.274061][T21060] ? __pfx_path_openat+0x10/0x10 [ 1521.274078][T21060] do_file_open+0x20e/0x430 [ 1521.274093][T21060] ? __pfx_do_file_open+0x10/0x10 [ 1521.274116][T21060] ? _raw_spin_unlock+0x28/0x50 [ 1521.274127][T21060] ? alloc_fd+0x471/0x7a0 [ 1521.274144][T21060] do_sys_openat2+0x10f/0x1e0 [ 1521.274159][T21060] ? __pfx_do_sys_openat2+0x10/0x10 [ 1521.274174][T21060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1521.274192][T21060] __x64_sys_openat+0x12d/0x210 [ 1521.274207][T21060] ? __pfx___x64_sys_openat+0x10/0x10 [ 1521.274228][T21060] do_syscall_64+0x123/0x790 [ 1521.274242][T21060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.274254][T21060] RIP: 0033:0x7f620095e98e [ 1521.274270][T21060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1521.274280][T21060] RSP: 002b:00007f62017daf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1521.274292][T21060] RAX: ffffffffffffffda RBX: 00007f62017db6c0 RCX: 00007f620095e98e [ 1521.274299][T21060] RDX: 0000000000000002 RSI: 00007f6200a3492b RDI: ffffffffffffff9c [ 1521.274306][T21060] RBP: 00007f6200a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1521.274312][T21060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1521.274319][T21060] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1521.274333][T21060] [ 1521.274607][T21060] FAULT_INJECTION: forcing a failure. [ 1521.274607][T21060] name failslab, interval 1, probability 1, space 0, times 0 [ 1521.274624][T21060] CPU: 0 UID: 0 PID: 21060 Comm: syz.5.3937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.274639][T21060] Tainted: [L]=SOFTLOCKUP [ 1521.274643][T21060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1521.274649][T21060] Call Trace: [ 1521.274653][T21060] [ 1521.274657][T21060] dump_stack_lvl+0x100/0x190 [ 1521.274674][T21060] should_fail_ex.cold+0x5/0xa [ 1521.274689][T21060] should_failslab+0xc2/0x120 [ 1521.274703][T21060] __kmalloc_noprof+0xfc/0x840 [ 1521.274714][T21060] ? bpf_ksym_find+0x128/0x1c0 [ 1521.274730][T21060] ? constrain_params_by_rules+0x175/0xd20 [ 1521.274747][T21060] constrain_params_by_rules+0x175/0xd20 [ 1521.274766][T21060] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1521.274787][T21060] ? rcu_is_watching+0x13/0xc0 [ 1521.274802][T21060] ? snd_interval_refine+0x2d0/0x580 [ 1521.274822][T21060] snd_pcm_hw_refine+0x82a/0xb40 [ 1521.274837][T21060] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1521.274853][T21060] ? do_raw_spin_lock+0x128/0x260 [ 1521.274869][T21060] ? mark_held_locks+0x40/0x70 [ 1521.274882][T21060] snd_pcm_hw_params+0x3b4/0x1cd0 [ 1521.274898][T21060] ? __might_fault+0xc5/0x140 [ 1521.274915][T21060] ? find_held_lock+0x2b/0x80 [ 1521.274930][T21060] ? __might_fault+0xc5/0x140 [ 1521.274945][T21060] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1521.274965][T21060] ? _copy_from_user+0x59/0xd0 [ 1521.274984][T21060] snd_pcm_common_ioctl+0x13a3/0x3490 [ 1521.275002][T21060] ? do_vfs_ioctl+0x226/0x13e0 [ 1521.275020][T21060] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1521.275037][T21060] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 1521.275055][T21060] ? __fget_files+0x34/0x3d0 [ 1521.275076][T21060] snd_pcm_ioctl+0x84/0xc0 [ 1521.275091][T21060] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 1521.275108][T21060] __x64_sys_ioctl+0x18e/0x210 [ 1521.275120][T21060] do_syscall_64+0x123/0x790 [ 1521.275134][T21060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.275146][T21060] RIP: 0033:0x7f620099e159 [ 1521.275155][T21060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.275165][T21060] RSP: 002b:00007f62017db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.275178][T21060] RAX: ffffffffffffffda RBX: 00007f6200c25fa0 RCX: 00007f620099e159 [ 1521.275185][T21060] RDX: 0000200000000200 RSI: 00000000c2604111 RDI: 0000000000000003 [ 1521.275192][T21060] RBP: 00007f62017db090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.275199][T21060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.275205][T21060] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1521.275219][T21060] [ 1521.460189][ T5831] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1521.581349][T12969] usb 35-1: new low-speed USB device number 19 using vhci_hcd [ 1521.704253][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1521.721063][ T5831] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1521.803646][ T5831] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 1521.971637][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.971655][ T5831] usb 5-1: Product: syz [ 1521.971664][ T5831] usb 5-1: Manufacturer: syz [ 1521.971674][ T5831] usb 5-1: SerialNumber: syz [ 1522.024165][T21056] vhci_hcd: connection reset by peer [ 1522.035733][ T5831] usb 5-1: config 0 descriptor?? [ 1522.045405][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1522.045421][ T12] vhci_hcd vhci_hcd.1: release socket [ 1522.045446][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1522.144678][ T5831] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1522.195542][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 1522.205096][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1522.217412][ T5831] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1522.217458][ T5831] usb 5-1: media controller created [ 1522.241375][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1522.317041][T21067] FAULT_INJECTION: forcing a failure. [ 1522.317041][T21067] name failslab, interval 1, probability 1, space 0, times 0 [ 1522.317078][T21067] CPU: 0 UID: 0 PID: 21067 Comm: syz.7.3938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.317097][T21067] Tainted: [L]=SOFTLOCKUP [ 1522.317102][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1522.317110][T21067] Call Trace: [ 1522.317116][T21067] [ 1522.317122][T21067] dump_stack_lvl+0x100/0x190 [ 1522.317144][T21067] should_fail_ex.cold+0x5/0xa [ 1522.317163][T21067] should_failslab+0xc2/0x120 [ 1522.317179][T21067] __kmalloc_cache_noprof+0x91/0x6d0 [ 1522.317196][T21067] ? kobject_uevent_env+0x263/0x18b0 [ 1522.317217][T21067] kobject_uevent_env+0x263/0x18b0 [ 1522.317237][T21067] ? rcu_is_watching+0x13/0xc0 [ 1522.317253][T21067] gadget_bind_driver+0x773/0xbf0 [ 1522.317272][T21067] ? urbs_show+0x371/0x440 [ 1522.317286][T21067] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1522.317304][T21067] really_probe+0x241/0xa60 [ 1522.317318][T21067] __driver_probe_device+0x210/0x460 [ 1522.317329][T21067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1522.317343][T21067] driver_probe_device+0x4a/0x140 [ 1522.317355][T21067] __driver_attach+0x21f/0x5b0 [ 1522.317366][T21067] ? __pfx___driver_attach+0x10/0x10 [ 1522.317378][T21067] bus_for_each_dev+0x13e/0x1d0 [ 1522.317396][T21067] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1522.317412][T21067] ? bus_add_driver+0x2b5/0x5b0 [ 1522.317432][T21067] bus_add_driver+0x305/0x5b0 [ 1522.317450][T21067] driver_register+0x1e2/0x360 [ 1522.317461][T21067] ? rcu_is_watching+0x13/0xc0 [ 1522.317476][T21067] usb_gadget_register_driver_owner+0x132/0x210 [ 1522.317495][T21067] raw_ioctl+0x1a85/0x2b80 [ 1522.317515][T21067] ? __pfx_raw_ioctl+0x10/0x10 [ 1522.317530][T21067] ? selinux_file_ioctl+0x13b/0x290 [ 1522.317541][T21067] ? selinux_file_ioctl+0xb6/0x290 [ 1522.317553][T21067] ? __pfx_raw_ioctl+0x10/0x10 [ 1522.317569][T21067] __x64_sys_ioctl+0x18e/0x210 [ 1522.317582][T21067] do_syscall_64+0x123/0x790 [ 1522.317599][T21067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.317611][T21067] RIP: 0033:0x7fa844d9ddeb [ 1522.317623][T21067] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1522.317635][T21067] RSP: 002b:00007fa845bebf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.317646][T21067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa844d9ddeb [ 1522.317654][T21067] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1522.317661][T21067] RBP: 00007fa845becfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1522.317668][T21067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.317674][T21067] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1522.317689][T21067] [ 1522.448074][ T5831] usb 5-1: selecting invalid altsetting 7 [ 1522.448090][ T5831] cxusb: set interface failed [ 1522.448097][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1522.748459][ T5831] DVB: Unable to find symbol lgdt330x_attach() [ 1522.748480][ T5831] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1522.776944][T21074] FAULT_INJECTION: forcing a failure. [ 1522.776944][T21074] name failslab, interval 1, probability 1, space 0, times 0 [ 1522.776982][T21074] CPU: 0 UID: 0 PID: 21074 Comm: syz.1.3941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.777002][T21074] Tainted: [L]=SOFTLOCKUP [ 1522.777007][T21074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1522.777016][T21074] Call Trace: [ 1522.777021][T21074] [ 1522.777027][T21074] dump_stack_lvl+0x100/0x190 [ 1522.777051][T21074] should_fail_ex.cold+0x5/0xa [ 1522.777068][T21074] should_failslab+0xc2/0x120 [ 1522.777083][T21074] __kmalloc_noprof+0xfc/0x840 [ 1522.777096][T21074] ? bpf_ksym_find+0x128/0x1c0 [ 1522.777112][T21074] ? constrain_params_by_rules+0x175/0xd20 [ 1522.777131][T21074] constrain_params_by_rules+0x175/0xd20 [ 1522.777150][T21074] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1522.777172][T21074] ? rcu_is_watching+0x13/0xc0 [ 1522.777187][T21074] ? snd_interval_refine+0x2d0/0x580 [ 1522.777210][T21074] snd_pcm_hw_refine+0x82a/0xb40 [ 1522.777228][T21074] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1522.777249][T21074] ? do_raw_spin_lock+0x128/0x260 [ 1522.777265][T21074] ? mark_held_locks+0x40/0x70 [ 1522.777278][T21074] snd_pcm_hw_params+0x3b4/0x1cd0 [ 1522.777294][T21074] ? __might_fault+0xc5/0x140 [ 1522.777311][T21074] ? find_held_lock+0x2b/0x80 [ 1522.777326][T21074] ? __might_fault+0xc5/0x140 [ 1522.777341][T21074] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1522.777361][T21074] ? _copy_from_user+0x59/0xd0 [ 1522.777380][T21074] snd_pcm_common_ioctl+0x13a3/0x3490 [ 1522.777398][T21074] ? do_vfs_ioctl+0x226/0x13e0 [ 1522.777416][T21074] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1522.777434][T21074] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 1522.777451][T21074] ? __fget_files+0x34/0x3d0 [ 1522.777473][T21074] snd_pcm_ioctl+0x84/0xc0 [ 1522.777490][T21074] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 1522.777509][T21074] __x64_sys_ioctl+0x18e/0x210 [ 1522.777522][T21074] do_syscall_64+0x123/0x790 [ 1522.777538][T21074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.777550][T21074] RIP: 0033:0x7f031b79e159 [ 1522.777561][T21074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.777573][T21074] RSP: 002b:00007f031c722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.777587][T21074] RAX: ffffffffffffffda RBX: 00007f031ba25fa0 RCX: 00007f031b79e159 [ 1522.777596][T21074] RDX: 0000200000000200 RSI: 00000000c2604111 RDI: 0000000000000003 [ 1522.777604][T21074] RBP: 00007f031b835024 R08: 0000000000000000 R09: 0000000000000000 [ 1522.777612][T21074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.777621][T21074] R13: 00007f031ba26038 R14: 00007f031ba25fa0 R15: 00007ffc2c917f38 [ 1522.777638][T21074] [ 1523.190292][ T5831] rc_core: IR keymap rc-dvico-portable not found [ 1523.191357][ T5831] Registered IR keymap rc-empty [ 1523.192058][ T5831] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1523.192873][ T5831] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input95 [ 1523.232919][ T5831] dvb-usb: schedule remote query interval to 100 msecs. [ 1523.242376][ T5831] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1523.261465][ T5831] usb 5-1: USB disconnect, device number 30 [ 1523.320294][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1523.545283][T21081] binder: 21078:21081 ioctl c0306201 2000000001c0 returned -14 [ 1523.920333][T21081] binder: 21078:21081 ioctl 5402 200000000040 returned -22 [ 1523.971391][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1524.193570][ T5831] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1525.291218][T21095] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1525.291237][T21095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1525.307680][T21095] vhci_hcd vhci_hcd.0: Device attached [ 1525.487645][T21107] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3949'. [ 1525.497911][ T30] audit: type=1400 audit(2310.295:3253): avc: denied { lock } for pid=21098 comm="syz.5.3949" path="socket:[73677]" dev="sockfs" ino=73677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1525.524101][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3949'. [ 1525.535967][T21107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.537657][T21107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.557303][ T5714] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1525.565035][T18421] ffs_data_put(): freeing [ 1525.938381][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 1526.106040][T21096] vhci_hcd: connection reset by peer [ 1526.176008][ T306] vhci_hcd vhci_hcd.7: stop threads [ 1526.197116][ T306] vhci_hcd vhci_hcd.7: release socket [ 1526.197151][ T306] vhci_hcd vhci_hcd.7: disconnect device [ 1526.457066][T12969] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1528.133056][T12969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1528.515885][T12969] usb 1-1: Using ep0 maxpacket: 32 [ 1528.568371][T12969] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1528.586929][T12969] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 1528.602637][T12969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.602662][T12969] usb 1-1: Product: syz [ 1528.602678][T12969] usb 1-1: Manufacturer: syz [ 1528.602688][T12969] usb 1-1: SerialNumber: syz [ 1528.631662][T12969] usb 1-1: config 0 descriptor?? [ 1528.651288][T12969] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1528.662294][T12969] dvb-usb: bulk message failed: -22 (2/0) [ 1528.684239][T12969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1528.696956][T12969] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1528.696994][T12969] usb 1-1: media controller created [ 1528.746546][T12969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1528.796297][T12969] usb 1-1: selecting invalid altsetting 7 [ 1528.803022][T12969] cxusb: set interface failed [ 1528.803047][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 1528.866995][T21136] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 1528.869104][ T30] audit: type=1400 audit(2313.823:3254): avc: denied { relabelfrom } for pid=21132 comm="syz.4.3959" name="NETLINK" dev="sockfs" ino=73764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1528.940484][T12969] DVB: Unable to find symbol lgdt330x_attach() [ 1528.940505][T12969] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1529.464496][T18388] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1529.566986][ T30] audit: type=1400 audit(2314.537:3255): avc: denied { relabelto } for pid=21132 comm="syz.4.3959" name="NETLINK" dev="sockfs" ino=73764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:auth_cache_t:s0" [ 1529.599396][T12969] rc_core: IR keymap rc-dvico-portable not found [ 1529.599407][T12969] Registered IR keymap rc-empty [ 1529.613319][T12969] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1529.624012][T12969] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input96 [ 1529.634763][T18388] usb 2-1: Using ep0 maxpacket: 8 [ 1529.640320][T18388] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1529.653905][T18388] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1529.653941][T18388] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1529.653956][T18388] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1529.653972][T18388] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1529.653988][T18388] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.654012][T18388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.725129][T12969] dvb-usb: schedule remote query interval to 100 msecs. [ 1529.732328][T12969] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1529.758132][T12969] usb 1-1: USB disconnect, device number 5 [ 1529.819812][ T5608] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1529.869749][T12969] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1529.959159][T18388] usb 2-1: usb_control_msg returned -32 [ 1529.959194][T18388] usbtmc 2-1:16.0: can't read capabilities [ 1529.972800][ T5608] usb 6-1: Using ep0 maxpacket: 32 [ 1529.978464][ T5608] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1529.997399][ T5608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.997437][ T5608] usb 6-1: Product: syz [ 1529.997453][ T5608] usb 6-1: Manufacturer: syz [ 1529.997464][ T5608] usb 6-1: SerialNumber: syz [ 1530.023893][ T5608] usb 6-1: config 0 descriptor?? [ 1530.034273][ T5608] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1530.419372][ T5714] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1530.532403][T21154] syzkaller0: entered promiscuous mode [ 1530.532431][T21154] syzkaller0: entered allmulticast mode [ 1531.029143][ T5608] gspca_ov534_9: reg_w failed -110 [ 1531.213605][T21165] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1531.306049][ T5608] gspca_ov534_9: Unknown sensor 0000 [ 1531.306108][ T5608] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1531.501599][ T5608] usb 2-1: USB disconnect, device number 6 [ 1531.541542][T18388] usb 6-1: USB disconnect, device number 117 [ 1531.559377][T21164] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1531.559377][T21164] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1533.003837][T21170] overlayfs: overlapping lowerdir path [ 1533.120729][T21184] fuse: Bad value for 'fd' [ 1533.901278][T21190] overlayfs: missing 'lowerdir' [ 1534.239311][ T5608] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1534.404891][ T5608] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1534.425220][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.425245][ T5608] usb 2-1: Product: syz [ 1534.425261][ T5608] usb 2-1: Manufacturer: syz [ 1534.425270][ T5608] usb 2-1: SerialNumber: syz [ 1535.278312][T21211] FAULT_INJECTION: forcing a failure. [ 1535.278312][T21211] name failslab, interval 1, probability 1, space 0, times 0 [ 1535.291283][T21211] CPU: 0 UID: 0 PID: 21211 Comm: syz.0.3977 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.291302][T21211] Tainted: [L]=SOFTLOCKUP [ 1535.291306][T21211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1535.291313][T21211] Call Trace: [ 1535.291318][T21211] [ 1535.291323][T21211] dump_stack_lvl+0x100/0x190 [ 1535.291343][T21211] should_fail_ex.cold+0x5/0xa [ 1535.291359][T21211] should_failslab+0xc2/0x120 [ 1535.291373][T21211] __kmalloc_cache_noprof+0x91/0x6d0 [ 1535.291389][T21211] ? lockdep_init_map_type+0x5c/0x250 [ 1535.291402][T21211] ? ovs_flow_cmd_new+0x28a/0xe10 [ 1535.291417][T21211] ovs_flow_cmd_new+0x28a/0xe10 [ 1535.291431][T21211] ? kasan_save_stack+0x30/0x50 [ 1535.291442][T21211] ? kasan_save_track+0x14/0x30 [ 1535.291454][T21211] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1535.291465][T21211] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 1535.291477][T21211] ? netlink_rcv_skb+0x159/0x420 [ 1535.291493][T21211] ? genl_rcv+0x28/0x40 [ 1535.291503][T21211] ? netlink_unicast+0x585/0x850 [ 1535.291519][T21211] ? __sys_sendmsg+0x160/0x210 [ 1535.291530][T21211] ? do_syscall_64+0x123/0x790 [ 1535.291543][T21211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.291577][T21211] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1535.291590][T21211] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1535.291605][T21211] genl_family_rcv_msg_doit+0x214/0x300 [ 1535.291619][T21211] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1535.291638][T21211] ? bpf_lsm_capable+0x9/0x10 [ 1535.291653][T21211] ? security_capable+0x80/0x260 [ 1535.291670][T21211] ? ns_capable+0xd2/0xf0 [ 1535.291682][T21211] genl_rcv_msg+0x560/0x800 [ 1535.291695][T21211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1535.291707][T21211] ? __lock_acquire+0x4c5/0x1ec0 [ 1535.291718][T21211] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1535.291735][T21211] netlink_rcv_skb+0x159/0x420 [ 1535.291752][T21211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1535.291765][T21211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1535.291788][T21211] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1535.291806][T21211] genl_rcv+0x28/0x40 [ 1535.291817][T21211] netlink_unicast+0x585/0x850 [ 1535.291836][T21211] ? __pfx_netlink_unicast+0x10/0x10 [ 1535.291857][T21211] netlink_sendmsg+0x8b0/0xda0 [ 1535.291877][T21211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.291896][T21211] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1535.291915][T21211] ____sys_sendmsg+0xa4d/0xbe0 [ 1535.291929][T21211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.291947][T21211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1535.291965][T21211] ? lock_acquire+0x1d1/0x380 [ 1535.291976][T21211] ? get_pid_task+0x2a/0x250 [ 1535.291992][T21211] ___sys_sendmsg+0x190/0x1e0 [ 1535.292012][T21211] ? __pfx____sys_sendmsg+0x10/0x10 [ 1535.292027][T21211] ? get_pid_task+0x106/0x250 [ 1535.292047][T21211] ? find_held_lock+0x2b/0x80 [ 1535.292071][T21211] __sys_sendmsg+0x160/0x210 [ 1535.292082][T21211] ? __pfx___sys_sendmsg+0x10/0x10 [ 1535.292101][T21211] do_syscall_64+0x123/0x790 [ 1535.292116][T21211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.292127][T21211] RIP: 0033:0x7fdfc519e159 [ 1535.292137][T21211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.292148][T21211] RSP: 002b:00007fdfc33f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.292159][T21211] RAX: ffffffffffffffda RBX: 00007fdfc5425fa0 RCX: 00007fdfc519e159 [ 1535.292166][T21211] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1535.292173][T21211] RBP: 00007fdfc33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.292180][T21211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.292187][T21211] R13: 00007fdfc5426038 R14: 00007fdfc5425fa0 R15: 00007ffc18be3658 [ 1535.292202][T21211] [ 1537.661878][T11122] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1537.844355][T11122] usb 1-1: Using ep0 maxpacket: 32 [ 1537.851264][T11122] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1537.921212][T11122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.921237][T11122] usb 1-1: Product: syz [ 1537.921254][T11122] usb 1-1: Manufacturer: syz [ 1537.921264][T11122] usb 1-1: SerialNumber: syz [ 1537.941238][T11122] usb 1-1: config 0 descriptor?? [ 1537.956340][T11122] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1538.576633][T11122] gspca_ov534_9: reg_w failed -71 [ 1538.899573][T11122] gspca_ov534_9: Unknown sensor 0000 [ 1538.899665][T11122] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1538.921822][T11122] usb 1-1: USB disconnect, device number 6 [ 1539.833881][T21221] overlayfs: missing 'lowerdir' [ 1539.898011][ T5608] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1539.898036][ T5608] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1541.043202][ T5608] usb 2-1: USB disconnect, device number 7 [ 1541.187162][T21235] fuse: Bad value for 'fd' [ 1541.292911][ T30] audit: type=1400 audit(2326.874:3256): avc: denied { watch_with_perm } for pid=21239 comm="syz.0.3989" path="/174/bus" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1541.405743][T14922] ffs_data_put(): freeing [ 1541.460992][T11122] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1542.127237][T21244] overlayfs: missing 'lowerdir' [ 1542.261349][T11122] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1542.280825][T11122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.289046][T11122] usb 5-1: Product: syz [ 1542.289069][T11122] usb 5-1: Manufacturer: syz [ 1542.289080][T11122] usb 5-1: SerialNumber: syz [ 1543.211903][T11122] usb 5-1: reset high-speed USB device number 31 using dummy_hcd [ 1543.324833][ T30] audit: type=1400 audit(2329.005:3257): avc: denied { name_connect } for pid=21253 comm="syz.0.3994" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1543.515421][T12969] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1543.522570][T12969] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 1543.703765][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3993'. [ 1543.801943][T11122] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1544.001742][T11122] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1544.014818][T18388] usb 5-1: USB disconnect, device number 31 [ 1544.015257][ C0] device 5-1 is not registered [ 1544.029333][T11122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.029358][T11122] usb 1-1: Product: syz [ 1544.029372][T11122] usb 1-1: Manufacturer: syz [ 1544.029382][T11122] usb 1-1: SerialNumber: syz [ 1544.104547][T21272] 0x000000000000-0x000000020000 : "" [ 1544.119678][T21272] ftl_cs: FTL header not found. [ 1545.469066][T12969] usb 5-1: firmware upload failed (-110). [ 1545.592611][T21290] fuse: Bad value for 'fd' [ 1545.742170][T17237] ffs_data_put(): freeing [ 1546.787236][T21304] tipc: Can't bind to reserved service type 2 [ 1546.886295][T11122] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1546.900135][T11122] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1546.924384][T11122] usb 1-1: USB disconnect, device number 7 [ 1547.068055][T21312] FAULT_INJECTION: forcing a failure. [ 1547.068055][T21312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.068085][T21312] CPU: 0 UID: 0 PID: 21312 Comm: syz.0.4007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.068101][T21312] Tainted: [L]=SOFTLOCKUP [ 1547.068105][T21312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1547.068112][T21312] Call Trace: [ 1547.068116][T21312] [ 1547.068121][T21312] dump_stack_lvl+0x100/0x190 [ 1547.068141][T21312] should_fail_ex.cold+0x5/0xa [ 1547.068157][T21312] _copy_to_user+0x32/0xd0 [ 1547.068179][T21312] simple_read_from_buffer+0xcb/0x170 [ 1547.068194][T21312] proc_fail_nth_read+0x1af/0x230 [ 1547.068208][T21312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1547.068222][T21312] ? rw_verify_area+0xce/0x6d0 [ 1547.068238][T21312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1547.068252][T21312] vfs_read+0x1e4/0xb40 [ 1547.068262][T21312] ? lock_acquire+0x1d1/0x380 [ 1547.068274][T21312] ? __fget_files+0x34/0x3d0 [ 1547.068287][T21312] ? __pfx_vfs_read+0x10/0x10 [ 1547.068296][T21312] ? find_held_lock+0x2b/0x80 [ 1547.068312][T21312] ? __fget_files+0x215/0x3d0 [ 1547.068326][T21312] ? __fget_files+0x21f/0x3d0 [ 1547.068343][T21312] ksys_read+0x12a/0x250 [ 1547.068353][T21312] ? __pfx_ksys_read+0x10/0x10 [ 1547.068368][T21312] do_syscall_64+0x123/0x790 [ 1547.068383][T21312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.068394][T21312] RIP: 0033:0x7fdfc515e98e [ 1547.068405][T21312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1547.068415][T21312] RSP: 002b:00007fdfc33f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1547.068426][T21312] RAX: ffffffffffffffda RBX: 00007fdfc33f66c0 RCX: 00007fdfc515e98e [ 1547.068434][T21312] RDX: 000000000000000f RSI: 00007fdfc33f60a0 RDI: 0000000000000005 [ 1547.068441][T21312] RBP: 00007fdfc33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.068447][T21312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.068454][T21312] R13: 00007fdfc5426038 R14: 00007fdfc5425fa0 R15: 00007ffc18be3658 [ 1547.068468][T21312] [ 1550.061033][T21343] overlayfs: missing 'lowerdir' [ 1550.224252][T21347] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4016'. [ 1550.245355][T21347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1550.291189][T18056] ffs_data_put(): freeing [ 1550.429057][T21354] FAULT_INJECTION: forcing a failure. [ 1550.429057][T21354] name failslab, interval 1, probability 1, space 0, times 0 [ 1550.429091][T21354] CPU: 0 UID: 0 PID: 21354 Comm: syz.0.4020 Tainted: G L syzkaller #0 PREEMPT(full) [ 1550.429108][T21354] Tainted: [L]=SOFTLOCKUP [ 1550.429112][T21354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1550.429119][T21354] Call Trace: [ 1550.429123][T21354] [ 1550.429129][T21354] dump_stack_lvl+0x100/0x190 [ 1550.429150][T21354] should_fail_ex.cold+0x5/0xa [ 1550.429167][T21354] should_failslab+0xc2/0x120 [ 1550.429181][T21354] __kmalloc_noprof+0xfc/0x840 [ 1550.429193][T21354] ? tomoyo_encode2+0xfb/0x3c0 [ 1550.429207][T21354] tomoyo_encode2+0xfb/0x3c0 [ 1550.429221][T21354] tomoyo_encode+0x29/0x50 [ 1550.429234][T21354] tomoyo_realpath_from_path+0x18c/0x690 [ 1550.429250][T21354] tomoyo_mount_acl+0x1b6/0x8b0 [ 1550.429260][T21354] ? is_bpf_text_address+0x8a/0x1a0 [ 1550.429274][T21354] ? is_bpf_text_address+0x8a/0x1a0 [ 1550.429290][T21354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1550.429311][T21354] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1550.429322][T21354] ? kernel_text_address+0x8d/0x100 [ 1550.429339][T21354] ? unwind_get_return_address+0x59/0xa0 [ 1550.429355][T21354] ? arch_stack_walk+0xa6/0xf0 [ 1550.429371][T21354] ? __lock_acquire+0x4c5/0x1ec0 [ 1550.429389][T21354] ? tomoyo_mount_permission+0x1f6/0x460 [ 1550.429402][T21354] ? tomoyo_domain+0xb2/0x150 [ 1550.429415][T21354] ? tomoyo_profile+0x47/0x60 [ 1550.429430][T21354] tomoyo_mount_permission+0x214/0x460 [ 1550.429440][T21354] ? tomoyo_mount_permission+0x1f6/0x460 [ 1550.429452][T21354] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1550.429471][T21354] security_sb_mount+0xdd/0x270 [ 1550.429488][T21354] path_mount+0x158/0x24c0 [ 1550.429506][T21354] ? __pfx_path_mount+0x10/0x10 [ 1550.429521][T21354] ? lockdep_hardirqs_on+0x7d/0x110 [ 1550.429542][T21354] ? putname+0xb1/0x110 [ 1550.429555][T21354] ? kmem_cache_free+0x127/0x6c0 [ 1550.429576][T21354] ? __x64_sys_mount+0x293/0x310 [ 1550.429591][T21354] __x64_sys_mount+0x293/0x310 [ 1550.429607][T21354] ? __pfx___x64_sys_mount+0x10/0x10 [ 1550.429626][T21354] do_syscall_64+0x123/0x790 [ 1550.429641][T21354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.429652][T21354] RIP: 0033:0x7fdfc519e159 [ 1550.429663][T21354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.429673][T21354] RSP: 002b:00007fdfc33f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1550.429685][T21354] RAX: ffffffffffffffda RBX: 00007fdfc5425fa0 RCX: 00007fdfc519e159 [ 1550.429692][T21354] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000000000000000 [ 1550.429699][T21354] RBP: 00007fdfc33f6090 R08: 0000200000000400 R09: 0000000000000000 [ 1550.429706][T21354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.429712][T21354] R13: 00007fdfc5426038 R14: 00007fdfc5425fa0 R15: 00007ffc18be3658 [ 1550.429727][T21354] [ 1550.456487][T21354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1551.021419][T11122] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1551.729071][T21369] overlayfs: missing 'lowerdir' [ 1551.747262][T11122] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1551.758713][T11122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.758735][T11122] usb 6-1: Product: 獐ᘤꖽ挴 [ 1551.758751][T11122] usb 6-1: Manufacturer: Ѝ [ 1551.758761][T11122] usb 6-1: SerialNumber: Ї [ 1551.798414][T11122] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1551.980796][T11122] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1552.621405][T11122] usb 6-1: USB disconnect, device number 118 [ 1552.706794][T18388] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1552.829384][ T6653] udevd[6653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1552.948263][T18388] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1552.959471][T18388] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1552.959496][T18388] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1552.987839][T18388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.987867][T18388] usb 2-1: Product: syz [ 1552.987885][T18388] usb 2-1: Manufacturer: syz [ 1552.987896][T18388] usb 2-1: SerialNumber: syz [ 1553.220724][T18388] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1553.376153][T21388] openvswitch: netlink: IP tunnel dst address not specified [ 1553.711131][ T30] audit: type=1400 audit(2339.913:3258): avc: denied { read write } for pid=21373 comm="syz.1.4028" name="lp0" dev="devtmpfs" ino=4995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1553.734828][ T30] audit: type=1400 audit(2339.913:3259): avc: denied { open } for pid=21373 comm="syz.1.4028" path="/dev/usb/lp0" dev="devtmpfs" ino=4995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1554.098427][T18056] ffs_data_put(): freeing [ 1554.841029][T21409] overlayfs: missing 'lowerdir' [ 1555.016471][T11122] usb 2-1: USB disconnect, device number 8 [ 1555.440925][T11122] usblp0: removed [ 1556.020934][T19260] Bluetooth: hci5: ACL packet for unknown connection handle 3793 [ 1556.059651][T18388] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1556.199683][T21426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4048'. [ 1556.210332][T18388] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1556.222781][T21426] FAULT_INJECTION: forcing a failure. [ 1556.222781][T21426] name failslab, interval 1, probability 1, space 0, times 0 [ 1556.222811][T21426] CPU: 0 UID: 0 PID: 21426 Comm: syz.7.4048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.222826][T21426] Tainted: [L]=SOFTLOCKUP [ 1556.222831][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1556.222837][T21426] Call Trace: [ 1556.222844][T21426] [ 1556.222849][T21426] dump_stack_lvl+0x100/0x190 [ 1556.222870][T21426] should_fail_ex.cold+0x5/0xa [ 1556.222887][T21426] should_failslab+0xc2/0x120 [ 1556.222906][T21426] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1556.222919][T21426] ? skb_clone+0x190/0x400 [ 1556.222934][T21426] skb_clone+0x190/0x400 [ 1556.222945][T21426] netlink_deliver_tap+0xaed/0xcc0 [ 1556.222965][T21426] netlink_dump+0x909/0xd00 [ 1556.222983][T21426] ? __pfx_netlink_dump+0x10/0x10 [ 1556.222998][T21426] ? __kasan_kmalloc+0xaa/0xb0 [ 1556.223015][T21426] ? nla_strdup+0x10c/0x150 [ 1556.223031][T21426] __netlink_dump_start+0x6d6/0x990 [ 1556.223048][T21426] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 1556.223067][T21426] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 1556.223086][T21426] nf_tables_getrule+0x80e/0xd10 [ 1556.223104][T21426] ? __pfx_nf_tables_getrule+0x10/0x10 [ 1556.223118][T21426] ? lock_acquire+0x1d1/0x380 [ 1556.223129][T21426] ? net_generic+0x25/0x2a0 [ 1556.223140][T21426] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 1556.223155][T21426] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 1556.223169][T21426] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 1556.223185][T21426] ? __nla_parse+0x40/0x60 [ 1556.223200][T21426] ? __pfx_nf_tables_getrule+0x10/0x10 [ 1556.223215][T21426] nfnetlink_rcv_msg+0x557/0x11e0 [ 1556.223233][T21426] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1556.223247][T21426] ? __lock_acquire+0x4c5/0x1ec0 [ 1556.223271][T21426] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1556.223289][T21426] netlink_rcv_skb+0x159/0x420 [ 1556.223306][T21426] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1556.223321][T21426] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1556.223344][T21426] ? ns_capable+0xd2/0xf0 [ 1556.223357][T21426] nfnetlink_rcv+0x1b3/0x440 [ 1556.223370][T21426] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1556.223383][T21426] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1556.223404][T21426] netlink_unicast+0x585/0x850 [ 1556.223424][T21426] ? __pfx_netlink_unicast+0x10/0x10 [ 1556.223441][T21426] ? __pfx_sock_has_perm+0x10/0x10 [ 1556.223459][T21426] netlink_sendmsg+0x8b0/0xda0 [ 1556.223479][T21426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.223498][T21426] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1556.223517][T21426] ____sys_sendmsg+0xa4d/0xbe0 [ 1556.223530][T21426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.223549][T21426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1556.223567][T21426] ? lock_acquire+0x1d1/0x380 [ 1556.223577][T21426] ? get_pid_task+0x2a/0x250 [ 1556.223593][T21426] ___sys_sendmsg+0x190/0x1e0 [ 1556.223609][T21426] ? __pfx____sys_sendmsg+0x10/0x10 [ 1556.223625][T21426] ? get_pid_task+0x106/0x250 [ 1556.223644][T21426] ? find_held_lock+0x2b/0x80 [ 1556.223668][T21426] __sys_sendmsg+0x160/0x210 [ 1556.223680][T21426] ? __pfx___sys_sendmsg+0x10/0x10 [ 1556.223699][T21426] do_syscall_64+0x123/0x790 [ 1556.223714][T21426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.223726][T21426] RIP: 0033:0x7fa844d9e159 [ 1556.223736][T21426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.223747][T21426] RSP: 002b:00007fa845bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1556.223759][T21426] RAX: ffffffffffffffda RBX: 00007fa845025fa0 RCX: 00007fa844d9e159 [ 1556.223766][T21426] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003 [ 1556.223773][T21426] RBP: 00007fa845bee090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.223779][T21426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.223786][T21426] R13: 00007fa845026038 R14: 00007fa845025fa0 R15: 00007ffeb5098198 [ 1556.223800][T21426] [ 1556.353037][T18388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.353054][T18388] usb 5-1: Product: syz [ 1556.353063][T18388] usb 5-1: Manufacturer: syz [ 1556.353073][T18388] usb 5-1: SerialNumber: syz [ 1557.744394][T11122] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1557.888222][T11122] usb 6-1: Using ep0 maxpacket: 32 [ 1557.895315][T11122] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1557.908048][T11122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.916342][T11122] usb 6-1: Product: syz [ 1557.920749][T11122] usb 6-1: Manufacturer: syz [ 1557.920760][T11122] usb 6-1: SerialNumber: syz [ 1557.938738][T11122] usb 6-1: config 0 descriptor?? [ 1557.948449][T11122] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1558.393575][T11122] gspca_ov534_9: reg_w failed -71 [ 1558.698466][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 1558.805020][T11122] gspca_ov534_9: Unknown sensor 0000 [ 1558.805077][T11122] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1559.248024][T11122] usb 6-1: USB disconnect, device number 119 [ 1560.341805][T18388] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1560.341832][T18388] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1560.393711][T18388] usb 5-1: USB disconnect, device number 32 [ 1560.513485][T21455] overlayfs: overlapping lowerdir path [ 1560.533053][T21460] af_packet: tpacket_rcv: packet too big, clamped from 262 to 4294967272. macoff=96 [ 1560.689409][T12969] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1560.841270][T12969] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1560.866047][T12969] usb 6-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1560.866068][T12969] usb 6-1: config 2 interface 0 altsetting 178 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1560.866082][T12969] usb 6-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1560.866096][T12969] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1561.042577][T12969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.042604][T12969] usb 6-1: Product: syz [ 1561.042621][T12969] usb 6-1: Manufacturer: syz [ 1561.042632][T12969] usb 6-1: SerialNumber: syz [ 1561.901838][T12969] ims_pcu 6-1:2.0: Incorrect number of endpoints on data interface (1) [ 1561.911764][T12969] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 1561.930256][T12969] usb 6-1: USB disconnect, device number 120 [ 1562.125402][T21483] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1562.125423][T21483] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1562.143496][T21483] vhci_hcd vhci_hcd.0: Device attached [ 1563.058564][T21488] ieee802154 phy0 wpan0: encryption failed: -126 [ 1563.065395][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 1563.074015][T12969] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1563.213696][ T5714] usb 33-1: new low-speed USB device number 22 using vhci_hcd [ 1563.232664][T21485] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1563.238894][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1563.238922][ T12] vhci_hcd vhci_hcd.0: release socket [ 1563.238950][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1563.256945][T12969] usb 2-1: Using ep0 maxpacket: 32 [ 1563.263999][T12969] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1563.277318][T12969] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1563.287359][T12969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.287384][T12969] usb 2-1: Product: syz [ 1563.287399][T12969] usb 2-1: Manufacturer: syz [ 1563.287410][T12969] usb 2-1: SerialNumber: syz [ 1563.319544][T12969] usb 2-1: config 0 descriptor?? [ 1563.329444][T12969] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1563.341179][T12969] dvb-usb: bulk message failed: -22 (2/0) [ 1563.354122][T12969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1563.366154][T12969] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1563.376326][T12969] usb 2-1: media controller created [ 1563.399476][T12969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1564.367382][T18388] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1564.395787][T12969] usb 2-1: selecting invalid altsetting 7 [ 1564.404514][T12969] cxusb: set interface failed [ 1564.409426][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 1564.475034][T12969] DVB: Unable to find symbol lgdt330x_attach() [ 1564.475055][T12969] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1564.508254][T21498] raw_sendmsg: syz.7.4070 forgot to set AF_INET. Fix it! [ 1564.518663][T18388] usb 5-1: Using ep0 maxpacket: 8 [ 1564.524194][T18388] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1564.534878][T18388] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1564.534901][T18388] usb 5-1: config 179 has no interface number 0 [ 1564.534925][T18388] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1564.534949][T18388] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1564.534966][T18388] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1564.534982][T18388] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1564.534997][T18388] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1564.535015][T18388] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1564.535034][T18388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.704423][T12969] rc_core: IR keymap rc-dvico-portable not found [ 1564.704451][T12969] Registered IR keymap rc-empty [ 1564.742249][T11122] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1564.759682][T12969] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1564.770871][T12969] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input97 [ 1564.791124][T12969] dvb-usb: schedule remote query interval to 100 msecs. [ 1564.791156][T12969] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1564.821951][T12969] usb 2-1: USB disconnect, device number 9 [ 1564.886215][T18388] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input98 [ 1564.899194][T11122] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1564.919562][T11122] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.919601][T11122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.943251][T11122] usb 6-1: config 0 descriptor?? [ 1564.964022][T11122] pwc: Askey VC010 type 2 USB webcam detected. [ 1565.014937][T12969] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1565.219222][ T30] audit: type=1400 audit(2351.987:3260): avc: denied { connect } for pid=21492 comm="syz.4.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1565.361570][T11122] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1565.370087][T11122] pwc: recv_control_msg error -32 req 02 val 2700 [ 1565.378163][T11122] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1565.386439][T11122] pwc: recv_control_msg error -32 req 04 val 1000 [ 1565.393328][T11122] pwc: recv_control_msg error -32 req 04 val 1300 [ 1565.416993][ T30] audit: type=1400 audit(2352.197:3261): avc: denied { accept } for pid=21515 comm="syz.1.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1565.577305][T12969] usb 5-1: USB disconnect, device number 33 [ 1565.882626][T21496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.892391][T21496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.930572][T21532] overlayfs: missing 'lowerdir' [ 1567.178681][T11122] pwc: recv_control_msg error -71 req 02 val 2000 [ 1567.186098][T11122] pwc: recv_control_msg error -71 req 02 val 2100 [ 1567.194507][T11122] pwc: recv_control_msg error -71 req 04 val 1500 [ 1567.215021][T11122] pwc: recv_control_msg error -71 req 02 val 2500 [ 1567.221736][T11122] pwc: recv_control_msg error -71 req 02 val 2400 [ 1567.228852][T11122] pwc: recv_control_msg error -71 req 02 val 2600 [ 1567.237305][T11122] pwc: recv_control_msg error -71 req 02 val 2900 [ 1567.243996][T11122] pwc: recv_control_msg error -71 req 02 val 2800 [ 1567.252353][T11122] pwc: recv_control_msg error -71 req 04 val 1100 [ 1567.258957][T11122] pwc: recv_control_msg error -71 req 04 val 1200 [ 1567.272296][T11122] pwc: Registered as video103. [ 1567.273142][T11122] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input99 [ 1567.320165][T11122] usb 6-1: USB disconnect, device number 121 [ 1567.631880][T18388] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1568.175002][T18388] usb 2-1: Using ep0 maxpacket: 8 [ 1568.195810][ T5714] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1568.337980][T18388] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1568.360687][T18388] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1568.360727][T18388] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1568.360753][T18388] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1568.360768][T18388] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1568.360783][T18388] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.360807][T18388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.647041][T18388] usb 2-1: usb_control_msg returned -32 [ 1568.647075][T18388] usbtmc 2-1:16.0: can't read capabilities [ 1568.908483][T18388] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1569.032315][T11122] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1569.070551][T18388] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1569.080648][T18388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.080675][T18388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.080729][T18388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.110766][T18388] usb 1-1: config 0 descriptor?? [ 1569.190479][T11122] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1569.191638][T11122] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.195135][T11122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.195148][T11122] usb 6-1: Product: syz [ 1569.195156][T11122] usb 6-1: Manufacturer: syz [ 1569.195164][T11122] usb 6-1: SerialNumber: syz [ 1569.444456][T19260] Bluetooth: hci4: command 0x0406 tx timeout [ 1570.064480][T11122] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1570.260352][T11122] gspca_mr97310a: reg read [21] error -71 [ 1570.260424][T11122] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -71 [ 1570.286440][T11122] usb 6-1: USB disconnect, device number 122 [ 1570.303002][T18388] hid_parser_main: 84 callbacks suppressed [ 1570.310087][T18388] hid-steam 0003:28DE:1142.003A: unknown main item tag 0x0 [ 1570.331236][T18388] hid-steam 0003:28DE:1142.003A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1570.385263][T18388] hid-steam 0003:28DE:1142.003A: Steam wireless receiver connected [ 1570.385576][T18388] hid-steam 0003:28DE:1142.003A: No HID_FEATURE_REPORT present for ID 0 [ 1570.385601][T18388] hid-steam 0003:28DE:1142.003A: steam_probe:steam_get_conn_status failed with error -22 [ 1570.445732][T18388] hid-steam 0003:28DE:1142.003B: unknown main item tag 0x0 [ 1570.494414][T21550] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1570.689984][T18388] hid-steam 0003:28DE:1142.003B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1570.889935][T11122] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1571.018192][T21569] input: syz0 as /devices/virtual/input/input100 [ 1571.053540][T11122] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1571.053591][T11122] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1571.077262][T11122] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.077329][T11122] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1571.107805][T11122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.107831][T11122] usb 5-1: Product: syz [ 1571.107848][T11122] usb 5-1: Manufacturer: syz [ 1571.107859][T11122] usb 5-1: SerialNumber: syz [ 1571.294685][T18388] usb 1-1: USB disconnect, device number 8 [ 1571.364869][T18388] hid-steam 0003:28DE:1142.003A: Steam wireless receiver disconnected [ 1571.726081][T11122] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1571.808681][T11122] usb 5-1: USB disconnect, device number 34 [ 1571.969594][ T6653] udevd[6653]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.143695][ T30] audit: type=1400 audit(2359.263:3262): avc: denied { ioctl } for pid=21583 comm="syz.0.4094" path="socket:[75415]" dev="sockfs" ino=75415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1572.420195][T21590] fuse: Unknown parameter '0x0000000000000003' [ 1572.660949][T11122] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1572.688720][T19260] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1572.688747][T19260] CPU: 0 UID: 0 PID: 19260 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1572.688766][T19260] Tainted: [L]=SOFTLOCKUP [ 1572.688772][T19260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1572.688781][T19260] Workqueue: hci4 hci_rx_work [ 1572.688803][T19260] Call Trace: [ 1572.688807][T19260] [ 1572.688813][T19260] dump_stack_lvl+0x100/0x190 [ 1572.688834][T19260] sysfs_warn_dup.cold+0x1c/0x28 [ 1572.688852][T19260] sysfs_create_dir_ns+0x24b/0x2b0 [ 1572.688870][T19260] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1572.688884][T19260] ? find_held_lock+0x2b/0x80 [ 1572.688900][T19260] ? kobject_add_internal+0x25f/0x930 [ 1572.688916][T19260] ? kobject_add_internal+0x25f/0x930 [ 1572.688934][T19260] ? do_raw_spin_unlock+0x145/0x1e0 [ 1572.688951][T19260] kobject_add_internal+0x2c8/0x930 [ 1572.688971][T19260] kobject_add+0x16a/0x1e0 [ 1572.688987][T19260] ? __pfx_kobject_add+0x10/0x10 [ 1572.689002][T19260] ? class_to_subsys+0x10f/0x150 [ 1572.689019][T19260] ? kobject_put+0xb9/0x640 [ 1572.689033][T19260] ? _raw_spin_unlock+0x28/0x50 [ 1572.689048][T19260] device_add+0x294/0x1970 [ 1572.689061][T19260] ? __pfx_dev_set_name+0x10/0x10 [ 1572.689076][T19260] ? __pfx_device_add+0x10/0x10 [ 1572.689090][T19260] ? mgmt_send_event_skb+0x2fb/0x460 [ 1572.689106][T19260] hci_conn_add_sysfs+0x1a3/0x260 [ 1572.689120][T19260] le_conn_complete_evt+0x122f/0x2130 [ 1572.689135][T19260] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1572.689146][T19260] ? hci_event_packet+0x186/0xcd0 [ 1572.689160][T19260] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1572.689173][T19260] ? skb_pull_data+0x15f/0x1e0 [ 1572.689189][T19260] hci_le_meta_evt+0x34a/0x5f0 [ 1572.689202][T19260] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1572.689216][T19260] hci_event_packet+0x51c/0xcd0 [ 1572.689228][T19260] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1572.689240][T19260] ? __pfx_hci_event_packet+0x10/0x10 [ 1572.689254][T19260] ? lockdep_hardirqs_on+0x7d/0x110 [ 1572.689270][T19260] hci_rx_work+0x451/0xfc0 [ 1572.689283][T19260] process_one_work+0xac7/0x1b10 [ 1572.689307][T19260] ? __pfx_process_one_work+0x10/0x10 [ 1572.689325][T19260] ? lock_acquire+0x1d1/0x380 [ 1572.689341][T19260] ? __pfx_hci_rx_work+0x10/0x10 [ 1572.689353][T19260] worker_thread+0x5ef/0xe50 [ 1572.689373][T19260] ? __pfx_worker_thread+0x10/0x10 [ 1572.689390][T19260] ? kthread+0x13a/0x450 [ 1572.689404][T19260] ? __pfx_worker_thread+0x10/0x10 [ 1572.689419][T19260] kthread+0x373/0x450 [ 1572.689434][T19260] ? __pfx_kthread+0x10/0x10 [ 1572.689449][T19260] ret_from_fork+0x730/0xd60 [ 1572.689463][T19260] ? __pfx_ret_from_fork+0x10/0x10 [ 1572.689476][T19260] ? __switch_to+0x800/0x10f0 [ 1572.689492][T19260] ? __pfx_kthread+0x10/0x10 [ 1572.689508][T19260] ret_from_fork_asm+0x1a/0x30 [ 1572.689526][T19260] [ 1572.689645][T19260] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1572.689667][T19260] Bluetooth: hci4: failed to register connection device [ 1572.843266][T11122] usb 6-1: device descriptor read/64, error -71 [ 1573.099539][T11122] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1573.973650][T19260] Bluetooth: hci4: command 0x0406 tx timeout [ 1573.999267][T21553] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 1574.010384][T11122] usb 6-1: device descriptor read/64, error -71 [ 1574.052840][T12969] usb 2-1: USB disconnect, device number 10 [ 1574.132215][T11122] usb usb6-port1: attempt power cycle [ 1574.389727][T21607] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4105'. [ 1574.401492][T21607] FAULT_INJECTION: forcing a failure. [ 1574.401492][T21607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.401524][T21607] CPU: 0 UID: 0 PID: 21607 Comm: syz.4.4105 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.401540][T21607] Tainted: [L]=SOFTLOCKUP [ 1574.401544][T21607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1574.401551][T21607] Call Trace: [ 1574.401555][T21607] [ 1574.401560][T21607] dump_stack_lvl+0x100/0x190 [ 1574.401580][T21607] should_fail_ex.cold+0x5/0xa [ 1574.401597][T21607] _copy_from_user+0x2e/0xd0 [ 1574.401615][T21607] kstrtouint_from_user+0xd6/0x1d0 [ 1574.401629][T21607] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1574.401645][T21607] ? lock_acquire+0x1d1/0x380 [ 1574.401660][T21607] proc_fail_nth_write+0x83/0x220 [ 1574.401674][T21607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1574.401691][T21607] vfs_write+0x2aa/0x1050 [ 1574.401703][T21607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1574.401716][T21607] ? lock_acquire+0x1d1/0x380 [ 1574.401727][T21607] ? __fget_files+0x34/0x3d0 [ 1574.401741][T21607] ? __pfx_vfs_write+0x10/0x10 [ 1574.401750][T21607] ? find_held_lock+0x2b/0x80 [ 1574.401765][T21607] ? __fget_files+0x215/0x3d0 [ 1574.401781][T21607] ? __fget_files+0x21f/0x3d0 [ 1574.401797][T21607] ksys_write+0x12a/0x250 [ 1574.401808][T21607] ? __pfx_ksys_write+0x10/0x10 [ 1574.401823][T21607] do_syscall_64+0x123/0x790 [ 1574.401839][T21607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.401857][T21607] RIP: 0033:0x7fcac8d5e98e [ 1574.401867][T21607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1574.401877][T21607] RSP: 002b:00007fcac9d16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1574.401888][T21607] RAX: ffffffffffffffda RBX: 00007fcac9d176c0 RCX: 00007fcac8d5e98e [ 1574.401896][T21607] RDX: 0000000000000001 RSI: 00007fcac9d170a0 RDI: 0000000000000005 [ 1574.401902][T21607] RBP: 00007fcac9d17090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.401909][T21607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.401916][T21607] R13: 00007fcac9026038 R14: 00007fcac9025fa0 R15: 00007ffe8ceeed88 [ 1574.401930][T21607] [ 1574.519515][T11122] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1574.616761][T11122] usb 6-1: device descriptor read/8, error -71 [ 1574.878019][T11122] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1574.899869][T11122] usb 6-1: device descriptor read/8, error -71 [ 1575.007607][T11122] usb usb6-port1: unable to enumerate USB device [ 1575.074572][T21617] FAULT_INJECTION: forcing a failure. [ 1575.074572][T21617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.074604][T21617] CPU: 0 UID: 0 PID: 21617 Comm: syz.7.4109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1575.074621][T21617] Tainted: [L]=SOFTLOCKUP [ 1575.074625][T21617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1575.074632][T21617] Call Trace: [ 1575.074637][T21617] [ 1575.074642][T21617] dump_stack_lvl+0x100/0x190 [ 1575.074662][T21617] should_fail_ex.cold+0x5/0xa [ 1575.074681][T21617] strncpy_from_user+0x3b/0x2d0 [ 1575.074695][T21617] do_getname+0x78/0x390 [ 1575.074711][T21617] do_sys_openat2+0xc7/0x1e0 [ 1575.074726][T21617] ? __pfx_do_sys_openat2+0x10/0x10 [ 1575.074748][T21617] __x64_sys_openat+0x12d/0x210 [ 1575.074763][T21617] ? __pfx___x64_sys_openat+0x10/0x10 [ 1575.074784][T21617] do_syscall_64+0x123/0x790 [ 1575.074801][T21617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.074813][T21617] RIP: 0033:0x7fa844d5e98e [ 1575.074824][T21617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1575.074840][T21617] RSP: 002b:00007fa845bedf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1575.074852][T21617] RAX: ffffffffffffffda RBX: 00007fa845bee6c0 RCX: 00007fa844d5e98e [ 1575.074860][T21617] RDX: 0000000000000000 RSI: 00007fa844e3475f RDI: ffffffffffffff9c [ 1575.074868][T21617] RBP: 00007fa844e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1575.074875][T21617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.074882][T21617] R13: 00007fa845026038 R14: 00007fa845025fa0 R15: 00007ffeb5098198 [ 1575.074896][T21617] [ 1575.625758][T21618] syz.1.4108: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1575.625848][T21618] CPU: 0 UID: 0 PID: 21618 Comm: syz.1.4108 Tainted: G L syzkaller #0 PREEMPT(full) [ 1575.625866][T21618] Tainted: [L]=SOFTLOCKUP [ 1575.625871][T21618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1575.625879][T21618] Call Trace: [ 1575.625884][T21618] [ 1575.625889][T21618] dump_stack_lvl+0x100/0x190 [ 1575.625910][T21618] warn_alloc.cold+0x9e/0xb2 [ 1575.625922][T21618] ? __pfx_warn_alloc+0x10/0x10 [ 1575.625943][T21618] ? avc_has_extended_perms+0x201/0x1080 [ 1575.625961][T21618] ? avc_has_extended_perms+0x33a/0x1080 [ 1575.625974][T21618] ? avc_has_extended_perms+0x33a/0x1080 [ 1575.625994][T21618] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1575.626008][T21618] ? rcu_is_watching+0x13/0xc0 [ 1575.626024][T21618] ? trace_contention_end+0x126/0x160 [ 1575.626041][T21618] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1575.626057][T21618] ? kasan_quarantine_put+0x104/0x240 [ 1575.626069][T21618] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1575.626087][T21618] ? __pfx___mutex_lock+0x10/0x10 [ 1575.626102][T21618] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1575.626120][T21618] ? tomoyo_path_number_perm+0x188/0x580 [ 1575.626139][T21618] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1575.626155][T21618] __vmalloc_node_noprof+0xad/0xf0 [ 1575.626169][T21618] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1575.626188][T21618] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1575.626206][T21618] ? do_vfs_ioctl+0x226/0x13e0 [ 1575.626229][T21618] dvb_usercopy+0x167/0x340 [ 1575.626245][T21618] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1575.626262][T21618] ? __pfx_dvb_usercopy+0x10/0x10 [ 1575.626276][T21618] ? __fget_files+0x34/0x3d0 [ 1575.626295][T21618] ? selinux_file_ioctl+0x13b/0x290 [ 1575.626306][T21618] ? selinux_file_ioctl+0xb6/0x290 [ 1575.626318][T21618] dvb_demux_ioctl+0x29/0x40 [ 1575.626332][T21618] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1575.626347][T21618] __x64_sys_ioctl+0x18e/0x210 [ 1575.626359][T21618] do_syscall_64+0x123/0x790 [ 1575.626374][T21618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.626386][T21618] RIP: 0033:0x7f031b79e159 [ 1575.626396][T21618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.626407][T21618] RSP: 002b:00007f031c701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1575.626417][T21618] RAX: ffffffffffffffda RBX: 00007f031ba26090 RCX: 00007f031b79e159 [ 1575.626425][T21618] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1575.626432][T21618] RBP: 00007f031b835024 R08: 0000000000000000 R09: 0000000000000000 [ 1575.626438][T21618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.626445][T21618] R13: 00007f031ba26128 R14: 00007f031ba26090 R15: 00007ffc2c917f38 [ 1575.626460][T21618] [ 1575.653881][T21618] Mem-Info: [ 1575.653891][T21618] active_anon:19220 inactive_anon:1 isolated_anon:0 [ 1575.653891][T21618] active_file:2671 inactive_file:63659 isolated_file:0 [ 1575.653891][T21618] unevictable:0 dirty:420 writeback:0 [ 1575.653891][T21618] slab_reclaimable:8479 slab_unreclaimable:104427 [ 1575.653891][T21618] mapped:35217 shmem:6161 pagetables:4433 [ 1575.653891][T21618] sec_pagetables:0 bounce:0 [ 1575.653891][T21618] kernel_misc_reclaimable:0 [ 1575.653891][T21618] free:914513 free_pcp:36871 free_cma:0 [ 1575.653921][T21618] Node 0 active_anon:76876kB inactive_anon:4kB active_file:10684kB inactive_file:254388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140828kB dirty:1660kB writeback:0kB shmem:24640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:17608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1575.653953][T21618] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:20kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1575.653982][T21618] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.654016][T21618] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 1575.654037][T21618] Node 0 DMA32 free:756864kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:76876kB inactive_anon:4kB active_file:10684kB inactive_file:254388kB unevictable:0kB writepending:1660kB zspages:0kB present:3129332kB managed:2530216kB mlocked:0kB bounce:0kB free_pcp:147484kB local_pcp:147484kB free_cma:0kB [ 1575.654070][T21618] lowmem_reserve[]: 0 0 0 0 0 [ 1575.654088][T21618] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.654115][T21618] lowmem_reserve[]: 0 0 0 0 0 [ 1575.654132][T21618] Node 1 Normal free:2885828kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:20kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.654162][T21618] lowmem_reserve[]: 0 0 0 0 0 [ 1575.654179][T21618] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1575.654263][T21618] Node 0 DMA32: 2545*4kB (UME) 3342*8kB (UME) 2183*16kB (UME) 943*32kB (UME) 1262*64kB (UME) 989*128kB (UME) 298*256kB (UME) 97*512kB (ME) 42*1024kB (UME) 16*2048kB (UME) 60*4096kB (UM) = 756868kB [ 1575.654355][T21618] Node 0 Normal: 0*4kB [ 1575.999430][ T4918] Bluetooth: hci4: command 0x0406 tx timeout [ 1576.354907][T21618] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1576.354985][T21618] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 9*64kB (UM) 7*128kB (UM) 6*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 702*4096kB (UM) = 2885828kB [ 1576.355120][T21618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1576.355131][T21618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1576.355142][T21618] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 1576.355152][T21618] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1576.355162][T21618] 68393 total pagecache pages [ 1576.355168][T21618] 1 pages in swap cache [ 1576.355173][T21618] Free swap = 124992kB [ 1576.355180][T21618] Total swap = 124996kB [ 1576.355186][T21618] 2097051 pages RAM [ 1576.355191][T21618] 0 pages HighMem/MovableOnly [ 1576.355197][T21618] 432863 pages reserved [ 1576.355202][T21618] 0 pages cma reserved [ 1576.809643][T21626] kAFS: No cell specified [ 1576.814861][ T30] audit: type=1400 audit(2364.156:3263): avc: denied { mounton } for pid=21620 comm="syz.7.4110" path="/344/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1576.891740][ T30] audit: type=1400 audit(2364.250:3264): avc: denied { ioctl } for pid=21633 comm="syz.4.4114" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1577.900266][ T30] audit: type=1400 audit(2365.311:3265): avc: denied { write } for pid=21633 comm="syz.4.4114" name="header" dev="configfs" ino=38326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1577.976459][T19260] Bluetooth: hci4: command 0x0406 tx timeout [ 1578.056610][T18056] ffs_data_put(): freeing [ 1578.310341][T21648] FAULT_INJECTION: forcing a failure. [ 1578.310341][T21648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.310371][T21648] CPU: 0 UID: 0 PID: 21648 Comm: syz.7.4120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.310387][T21648] Tainted: [L]=SOFTLOCKUP [ 1578.310392][T21648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1578.310398][T21648] Call Trace: [ 1578.310402][T21648] [ 1578.310407][T21648] dump_stack_lvl+0x100/0x190 [ 1578.310427][T21648] should_fail_ex.cold+0x5/0xa [ 1578.310443][T21648] _copy_to_user+0x32/0xd0 [ 1578.310462][T21648] binder_ioctl+0x287f/0x74a0 [ 1578.310480][T21648] ? tomoyo_path_number_perm+0x188/0x580 [ 1578.310501][T21648] ? __pfx_binder_ioctl+0x10/0x10 [ 1578.310513][T21648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1578.310528][T21648] ? do_vfs_ioctl+0x226/0x13e0 [ 1578.310546][T21648] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1578.310562][T21648] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1578.310575][T21648] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1578.310592][T21648] ? __fget_files+0x34/0x3d0 [ 1578.310611][T21648] ? selinux_file_ioctl+0x13b/0x290 [ 1578.310627][T21648] ? selinux_file_ioctl+0xb6/0x290 [ 1578.310638][T21648] ? __pfx_binder_ioctl+0x10/0x10 [ 1578.310650][T21648] __x64_sys_ioctl+0x18e/0x210 [ 1578.310661][T21648] do_syscall_64+0x123/0x790 [ 1578.310677][T21648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.310688][T21648] RIP: 0033:0x7fa844d9e159 [ 1578.310698][T21648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.310709][T21648] RSP: 002b:00007fa845bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.310721][T21648] RAX: ffffffffffffffda RBX: 00007fa845025fa0 RCX: 00007fa844d9e159 [ 1578.310728][T21648] RDX: 00002000000000c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1578.310735][T21648] RBP: 00007fa845bee090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.310742][T21648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.310748][T21648] R13: 00007fa845026038 R14: 00007fa845025fa0 R15: 00007ffeb5098198 [ 1578.310762][T21648] [ 1578.310781][T21648] binder: 21646:21648 ioctl c0306201 2000000000c0 returned -14 [ 1578.589250][T21648] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4120'. [ 1579.212370][ T30] audit: type=1400 audit(2366.686:3266): avc: denied { write } for pid=21642 comm="syz.1.4117" name="functions" dev="configfs" ino=10624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1579.273926][T21668] fuse: Unknown parameter 'use00000000000000000000' [ 1580.437305][T21676] FAULT_INJECTION: forcing a failure. [ 1580.437305][T21676] name failslab, interval 1, probability 1, space 0, times 0 [ 1580.437337][T21676] CPU: 0 UID: 0 PID: 21676 Comm: syz.7.4130 Tainted: G L syzkaller #0 PREEMPT(full) [ 1580.437353][T21676] Tainted: [L]=SOFTLOCKUP [ 1580.437358][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1580.437364][T21676] Call Trace: [ 1580.437369][T21676] [ 1580.437374][T21676] dump_stack_lvl+0x100/0x190 [ 1580.437394][T21676] should_fail_ex.cold+0x5/0xa [ 1580.437409][T21676] ? __netlink_lookup+0x652/0x900 [ 1580.437427][T21676] should_failslab+0xc2/0x120 [ 1580.437441][T21676] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1580.437454][T21676] ? skb_clone+0x190/0x400 [ 1580.437467][T21676] skb_clone+0x190/0x400 [ 1580.437479][T21676] netlink_deliver_tap+0xaed/0xcc0 [ 1580.437498][T21676] netlink_unicast+0x62b/0x850 [ 1580.437517][T21676] ? __pfx_netlink_unicast+0x10/0x10 [ 1580.437538][T21676] netlink_sendmsg+0x8b0/0xda0 [ 1580.437557][T21676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1580.437576][T21676] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1580.437596][T21676] ____sys_sendmsg+0xa4d/0xbe0 [ 1580.437612][T21676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1580.437631][T21676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1580.437648][T21676] ? lock_acquire+0x1d1/0x380 [ 1580.437659][T21676] ? get_pid_task+0x2a/0x250 [ 1580.437681][T21676] ___sys_sendmsg+0x190/0x1e0 [ 1580.437697][T21676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1580.437712][T21676] ? get_pid_task+0x106/0x250 [ 1580.437732][T21676] ? find_held_lock+0x2b/0x80 [ 1580.437755][T21676] __sys_sendmsg+0x160/0x210 [ 1580.437767][T21676] ? __pfx___sys_sendmsg+0x10/0x10 [ 1580.437786][T21676] do_syscall_64+0x123/0x790 [ 1580.437801][T21676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.437813][T21676] RIP: 0033:0x7fa844d9e159 [ 1580.437823][T21676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.437835][T21676] RSP: 002b:00007fa845bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.437846][T21676] RAX: ffffffffffffffda RBX: 00007fa845025fa0 RCX: 00007fa844d9e159 [ 1580.437854][T21676] RDX: 0000000008000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1580.437861][T21676] RBP: 00007fa845bee090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.437867][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.437874][T21676] R13: 00007fa845026038 R14: 00007fa845025fa0 R15: 00007ffeb5098198 [ 1580.437888][T21676] [ 1580.543388][T11122] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1580.791572][T21678] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1580.791589][T21678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1580.791641][T21678] vhci_hcd vhci_hcd.0: Device attached [ 1580.881123][T11122] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1580.891867][T11122] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1580.891893][T11122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1580.891917][T11122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1580.928280][T11122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.928306][T11122] usb 6-1: Product: syz [ 1580.928323][T11122] usb 6-1: Manufacturer: syz [ 1580.928334][T11122] usb 6-1: SerialNumber: syz [ 1580.937967][T11122] usb 6-1: config 0 descriptor?? [ 1580.950281][ T4918] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1580.984183][T11122] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 1581.035965][T12969] usb 41-1: new low-speed USB device number 18 using vhci_hcd [ 1581.073151][T21684] ieee802154 phy0 wpan0: encryption failed: -126 [ 1582.016406][T11122] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1582.215201][T11122] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1582.227358][T11122] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.227383][T11122] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1582.249099][T11122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.249131][T11122] usb 2-1: Product: syz [ 1582.249147][T11122] usb 2-1: Manufacturer: syz [ 1582.249157][T11122] usb 2-1: SerialNumber: syz [ 1582.475456][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1582.493331][T11122] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1582.493901][T11122] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1582.523926][T11122] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1582.523988][T11122] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1582.552131][T11122] usb 2-1: USB disconnect, device number 11 [ 1582.627869][T21700] FAULT_INJECTION: forcing a failure. [ 1582.627869][T21700] name failslab, interval 1, probability 1, space 0, times 0 [ 1582.627903][T21700] CPU: 0 UID: 0 PID: 21700 Comm: syz.7.4135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1582.627919][T21700] Tainted: [L]=SOFTLOCKUP [ 1582.627923][T21700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1582.627930][T21700] Call Trace: [ 1582.627934][T21700] [ 1582.627939][T21700] dump_stack_lvl+0x100/0x190 [ 1582.627959][T21700] should_fail_ex.cold+0x5/0xa [ 1582.627973][T21700] ? __netlink_lookup+0x652/0x900 [ 1582.627991][T21700] should_failslab+0xc2/0x120 [ 1582.628005][T21700] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1582.628018][T21700] ? skb_clone+0x190/0x400 [ 1582.628032][T21700] skb_clone+0x190/0x400 [ 1582.628048][T21700] netlink_deliver_tap+0xaed/0xcc0 [ 1582.628070][T21700] netlink_unicast+0x62b/0x850 [ 1582.628089][T21700] ? __pfx_netlink_unicast+0x10/0x10 [ 1582.628110][T21700] netlink_sendmsg+0x8b0/0xda0 [ 1582.628129][T21700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.628147][T21700] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1582.628167][T21700] ____sys_sendmsg+0xa4d/0xbe0 [ 1582.628181][T21700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.628199][T21700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1582.628216][T21700] ? lock_acquire+0x1d1/0x380 [ 1582.628228][T21700] ? get_pid_task+0x2a/0x250 [ 1582.628243][T21700] ___sys_sendmsg+0x190/0x1e0 [ 1582.628259][T21700] ? __pfx____sys_sendmsg+0x10/0x10 [ 1582.628274][T21700] ? get_pid_task+0x106/0x250 [ 1582.628294][T21700] ? find_held_lock+0x2b/0x80 [ 1582.628318][T21700] __sys_sendmsg+0x160/0x210 [ 1582.628330][T21700] ? __pfx___sys_sendmsg+0x10/0x10 [ 1582.628349][T21700] do_syscall_64+0x123/0x790 [ 1582.628363][T21700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.628375][T21700] RIP: 0033:0x7fa844d9e159 [ 1582.628385][T21700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.628396][T21700] RSP: 002b:00007fa845bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1582.628408][T21700] RAX: ffffffffffffffda RBX: 00007fa845025fa0 RCX: 00007fa844d9e159 [ 1582.628415][T21700] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1582.628422][T21700] RBP: 00007fa845bee090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.628431][T21700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.628438][T21700] R13: 00007fa845026038 R14: 00007fa845025fa0 R15: 00007ffeb5098198 [ 1582.628452][T21700] [ 1582.936986][T21679] vhci_hcd: connection reset by peer [ 1582.943077][ T5889] vhci_hcd vhci_hcd.4: stop threads [ 1582.943103][ T5889] vhci_hcd vhci_hcd.4: release socket [ 1582.943139][ T5889] vhci_hcd vhci_hcd.4: disconnect device [ 1583.292310][ T4918] Bluetooth: hci5: unexpected cc 0x200b length: 2 > 1 [ 1583.299175][ T4918] Bluetooth: hci5: unexpected event for opcode 0x200b [ 1584.219736][ T30] audit: type=1400 audit(2371.946:3267): avc: denied { write } for pid=21707 comm="syz.1.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1584.391873][T21713] fuse: Unknown parameter 'use00000000000000000000' [ 1584.605770][T18388] usb 6-1: USB disconnect, device number 127 [ 1585.900848][T12969] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1586.576485][T21726] overlayfs: missing 'lowerdir' [ 1586.791851][T21735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=21735 comm=syz.1.4144 [ 1587.490760][T21742] FAULT_INJECTION: forcing a failure. [ 1587.490760][T21742] name failslab, interval 1, probability 1, space 0, times 0 [ 1587.519381][T21742] CPU: 0 UID: 0 PID: 21742 Comm: syz.5.4147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1587.519405][T21742] Tainted: [L]=SOFTLOCKUP [ 1587.519410][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1587.519417][T21742] Call Trace: [ 1587.519422][T21742] [ 1587.519428][T21742] dump_stack_lvl+0x100/0x190 [ 1587.519449][T21742] should_fail_ex.cold+0x5/0xa [ 1587.519466][T21742] should_failslab+0xc2/0x120 [ 1587.519481][T21742] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1587.519494][T21742] ? proc_alloc_inode+0x25/0x200 [ 1587.519510][T21742] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1587.519526][T21742] proc_alloc_inode+0x25/0x200 [ 1587.519541][T21742] alloc_inode+0x68/0x250 [ 1587.519558][T21742] new_inode+0x22/0x1c0 [ 1587.519576][T21742] proc_get_inode+0x1d/0x780 [ 1587.519592][T21742] proc_lookup_de+0x236/0x360 [ 1587.519611][T21742] proc_lookup+0xd8/0x110 [ 1587.519628][T21742] proc_root_lookup+0x3b/0x70 [ 1587.519643][T21742] ? __pfx_proc_root_lookup+0x10/0x10 [ 1587.519660][T21742] lookup_open+0xa79/0x1990 [ 1587.519682][T21742] path_openat+0xa2c/0x2440 [ 1587.519698][T21742] ? __pfx_path_openat+0x10/0x10 [ 1587.519715][T21742] do_file_open+0x20e/0x430 [ 1587.519729][T21742] ? __pfx_do_file_open+0x10/0x10 [ 1587.519759][T21742] ? _raw_spin_unlock+0x28/0x50 [ 1587.519773][T21742] ? alloc_fd+0x471/0x7a0 [ 1587.519792][T21742] do_sys_openat2+0x10f/0x1e0 [ 1587.519810][T21742] ? __pfx_do_sys_openat2+0x10/0x10 [ 1587.519831][T21742] __x64_sys_openat+0x12d/0x210 [ 1587.519847][T21742] ? __pfx___x64_sys_openat+0x10/0x10 [ 1587.519869][T21742] do_syscall_64+0x123/0x790 [ 1587.519885][T21742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.519898][T21742] RIP: 0033:0x7f620099e159 [ 1587.519909][T21742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.519920][T21742] RSP: 002b:00007f62017db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1587.519933][T21742] RAX: ffffffffffffffda RBX: 00007f6200c25fa0 RCX: 00007f620099e159 [ 1587.519941][T21742] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1587.519947][T21742] RBP: 00007f6200a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1587.519954][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1587.519961][T21742] R13: 00007f6200c26038 R14: 00007f6200c25fa0 R15: 00007fffb41f2d68 [ 1587.519976][T21742] [ 1588.059418][T21751] fuse: Bad value for 'group_id' [ 1588.059443][T21751] fuse: Bad value for 'group_id' [ 1588.091077][T21751] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1588.091095][T21751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1588.091143][T21751] vhci_hcd vhci_hcd.0: Device attached [ 1588.121433][T21753] vhci_hcd: cannot find the pending unlink 1 [ 1588.135835][T21753] vhci_hcd: connection closed [ 1588.139542][ T6019] vhci_hcd vhci_hcd.1: stop threads [ 1588.139567][ T6019] vhci_hcd vhci_hcd.1: release socket [ 1588.139585][ T6019] vhci_hcd vhci_hcd.1: disconnect device [ 1588.486810][T21758] 9p: Bad value for 'rfdno' [ 1588.518600][T21758] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 1588.542937][T21758] x_tables: duplicate entry at hook 3 [ 1588.938629][T12969] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1589.081709][T12969] usb 6-1: Using ep0 maxpacket: 8 [ 1589.090105][T12969] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1589.104601][T12969] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1589.104630][T12969] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1589.104651][T12969] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1589.104668][T12969] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1589.104685][T12969] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1589.104700][T12969] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1589.104725][T12969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.502007][T12969] usb 6-1: GET_CAPABILITIES returned 0 [ 1589.502045][T12969] usbtmc 6-1:16.0: can't read capabilities [ 1590.329633][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1590.344103][T12969] usb 6-1: USB disconnect, device number 2 [ 1590.710223][ T5714] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1590.863601][ T5714] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1590.876193][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.876219][ T5714] usb 2-1: Product: syz [ 1590.876235][ T5714] usb 2-1: Manufacturer: syz [ 1590.876245][ T5714] usb 2-1: SerialNumber: syz [ 1590.903882][ T5714] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 1590.928313][ T5714] scsi host1: usb-storage 2-1:1.0 [ 1591.927160][ T5831] ------------[ cut here ]------------ [ 1591.927179][ T5831] URB ffff88802ae81700 submitted while active [ 1591.927196][ T5831] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#0: kworker/0:10/5831 [ 1591.949435][ T5831] Modules linked in: [ 1591.953350][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1591.964430][ T5831] Tainted: [L]=SOFTLOCKUP [ 1591.968771][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1591.979341][ T5831] Workqueue: events_freezable usb_stor_scan_dwork [ 1591.985755][ T5831] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 1591.992166][ T5831] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 5e 72 7d fa 48 8d 3d 57 a1 c3 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 1592.012076][ T5831] RSP: 0018:ffffc90004387a18 EFLAGS: 00010293 [ 1592.018338][ T5831] RAX: 0000000000000000 RBX: ffff88802ae81700 RCX: 0000000000000000 [ 1592.026387][ T5831] RDX: ffff88801f30a580 RSI: ffff88802ae81700 RDI: ffffffff91522f10 [ 1592.034514][ T5831] RBP: 1ffff92000870f56 R08: 0000000000000002 R09: 0000000000000000 [ 1592.042540][ T5831] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888077900fc0 [ 1592.050542][ T5831] R13: ffff888077900f38 R14: ffffc90004387ad0 R15: ffff88802ae81700 [ 1592.058548][ T5831] FS: 0000000000000000(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000 [ 1592.067494][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1592.074669][ T5831] CR2: 0000200000003940 CR3: 000000008253f000 CR4: 00000000003526f0 [ 1592.083099][ T5831] Call Trace: [ 1592.086418][ T5831] [ 1592.089380][ T5831] ? lockdep_init_map_type+0x5c/0x250 [ 1592.094843][ T5831] ? lockdep_init_map_type+0x5c/0x250 [ 1592.100248][ T5831] ? __init_swait_queue_head+0xca/0x150 [ 1592.105861][ T5831] usb_stor_msg_common+0x241/0x560 [ 1592.110984][ T5831] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 1592.116629][ T5831] usb_stor_Bulk_max_lun+0x428/0x680 [ 1592.121944][ T5831] usb_stor_scan_dwork+0x1e6/0x2c0 [ 1592.127054][ T5831] process_one_work+0xac7/0x1b10 [ 1592.132025][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 1592.137391][ T5831] ? lock_acquire+0x1d1/0x380 [ 1592.142083][ T5831] ? __pfx_usb_stor_scan_dwork+0x10/0x10 [ 1592.147704][ T5831] worker_thread+0x5ef/0xe50 [ 1592.152335][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1592.157442][ T5831] ? kthread+0x13a/0x450 [ 1592.161693][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1592.167281][ T5831] kthread+0x373/0x450 [ 1592.171349][ T5831] ? __pfx_kthread+0x10/0x10 [ 1592.176180][ T5831] ret_from_fork+0x730/0xd60 [ 1592.181069][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1592.186172][ T5831] ? __switch_to+0x800/0x10f0 [ 1592.190883][ T5831] ? __pfx_kthread+0x10/0x10 [ 1592.195475][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1592.200247][ T5831] [ 1592.203258][ T5831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1592.210511][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1592.221511][ T5831] Tainted: [L]=SOFTLOCKUP [ 1592.225807][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1592.235837][ T5831] Workqueue: events_freezable usb_stor_scan_dwork [ 1592.242237][ T5831] Call Trace: [ 1592.245497][ T5831] [ 1592.248408][ T5831] dump_stack_lvl+0x100/0x190 [ 1592.253075][ T5831] vpanic+0x553/0x970 [ 1592.257034][ T5831] ? __pfx_vpanic+0x10/0x10 [ 1592.261535][ T5831] panic+0xd1/0xe0 [ 1592.265258][ T5831] ? __pfx_panic+0x10/0x10 [ 1592.269674][ T5831] check_panic_on_warn.cold+0x19/0x34 [ 1592.275022][ T5831] ? usb_submit_urb+0x1689/0x19b0 [ 1592.280034][ T5831] __warn.cold+0x191/0x318 [ 1592.284439][ T5831] __report_bug+0x30f/0x440 [ 1592.288927][ T5831] ? usb_submit_urb+0x1689/0x19b0 [ 1592.293945][ T5831] ? __pfx___report_bug+0x10/0x10 [ 1592.298951][ T5831] ? register_lock_class+0x3f/0x7b0 [ 1592.304143][ T5831] report_bug_entry+0xe2/0x290 [ 1592.308886][ T5831] ? usb_submit_urb+0x168c/0x19b0 [ 1592.313885][ T5831] handle_bug+0x1cd/0x2a0 [ 1592.318192][ T5831] exc_invalid_op+0x17/0x50 [ 1592.322673][ T5831] asm_exc_invalid_op+0x1a/0x20 [ 1592.327496][ T5831] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 1592.333101][ T5831] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 5e 72 7d fa 48 8d 3d 57 a1 c3 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 1592.352692][ T5831] RSP: 0018:ffffc90004387a18 EFLAGS: 00010293 [ 1592.358756][ T5831] RAX: 0000000000000000 RBX: ffff88802ae81700 RCX: 0000000000000000 [ 1592.366703][ T5831] RDX: ffff88801f30a580 RSI: ffff88802ae81700 RDI: ffffffff91522f10 [ 1592.374676][ T5831] RBP: 1ffff92000870f56 R08: 0000000000000002 R09: 0000000000000000 [ 1592.382649][ T5831] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888077900fc0 [ 1592.390602][ T5831] R13: ffff888077900f38 R14: ffffc90004387ad0 R15: ffff88802ae81700 [ 1592.398559][ T5831] ? usb_submit_urb+0x1682/0x19b0 [ 1592.403568][ T5831] ? lockdep_init_map_type+0x5c/0x250 [ 1592.408917][ T5831] ? lockdep_init_map_type+0x5c/0x250 [ 1592.414264][ T5831] ? __init_swait_queue_head+0xca/0x150 [ 1592.419790][ T5831] usb_stor_msg_common+0x241/0x560 [ 1592.424894][ T5831] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 1592.430515][ T5831] usb_stor_Bulk_max_lun+0x428/0x680 [ 1592.435775][ T5831] usb_stor_scan_dwork+0x1e6/0x2c0 [ 1592.440861][ T5831] process_one_work+0xac7/0x1b10 [ 1592.445792][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 1592.451143][ T5831] ? lock_acquire+0x1d1/0x380 [ 1592.455797][ T5831] ? __pfx_usb_stor_scan_dwork+0x10/0x10 [ 1592.461408][ T5831] worker_thread+0x5ef/0xe50 [ 1592.465982][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1592.471072][ T5831] ? kthread+0x13a/0x450 [ 1592.475291][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1592.480382][ T5831] kthread+0x373/0x450 [ 1592.484430][ T5831] ? __pfx_kthread+0x10/0x10 [ 1592.489013][ T5831] ret_from_fork+0x730/0xd60 [ 1592.493579][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1592.498664][ T5831] ? __switch_to+0x800/0x10f0 [ 1592.503329][ T5831] ? __pfx_kthread+0x10/0x10 [ 1592.507920][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1592.512769][ T5831] [ 1592.515803][ T5831] Kernel Offset: disabled [ 1592.520123][ T5831] Rebooting in 86400 seconds..