last executing test programs: 8m20.567467543s ago: executing program 0 (id=2350): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000300)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x2}, 0x90) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x40000000000009, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)}, {&(0x7f00000003c0)="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", 0x445}], 0x2}}], 0x1, 0xf5) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001900)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x84) r9 = syz_open_procfs(0x0, 0x0) vmsplice(r8, &(0x7f00000018c0)=[{&(0x7f0000000200)="a5403e42855dd3cbb3b279030fc8268ee4858be78df295d79a020060219bc3eecacb959984dbce28e0d5e23c930963dfa33dfc10be8b7bd819986ee19f1853a6c7ee474c522c", 0x46}, {&(0x7f0000000340)="15a7dbe9b4b76adc8979b04d15203c370bb821fbfcce89d017bbeb4875cece0316d0e6a6edde64ebfdb0cb63f8ed06f81cd0", 0x32}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="a9aef26b432e685e20368ebdd8b5f04a3e66da7566c59dc1f809baf8edc49633c6bc74c61600f321bda45f4589b4f2d645dde88973fbc85d806b81118795bbc569702f21ab5d49bacb2e77a5739db78a8c95603f8e4cda8b1b7639cc3974fa7a", 0x60}], 0x4, 0x2) lseek(r9, 0x7fffffffffffffff, 0x1) write$binfmt_script(r9, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "4e9c3fb0c007000000117d41ae9b4d237ab69f95a1a3206801b3eb012d71fa0beae1d1980706da6bbf05102e7ac834874ed0774560d96281eb3557500d4781e31750cfd7b8"}, 0x0) 8m19.992042854s ago: executing program 0 (id=2354): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4b0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x49c, 0x1, [@m_skbedit={0x64, 0x1b, 0x0, 0x0, {{0xc}, {0x4}, {0x35, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fbadeeb6072c89858dd5906147999216cc48ed5d8632b5794d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4b0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 8m19.12885111s ago: executing program 0 (id=2362): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 8m18.198702974s ago: executing program 0 (id=2370): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x130, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_ublk_setup_io_uring(0x409f, &(0x7f0000000340)={0x0, 0xa59b, 0x8000, 0x0, 0x61}, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) 8m14.001080605s ago: executing program 0 (id=2386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m10.971613017s ago: executing program 0 (id=2406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101c03) pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x1, 0x0, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000040)=0x14b) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd2(0x42000006, 0x801) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000080)=0xfffffffd, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000000280)={{0xd6, 0x9f}, 0x100, './file0\x00'}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x7, 0x2}) 8m10.546854526s ago: executing program 32 (id=2406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101c03) pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x1, 0x0, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000040)=0x14b) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd2(0x42000006, 0x801) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000080)=0xfffffffd, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000000280)={{0xd6, 0x9f}, 0x100, './file0\x00'}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x7, 0x2}) 1m53.413218419s ago: executing program 5 (id=3964): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) r1 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r1, &(0x7f0000000180)="aa131fd2222953972e434ed7973ec947e2fca463eb38b0c57a5375640607fa79f65b1e90817ec2266f90b20bb6e4f554720d3197bde013a6e2fa812879e35e29bf5285e6289ba537591bcbf3534e3f60833687e40c49cf53fb26a3cd59fe", 0x5e, 0x4000000, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m51.793742346s ago: executing program 5 (id=3976): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000f80)="56da93", 0x3}], 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) 1m50.793886704s ago: executing program 5 (id=3981): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x100, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0) socket(0x21, 0x80000, 0x1ff) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0xc, 0x40, 0x11}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x0, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1m48.047441266s ago: executing program 5 (id=3994): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 32) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0xcb, 0x6001}) (async) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040), 0x22a1003, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '&\\'}}]}) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x131ae228982509f0}, 0x40008d1) (async) sendmsg$inet_sctp(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000014c0)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) (async) socket$kcm(0x29, 0x2, 0x0) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xb, 0x1, [0x4]}, 0xa) (async) mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) 1m47.699126218s ago: executing program 5 (id=3995): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x5}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0xffffffff91d17410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0xa, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x10000, 0x4, {0x20000000001, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x75, 0xdab5, 0x6000, 0x0, r6, r7, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfb, {0x16}, [@typed={0x8, 0xe2, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x144, 0x0, 0x0, @pid=r3}, @nested={0x8c, 0xad, 0x0, 0x1, [@nested={0x4, 0xab}, @nested={0x4, 0x149}, @nested={0x4, 0x36}, @nested={0x4, 0x15d}, @typed={0x8, 0x169, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="6e5acdfa4a4e41efe20e36fe39508d713a7611820839443da99b3cf8050d1f684b462f80ad9fe3e06753e3cd997b5ae416e209858174551cd175ef756b0375316a92a440147af201e3ffbdbfc26661ca5b8369b554742bb59fe54dccd5c207e583f921c2bb7f8bb5823476aa30de7abc"]}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@empty}, @nested={0x13c, 0xa6, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @uid=r6}, @generic="ee62db92162bd8124abb684b982ef61bc60655f94d73317327941d85f36d5660691ea1bdf1e88e61c10c1355068352900354c58e1c697910da31c68c5919e7a3c9379fb259ec0c89ab536429fb", @nested={0x4, 0xc3}, @typed={0xf, 0x77, 0x0, 0x0, @binary="6184c8f82ac84c71786bbb"}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="0a6a642fff446718fb94889b9ec8faa130326cdaaef58f1627c9fed84d085ae3f0e61ef993305427f5361c4c6f6180d30351b048cc0a8bc8b94a3d1fdbf916d8003e", @nested={0x4, 0xb8}, @nested={0x4, 0xf3}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0x3}, @generic="05936dfedaac7dc114ccfb9336c4777df0d31bc12c185448a4f16a342278fa7a802849e16e195a54bc9fdede6271a702ba403beecfc906690d5838eb013277c13368a76399a0f29e37f9d93e532de2109dd09fec52ecdc8aa0c12bdc481cfbb98290b2a3e5e476c59acaa57c97abc008d0"]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x41}, 0x20000800) timerfd_settime(r0, 0x2, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) unshare(0x400) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r11 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r11, 0x2007ffd) sendfile(r9, r10, 0x0, 0x1000a3) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r12 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r12, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r12, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x101}) 1m46.764085977s ago: executing program 5 (id=3997): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12020) 1m46.13566472s ago: executing program 33 (id=3997): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12020) 54.729826526s ago: executing program 6 (id=4194): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x300, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x1f, 0x40, {0x40, 0x30, "6b0bc695aebeb305d2af1adc3f9a91be23ec98006dec2f1ab1155a9bb09e1e27c9f485aca1035ee21facadb0ba79eb75210e0291e580cb1359b733a27849"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x39, 0x307, 0x70bd2c, 0x25dfdbfe, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d000609058202", @ANYRES8], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4004008) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) 49.744110895s ago: executing program 6 (id=4204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0xfffffffffffffffe, 0x1, 0x1}}, 0x40) 49.279487313s ago: executing program 6 (id=4209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x40000000000) 48.697342725s ago: executing program 6 (id=4210): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5eaa) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20049800, 0x0, 0x0) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x9) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, &(0x7f0000000f00), 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) write(0xffffffffffffffff, &(0x7f0000000700)="0100", 0x2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x0, 0x8, 0x200}) r1 = fsmount(r0, 0x0, 0x0) write(r0, &(0x7f0000000a00), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000240)='./gadget/dummy_udc\x00', &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0), 0x1200) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) socket(0xf, 0x6, 0x3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2ee5, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r4, 0x1000004, 0xfffffffd, 0x82, 0x0, 0x0) 45.513538805s ago: executing program 6 (id=4222): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="aa131fd2222953972e434ed7973ec947e2fca463eb38b0c57a5375640607fa79f65b1e90817ec2266f90b20bb6e4f554720d3197bde013a6e2fa812879e35e29bf5285e6289ba537591bcbf3534e3f60833687e40c49cf53fb26a3cd59fe", 0x5e, 0x4000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 44.58312501s ago: executing program 6 (id=4226): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (fail_nth: 2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 44.081081789s ago: executing program 34 (id=4226): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (fail_nth: 2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.168305156s ago: executing program 3 (id=4342): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x20000000, 0xe, 0x0, &(0x7f0000000000)="592b3a3a9ca133a22c24b3eaf638", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f00000036c0)={&(0x7f00000026c0)=[0x80000000, 0x4, 0xfffffae7, 0x8, 0xb49b, 0xb9, 0x8, 0x7, 0x8, 0xc, 0x5, 0x7fffffff, 0x8000, 0x40, 0xc, 0x3, 0x2, 0x7fffffff, 0x81, 0x800, 0x2, 0xffffffff, 0xcbff, 0xd, 0x0, 0x8, 0x1, 0x5, 0x1, 0x5, 0x0, 0x1, 0x200, 0xa, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0xde, 0x4, 0x7ff, 0x4, 0x101, 0x3c8eb758, 0x5, 0x0, 0x9, 0x1, 0x8, 0xd, 0xf, 0x1, 0x0, 0x2, 0xb3, 0x9, 0x5, 0x2, 0xfffffffe, 0x2, 0x3481, 0xf, 0x3ca, 0x40, 0x7fffffff, 0x1, 0x6, 0x5, 0x645c, 0xe367, 0xff, 0x1, 0x6, 0xb5, 0x7, 0xa, 0x6, 0x2, 0x4, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fffffff, 0x1, 0x32b5c1bb, 0x1b5, 0x2, 0xa8, 0x2, 0x5, 0x163, 0x6, 0x3a, 0x7ff, 0xfffffff9, 0x9, 0x24, 0x9, 0x4, 0x3, 0xa5c, 0xfffffffb, 0x101, 0xd29, 0x5, 0x8, 0x401, 0x9, 0xfc, 0x9, 0x0, 0xffff, 0x120, 0x8, 0x7, 0x0, 0x3e0ccb75, 0x4c, 0x6, 0x1, 0xe, 0x7f, 0x0, 0xfffffff7, 0x1, 0x0, 0x115, 0x9, 0x41aeb496, 0xfffffff7, 0x6, 0x80000000, 0x2, 0x400, 0xfffffff0, 0x6, 0x485, 0x4, 0xd4e, 0x7, 0x0, 0x1, 0x1, 0x5, 0x6, 0x7fffffff, 0xc00, 0x4, 0x4, 0x6d, 0x5, 0x92, 0x7, 0x9, 0xfffff800, 0x9, 0x7, 0x8, 0x8a7, 0x2, 0x94, 0x6, 0x200, 0x4, 0x7, 0xe4, 0x80, 0x5, 0x0, 0x4, 0x8, 0x81, 0x7bcc, 0x0, 0x6, 0x1000, 0xd, 0x0, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x100, 0x4, 0x58, 0x2, 0xe956, 0x5, 0x9, 0x0, 0xfdae, 0x8, 0x0, 0x7, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x2, 0x7fff, 0xff, 0x8000, 0x10, 0x49, 0x0, 0x1, 0x55, 0x4, 0xc, 0x2, 0x8, 0xff1, 0xffffffc6, 0x1, 0x7, 0x3, 0x5, 0x7, 0x80000001, 0x10000, 0x83db, 0x2, 0xd, 0x1ff, 0x6, 0x0, 0x0, 0xb2, 0x61, 0x7, 0x80000001, 0xb9b, 0x4, 0x35, 0x8, 0x5, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0xffff, 0x5, 0xbfda, 0x3, 0x5, 0x0, 0x10001, 0x608, 0x0, 0x9, 0x6, 0x1, 0x63d, 0x6, 0xd92583, 0xa9, 0x2, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0xfffffc71, 0xfffffffe, 0xb, 0x1, 0x5, 0x9, 0x80, 0xfff, 0x2, 0x4, 0x2, 0x81, 0x3, 0x8, 0x682, 0x3, 0x5, 0x9f70, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x7f, 0x9ecd, 0x5, 0xb3d, 0x3, 0x9, 0x5, 0xeea1, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x5, 0x101, 0xf5, 0x1, 0xfffffff0, 0xd121, 0x6, 0x4, 0xffffff00, 0x80000000, 0x5, 0xd, 0xf3c, 0x7fffffff, 0x1ff, 0x7, 0x94, 0x8001, 0x0, 0x2, 0x9, 0x6, 0x6, 0x8001, 0x6, 0x0, 0x8000, 0x6, 0x9, 0x4, 0x9d, 0x9, 0x80000001, 0x7, 0x7f8, 0xcb9c, 0x1, 0x6, 0xe, 0x400, 0x1, 0x6, 0x5, 0x51e, 0x7, 0xfffffffd, 0x7, 0x97f1, 0xb, 0x80000001, 0xaa, 0xffff81f5, 0x80, 0x8, 0x9, 0x8, 0x1, 0xffffffe3, 0x5086, 0x4, 0x8, 0x2, 0x8, 0x54d8, 0x1000, 0x7, 0x5848, 0x83, 0x2, 0x10001, 0x9, 0x65b97b8b, 0x1, 0x2, 0x400, 0x3, 0x5, 0x0, 0xa65, 0x280, 0x0, 0xf74, 0x3, 0x2, 0x3, 0x7, 0x400, 0x9, 0x2, 0xfffff122, 0x7fffffff, 0x8, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8000, 0x7274, 0x8001, 0xffff46da, 0x469, 0x9, 0x6, 0x9, 0x3, 0xf, 0x0, 0x0, 0x8, 0x6, 0x3, 0x1, 0xfffffff8, 0x7df2, 0xe939, 0x7, 0x10, 0x6, 0x2, 0x1, 0x8, 0x1145, 0x7, 0xa, 0xe72, 0x2, 0x1, 0x40000, 0x9, 0xfffffffc, 0x5, 0x293400, 0x6c, 0x56, 0x9, 0xfffffff7, 0x80, 0x0, 0x9f, 0x2, 0x3, 0xfff, 0x10001, 0x2, 0x9, 0x9cd5, 0x8, 0x10001, 0x6, 0x6, 0xc02f, 0xc, 0xfffffffa, 0x0, 0x2, 0xa, 0x9, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x439b, 0x0, 0x8, 0x8, 0x1, 0x15e, 0x9, 0xfffffffa, 0x800, 0x3, 0xe, 0xfffffe01, 0xfffffffb, 0xed2, 0x800, 0xb, 0x2, 0x6, 0x2, 0xa82c, 0x100, 0x5, 0x7ff, 0x8, 0x9, 0x7f, 0xd9, 0x7d, 0x8, 0x2, 0x1, 0x2, 0x9, 0x6, 0x9, 0x8efe, 0x8, 0x5, 0xc9, 0x2, 0x81, 0x6, 0x5, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x8, 0x34, 0x0, 0xe, 0x6, 0x10, 0xe62, 0x8, 0x8, 0x4, 0x0, 0x9, 0x830, 0x3, 0x0, 0x1b3, 0x0, 0x7, 0x8, 0x7, 0x7, 0x80, 0x8, 0x0, 0x7fffffff, 0xfffffff8, 0x5, 0x6, 0xfffffff8, 0x4a, 0x3a2, 0x5, 0x400, 0x612, 0x401, 0x200, 0x7, 0x8000, 0x9, 0x9, 0x800, 0xfff, 0x0, 0x8, 0x10001, 0x1, 0x10000, 0x1, 0xb10, 0x43, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x40, 0x3, 0x800, 0x101, 0x0, 0x6d3a, 0x3, 0xffffffff, 0x1, 0xa59, 0x5, 0x3e6, 0x90000000, 0x101, 0x3, 0xbbd3, 0x4, 0x6, 0xfe1, 0x2, 0x8003, 0xe00, 0xfffe0000, 0x5, 0xfffffffb, 0x8001, 0x10001, 0xfa, 0xb, 0x6, 0xe4, 0x6, 0x2, 0x8, 0x1, 0x1ff, 0x84e, 0x30, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x300, 0x12c, 0x4, 0xc, 0x6, 0x9, 0x7, 0x40, 0x0, 0xcc, 0x4e6, 0x80000000, 0x2, 0xc202, 0x4cfda994, 0x2, 0x5, 0xfffffbff, 0x9, 0xb, 0x200, 0xd3, 0x0, 0x2, 0x3, 0x8, 0x1, 0x7, 0x5, 0xffffffff, 0x6, 0x8, 0x80, 0x7, 0x1, 0x0, 0x874c, 0x7f, 0x1, 0x4, 0x5, 0x9, 0x26d2, 0x8, 0x5, 0x0, 0x10, 0x2, 0x8000, 0x101, 0x22, 0x7, 0x8, 0x5, 0xf75, 0x2, 0xce, 0x0, 0x5, 0x1d, 0x32d, 0x6, 0x8, 0x1951759c, 0x7, 0x4, 0x101, 0x2, 0x81, 0x9, 0xff, 0x8, 0x1ff, 0xaad3, 0x3, 0xc7, 0x2, 0x4, 0x296, 0x8000, 0x1, 0xfffffffe, 0xc9, 0x1000000, 0x9, 0x1, 0x3, 0x5, 0x4, 0x3, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x25, 0x4, 0x6, 0xe, 0x6, 0x200, 0x1, 0x9, 0x6, 0x800, 0x5, 0xfffffffc, 0xfffffffa, 0xe6ba, 0x9, 0x8, 0x10000, 0x222eee1a, 0x4, 0x400000, 0x1000, 0xb9a3, 0x7, 0x1, 0xb0, 0x0, 0x0, 0x9, 0xc, 0x500, 0xf1b, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x8c, 0xd25, 0xfffff001, 0x80000000, 0x5, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x1, 0x3, 0x800, 0x5, 0x7, 0xff, 0x7, 0xc5aa, 0xc, 0x3, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x4, 0x80, 0x4, 0x80000001, 0x80000000, 0xe, 0x0, 0x7, 0x0, 0x9, 0x1, 0x7, 0xa3, 0xfffffffd, 0x283e, 0x3, 0x5, 0x8, 0xb6, 0x4, 0x0, 0x1, 0x7fffffff, 0x1000, 0x4, 0x4, 0xb00d, 0x4, 0x8, 0xc25c, 0x3, 0xe, 0x9, 0x6, 0x9, 0x518d1433, 0x98, 0x0, 0x7, 0x3, 0x9, 0x9, 0x2, 0x6, 0x8, 0x100, 0x5, 0x2, 0x4, 0xa, 0x0, 0x0, 0xf4, 0x27e, 0x5, 0x557a23e2, 0x5, 0x7, 0xffffffc0, 0xc, 0xb11, 0x6b8d, 0x7, 0x1ff, 0x4, 0x80, 0xf022, 0x3, 0xffffffff, 0x3, 0x7, 0x80000001, 0x10001, 0x2, 0x8, 0xffffffc0, 0xe58, 0x9, 0x7, 0x9, 0x1, 0x6, 0x401, 0x401, 0x6, 0x2, 0xfffffffd, 0x4, 0x4, 0x5, 0xef3, 0x1000, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x8f0e, 0x1, 0x3, 0x860, 0xee4, 0x7f, 0x81, 0x5, 0x2, 0x3, 0x9, 0x1, 0x6, 0x5, 0x10, 0x2, 0x1, 0xff, 0xff, 0x6, 0xc, 0xb, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf5, 0xfffffff9, 0x26ef, 0xffff95b8, 0x4, 0x76, 0x1, 0x0, 0xfff, 0x7, 0x374, 0x9, 0xff, 0x6, 0x7f, 0xffff, 0x52, 0xfffffff6, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x9, 0x2, 0x1000, 0x3, 0xf5c, 0x1908, 0xc50, 0x800, 0x0, 0x7fff, 0xffff0000, 0x1ff, 0xc019, 0x6, 0x0, 0x2, 0x9, 0x400, 0x1f95e79d, 0x10000, 0xefe, 0x8, 0x0, 0x8, 0x6fe2, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0x1, 0x6d2, 0x10000, 0x2, 0x9, 0x8, 0xe, 0xf6, 0x1, 0x8, 0x1, 0x1, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x80000000, 0x6, 0x6, 0x92, 0x1, 0xf, 0x6, 0x40000000, 0x1, 0x4, 0xc10, 0xa349, 0xfffffe00, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x6, 0x1, 0x7, 0x4, 0x854, 0x1, 0x101], 0x1, 0x400, 0x7}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x20020005, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) listen(r7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.145418965s ago: executing program 4 (id=4343): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5eaa) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20049800, 0x0, 0x0) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x9) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, &(0x7f0000000f00), 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) write(0xffffffffffffffff, &(0x7f0000000700)="0100", 0x2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x0, 0x8, 0x200}) r1 = fsmount(r0, 0x0, 0x0) write(r0, &(0x7f0000000a00), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000240)='./gadget/dummy_udc\x00', &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0), 0x1200) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) socket(0xf, 0x6, 0x3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000004, 0xfffffffd, 0x82, 0x0, 0x0) 8.879573126s ago: executing program 3 (id=4348): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a00000008000100670000000800", @ANYRES32=0x0, @ANYRES16=r0], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f0000000240)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000300)="0ffa81c658cf5278d8f8ff0fc8b9a41ee6d3a2aa4a8f2ac59c539aedba17588ada4e9a0f76df0d435c6d363072bf3ded2196cf6b4b176c5fac6bdb0e5bc8ae5631e3f035d57cd92502098aa73f9be71182a889fdccaa1075a3b64b255c15fe5bc3e2bd4f9bd8c250f5676a3c21371487cb6af57179bff97636caa88357747494e9beded9421377c8ef7a06af49eda02deab7d21fed", 0x95}, {&(0x7f0000000500)="b58242538ef4f724eff19cc307a5f84fed2ba8f4f6cc5ad216e7f53e86580aa4f85a5f4341b26317c23c66111875a21595cdffe76d9f6070dad587aab3447d3ed9831943ada2bc2a71d997024d4354fe7ed616c6f6f058dcea90c0fcebe3b1e785026ea14e1ce382de687aced181c3bae396e3138154a88f452f3d41a9c351f1e5f84d60a772611dcca727ba47332e859946f2d0076ee0529023a75a9f5cc8825648357d2fbf2c7847f849e0ab5facdee3712899ae40e9a49021efe2c130668032", 0xc1}, {&(0x7f0000000600)="dbe6ce3d57117f7d715dab363ae9b8bae97b73a0a920dadbc0e239bfcaa5efc5f2544faff713a6afa725f2c87f756f1a99b9b07efbffc1292270b7ef665e6256e81054c605830d4b216b34d8c39af48b5c71", 0x52}, {&(0x7f0000000680)="6500b9ce60d20b928bc267ac65769777c588e4b9", 0x14}, {&(0x7f00000006c0)="90870779204ea38bba00ad8f4c27f11415ee7e7bcb60554424d22751839e86ecfd46d09029fb049ab774aef7982c8df11f7f2b8dba52b92962ddb8a2e66e1d1c3973ac9bfa4c", 0x46}, {&(0x7f0000000740)="bcc27942d61b71555b245666623b9a45e6e8041d0ade563b3cf1b0b145ee960a0f8febbdf86992008839fc8fd5508c7f559e27bdbe2d972b6504918e6edb3e1aba7969bb4a9e1081faef1e4fe2d6f89f11e848b214a83e783279fd0c8005b511f9bcca0d9b22488ad4d772d241054dee442f50bbcd25962d00d5628430417045c67ff2c714849e345a84cae34810e162eb3497a5fc95b9f8f006a2f1d021d76e8e81daf631e0d88e0fc050a05acc6e34d2b49c9191b1c873fcc7e39fc0ec42016d3702a4b37b95", 0xc7}, {&(0x7f0000000840)="5fee94e28d4a99d9efa2", 0xa}, {&(0x7f0000000880)="8e1c9dc8696c8d3ffbf7f11422f4603b6e409a5f842120f48b5337b69c917c7b1cc874215a1425d011581c3ffbf113157798b7ee4d5e638f362dcedaeee5ebb03e554292f5c6d2156fcd919c499b49b7d955809e536e705f6fa212dc2f12f7e769164f2fede8b13b1c40518a0a6ea6b39a990653ad72f1baa694884bea7e0481a7650d7172f7711c28dc53910b04058e36c692216f6d9dd15c39b403fe3b20bc8f7da5dfe1b2949671959ecfad84507cde627d0521b1a889688ea72b5273f267105df4330bcdeda00351cdf5c70b7cc7232d43e288c00d78e9ee0cf238a1681ac2", 0xe1}], 0x8, &(0x7f0000000a00)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0xda, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}, @tclass={{0x14}}, @hopopts={{0x28, 0x29, 0x36, {0x62, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5e}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x78}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x8}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000100)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 8.193653456s ago: executing program 7 (id=4352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) 8.115193727s ago: executing program 7 (id=4353): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x21}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0xe, 0x9, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0xfffd, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x8, 0x9, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xa6, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x5, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xa, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf7, '\x00', 0x4}, {0x20, 0x6, 0x4}]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x98dd, 0x1c080, 0x3, 0x1d7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000980)={&(0x7f0000001000)={[{&(0x7f0000000340)="3fd2375617ff720f316eb666dfef08ef313207e83264d10fbd5731b0de798b295a5dd48f5aad", 0x26}, {&(0x7f0000000840)="7ed74dadfa8a61d2c7b66bc56d70a59a1b52b1442978e276f6aa9b85491adcaf74e707525f11dc1781f19247272914f612d49e47b403ed437f8874396bbeddfa65d8eab153e03c7ddf3023ef493ccafde65b1fd10ec15809d086acfb7e9200a289158d66001ca0bb422fbb51b1303cf88250402d376c0c52bf7d521f286d52bde42fc9055b73f78d31f7c767c04f6ee8cfeba01963f093f44fa569999724a3d0230cd9f20e319bcbd5f917b002fd8af5c9f4102c9b897e6ffe5e0243535a44dfe6d5ff750daed6aa0908ae41621174a9023570d30b6b45574b78215d2c8bbba04d76b1", 0xe3}, {&(0x7f0000000940)="5ee0124d6829ee66e16d4f", 0xb}]}, 0x3, 0x2, 0x1}, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r7, r12, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0xfffffffe, 0x120000}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffd, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x2, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x1, 0x3, 0x0, 0x0, r7}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x8000, 0xd3d, 0x0, 0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4010}, 0x2c0c0890) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r13 = syz_open_dev$sg(&(0x7f0000000100), 0x5, 0x121200) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xa, 0x80, 0x3fff8, 0x2, 0xfffffffffffffff7, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x5, 0x1, 0xd, 0xa}], 0x10, 0x26}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 7.487752891s ago: executing program 2 (id=4356): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2d) socket(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x4c, 0x6, 0x8f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18009d00000000000000fd5f0141db4b31d7000000000000711850113414b075"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xed27, @remote, 0xb}, @in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}], 0xa4) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @loopback, @remote}, 0xc) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) futex(0x0, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x0) syz_usbip_server_init(0x1) 6.192542991s ago: executing program 3 (id=4357): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x1c, 0x8, 0x400, 0x400, 0x800, 0xd0}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r2, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES8=r5, @ANYRES8=r4, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x24046880) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x8) 5.89552125s ago: executing program 4 (id=4359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r8}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0xd}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000001600)=ANY=[], 0x0) 5.011227114s ago: executing program 2 (id=4361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.66946375s ago: executing program 4 (id=4362): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 4.496437264s ago: executing program 4 (id=4364): socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000008}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0xc0000001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0xfffffffe, {}, [{0x7c, 0x1, [@m_tunnel_key={0x3c, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x3c, 0x2002, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x13, 0x6, "f0998f127b692756191b4a76144ebd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}}, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000000100), 0x0, 0x40101) write$mtd(r6, &(0x7f0000000180)="7d48146e550ef463ccc01f06a465", 0xe) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-arm\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000240)="1de2976a102e5b15b6fadce2303915974e70e4a03e3567f23b47068662f7c37ca4f68bc3cbfa33de757110a55b324d7758701eefd53ba3b9cf01db7b6b1f974b7963196920bd12abe274d74c27cae2bb308c0abb7bd39225658a06a5f882b63f9ff7630ed03a043a39aba901c4def967259e922c38123869c44f3c693e54411af41b1932eb1370ce87c86372c1df97400ff5b4f0fb3de1bc3765f86ff3b6588306fb0ec353378414bba8d8f85965b72d79c15fb644830e808f367b53350ee0a73ece249a86d7bdbdb3f967bc05a987e1b403f325934269d5c2f3c7b18d7c209ba825", 0xe2) r9 = io_uring_setup(0x7b04, &(0x7f0000000040)={0x0, 0x40006e1, 0x40, 0x8, 0x263, 0x0, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESDEC=r4], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x1f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) 4.477599362s ago: executing program 2 (id=4365): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294967 95 2\\00000000 0\n', 0x18) 4.462064101s ago: executing program 3 (id=4366): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.395918546s ago: executing program 7 (id=4367): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a00000008000100670000000800", @ANYRES32=0x0, @ANYRES16=r0], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f0000000240)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000300)="0ffa81c658cf5278d8f8ff0fc8b9a41ee6d3a2aa4a8f2ac59c539aedba17588ada4e9a0f76df0d435c6d363072bf3ded2196cf6b4b176c5fac6bdb0e5bc8ae5631e3f035d57cd92502098aa73f9be71182a889fdccaa1075a3b64b255c15fe5bc3e2bd4f9bd8c250f5676a3c21371487cb6af57179bff97636caa88357747494e9beded9421377c8ef7a06af49eda02deab7d21fed", 0x95}, {&(0x7f0000000500)="b58242538ef4f724eff19cc307a5f84fed2ba8f4f6cc5ad216e7f53e86580aa4f85a5f4341b26317c23c66111875a21595cdffe76d9f6070dad587aab3447d3ed9831943ada2bc2a71d997024d4354fe7ed616c6f6f058dcea90c0fcebe3b1e785026ea14e1ce382de687aced181c3bae396e3138154a88f452f3d41a9c351f1e5f84d60a772611dcca727ba47332e859946f2d0076ee0529023a75a9f5cc8825648357d2fbf2c7847f849e0ab5facdee3712899ae40e9a49021efe2c130668032", 0xc1}, {&(0x7f0000000600)="dbe6ce3d57117f7d715dab363ae9b8bae97b73a0a920dadbc0e239bfcaa5efc5f2544faff713a6afa725f2c87f756f1a99b9b07efbffc1292270b7ef665e6256e81054c605830d4b216b34d8c39af48b5c71", 0x52}, {&(0x7f0000000680)="6500b9ce60d20b928bc267ac65769777c588e4b9", 0x14}, {&(0x7f00000006c0)="90870779204ea38bba00ad8f4c27f11415ee7e7bcb60554424d22751839e86ecfd46d09029fb049ab774aef7982c8df11f7f2b8dba52b92962ddb8a2e66e1d1c3973ac9bfa4c", 0x46}, {&(0x7f0000000740)="bcc27942d61b71555b245666623b9a45e6e8041d0ade563b3cf1b0b145ee960a0f8febbdf86992008839fc8fd5508c7f559e27bdbe2d972b6504918e6edb3e1aba7969bb4a9e1081faef1e4fe2d6f89f11e848b214a83e783279fd0c8005b511f9bcca0d9b22488ad4d772d241054dee442f50bbcd25962d00d5628430417045c67ff2c714849e345a84cae34810e162eb3497a5fc95b9f8f006a2f1d021d76e8e81daf631e0d88e0fc050a05acc6e34d2b49c9191b1c873fcc7e39fc0ec42016d3702a4b37b95", 0xc7}, {&(0x7f0000000840)="5fee94e28d4a99d9efa2", 0xa}, {&(0x7f0000000880)="8e1c9dc8696c8d3ffbf7f11422f4603b6e409a5f842120f48b5337b69c917c7b1cc874215a1425d011581c3ffbf113157798b7ee4d5e638f362dcedaeee5ebb03e554292f5c6d2156fcd919c499b49b7d955809e536e705f6fa212dc2f12f7e769164f2fede8b13b1c40518a0a6ea6b39a990653ad72f1baa694884bea7e0481a7650d7172f7711c28dc53910b04058e36c692216f6d9dd15c39b403fe3b20bc8f7da5dfe1b2949671959ecfad84507cde627d0521b1a889688ea72b5273f267105df4330bcdeda00351cdf5c70b7cc7232d43e288c00d78e9ee0cf238a1681ac2", 0xe1}], 0x8, &(0x7f0000000a00)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0xda, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}, @tclass={{0x14}}, @hopopts={{0x28, 0x29, 0x36, {0x62, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5e}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x78}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x8}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000100)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 3.949250115s ago: executing program 2 (id=4368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40850) 3.691660324s ago: executing program 4 (id=4369): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000080)='msdos\x00', 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='\xb0\x03\x00\x00\x00\x00\x00y\xa49\\\x04\x00=\x1b\x9d\x9f\xbe\x0f\t\xac\xa7x\xf4\x8f\xd0\xd9=g\xa6t\x03t\xc93w\x9cl\xc2\x98\x80\x1d\xba\xc9L\xb7\x84\xc6\x92\xfc\xaf<\xab\tg`t\xe0\xb5eCu\xbc\xff{\xc5Ik\x12\xd3c\x18Z\xfc\xa2\xd8N\bJ!\xdb\xa1\xf6\x1f\x80Z\x13Yh\x1a7\xd3\xf6\xa2Hs\xf1O\xcd!6\xc5~\xc1Q\xfd\x19@\xd2\xaaL\xf1\xae\xaaAQ\xde\xc3:Ib5cX\x9ah\x13\xdfz\xc7\xe3\x97\x16\xf9&\xfd\xda\xe2j\x95\xe0\xb1\\4ET\x0ea\x94\x9f\xc0Q\n\xe8\xf7No\xd3\xc1\xcb0}o\x14V\xb0/z\xbe\xe2\xf8#\f7\tM\xf1\x8d\xf6\xb0\xc0\xa3\b\xec\xf6\xb5.Yd\xa77\xab\x80\xa5\\\x90\x17\t\x96\x922E\x1aD\xfc(XP\xbf\xc8\xa6\xcb\a\xa8\x04\xa5\xb4\xcb\xc9@E\xa1w\xc3{\\\xf1\xc9\x83A\x00\x00x\x0f]\xef\xd1\xf1\x17\x86&{\xd8\xa5-\xfd\xe2*$^\x891O\xbf\xc0\xd3?\x1aD\x92\x9a\xf3\x04\r\x82`\x15\x00\x00\x00\x00\xdf\x9e\x816', 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x22) 3.19230545s ago: executing program 3 (id=4370): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5eaa) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20049800, 0x0, 0x0) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x9) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, &(0x7f0000000f00), 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) write(0xffffffffffffffff, &(0x7f0000000700)="0100", 0x2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x0, 0x8, 0x200}) r1 = fsmount(r0, 0x0, 0x0) write(r0, &(0x7f0000000a00), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000240)='./gadget/dummy_udc\x00', &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0), 0x1200) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) socket(0xf, 0x6, 0x3) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2ee5, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r4, 0x1000004, 0xfffffffd, 0x82, 0x0, 0x0) 3.055780866s ago: executing program 1 (id=4372): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) read$fb(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, r0, 0xef8eb000) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 2.942639439s ago: executing program 2 (id=4373): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x80045017, 0x1000000000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000001f80)="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", 0x62b}], 0x3}}], 0x3, 0xc044) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030104000000000001000100002b"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303001424060305"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x188c5) mount(0x0, 0x0, 0x0, 0x10005, &(0x7f0000000100)=',\xb3,,z\\)\x00Y/2}\x82\bg\x16/SRe\xffC\n\xc0\xc99\xd4\x88\x9bR\xcb\xa0\xcb\x14Z\x82\xbb\xc8LD.[\x8f\xab\xf1sRV\x9f=\x96\x02\x00\x00\x00\x00\x00\x00\x00z\x1b\x19\x00\x02a\b n\xd6\"\xbb\x81vw\xf2\x92\xdd\xca#Ex-\x81j\xb50xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0, r1, 0x2}}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x1002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0xa20000, 0xffff, 0xfb02, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9b0909, 0x4, '\x00', @p_u8=&(0x7f0000000200)=0x3}}) r7 = dup3(r4, r2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = dup2(r9, r9) ioctl$VIDIOC_G_TUNER(r10, 0xc054561d, &(0x7f0000000140)={0x8, "b8214df62f1e2800", 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x0, 0x40001}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x0, 0x0, 0x0}) 1.950785102s ago: executing program 1 (id=4375): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.844058896s ago: executing program 1 (id=4376): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 1.781777837s ago: executing program 1 (id=4377): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x1c, 0x8, 0x400, 0x400, 0x800, 0xd0}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r3, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r5, @ANYRES8=r6, @ANYRES8=r5, @ANYRESHEX=r1, @ANYRES64=r4, @ANYRESDEC=r3, @ANYRES64=r1, @ANYRES8=r4, @ANYRES8=r5], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x24046880) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) 1.260472389s ago: executing program 4 (id=4378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x3, 0x1, 0x31237648, 0x1, 0x6, 0x1}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@rdmsr={0x66, 0x18, {0x40000064}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 5) 1.148007265s ago: executing program 7 (id=4379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 891.782076ms ago: executing program 7 (id=4380): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 644.669419ms ago: executing program 1 (id=4381): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f911000000030000000003"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) lseek(0xffffffffffffffff, 0x38, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 256.200391ms ago: executing program 2 (id=4382): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100090e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa"], 0x70}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) bind$inet(r1, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24044092) r7 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r7, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendfile(r9, r9, 0x0, 0x8000002) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 1.353688ms ago: executing program 7 (id=4383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40850) 0s ago: executing program 3 (id=4384): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) read$fb(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, r0, 0xef8eb000) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) kernel console output (not intermixed with test programs): ][T18788] ? __pfx_sock_do_ioctl+0x10/0x10 [ 831.024404][T18788] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 831.024431][T18788] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 831.024464][T18788] sock_ioctl+0x599/0x6b0 [ 831.024481][T18788] ? __pfx_sock_ioctl+0x10/0x10 [ 831.024496][T18788] ? hook_file_ioctl_common+0x140/0x440 [ 831.024523][T18788] ? selinux_file_ioctl+0x13b/0x290 [ 831.024547][T18788] ? selinux_file_ioctl+0xb6/0x290 [ 831.024574][T18788] ? __pfx_sock_ioctl+0x10/0x10 [ 831.024593][T18788] __x64_sys_ioctl+0x18e/0x210 [ 831.024622][T18788] do_syscall_64+0x115/0x870 [ 831.024641][T18788] ? clear_bhb_loop+0x40/0x90 [ 831.024662][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.024679][T18788] RIP: 0033:0x7fb9b799e019 [ 831.024694][T18788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.024708][T18788] RSP: 002b:00007fb9b8939028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.024724][T18788] RAX: ffffffffffffffda RBX: 00007fb9b7c25fa0 RCX: 00007fb9b799e019 [ 831.024735][T18788] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000003 [ 831.024745][T18788] RBP: 00007fb9b8939090 R08: 0000000000000000 R09: 0000000000000000 [ 831.024756][T18788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.024765][T18788] R13: 00007fb9b7c26038 R14: 00007fb9b7c25fa0 R15: 00007ffcf9eceae8 [ 831.024788][T18788] [ 831.284623][ T5745] usb usb2-port1: unable to enumerate USB device [ 831.295198][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 831.306701][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.322314][ T10] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 831.331869][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.343301][ T10] usb 7-1: Product: syz [ 831.347873][ T10] usb 7-1: Manufacturer: syz [ 831.352673][ T10] usb 7-1: SerialNumber: syz [ 831.361146][ T10] usb 7-1: config 0 descriptor?? [ 831.390550][ T5737] usb 5-1: USB disconnect, device number 41 [ 831.965203][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 832.849847][T18815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 833.096053][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 833.096071][ T30] audit: type=1400 audit(1786340052.979:5683): avc: denied { read } for pid=18813 comm="syz.4.4078" name="usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 833.267294][ T30] audit: type=1400 audit(1786340052.979:5684): avc: denied { open } for pid=18813 comm="syz.4.4078" path="/dev/usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 833.354121][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4080'. [ 833.386133][ T30] audit: type=1400 audit(1786340053.199:5685): avc: denied { write } for pid=18816 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.458269][ T30] audit: type=1400 audit(1786340053.199:5686): avc: denied { map } for pid=18813 comm="syz.4.4078" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 833.584770][ T5744] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 833.600126][ T30] audit: type=1800 audit(1786340053.259:5687): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 833.699782][ T30] audit: type=1800 audit(1786340053.459:5688): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 833.752344][ T5744] usb 2-1: Using ep0 maxpacket: 16 [ 833.765162][ T5744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.789866][ T5744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.831212][ T5744] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 833.881411][ T5744] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 834.001370][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.004538][ T30] audit: type=1800 audit(1786340053.869:5689): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 834.012255][ T5744] usb 2-1: config 0 descriptor?? [ 834.071546][ T10] usb 7-1: USB disconnect, device number 3 [ 834.162974][ T30] audit: type=1800 audit(1786340053.949:5690): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 835.532710][ T30] audit: type=1800 audit(1786340053.959:5691): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254219 res=0 errno=0 [ 835.617144][T18842] orangefs_mount: mount request failed with -4 [ 835.774010][ T30] audit: type=1800 audit(1786340053.999:5692): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 835.835369][ T5744] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input73 [ 835.981023][ T5744] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 836.072933][ T5744] usb 2-1: USB disconnect, device number 69 [ 836.198200][T18859] fido_id[18859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 837.828775][T18883] xt_TPROXY: Can be used only with -p tcp or -p udp [ 837.849553][T18086] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 838.126427][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4091'. [ 838.221938][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 838.221955][ T30] audit: type=1400 audit(1786340058.099:5719): avc: denied { write } for pid=18861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.465379][ T30] audit: type=1800 audit(1786340058.169:5720): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 838.489500][ T30] audit: type=1800 audit(1786340058.179:5721): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 838.498356][T18875] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 838.581876][T18899] FAULT_INJECTION: forcing a failure. [ 838.581876][T18899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.595164][T18899] CPU: 1 UID: 0 PID: 18899 Comm: syz.4.4093 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.595199][T18899] Tainted: [L]=SOFTLOCKUP [ 838.595207][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 838.595219][T18899] Call Trace: [ 838.595227][T18899] [ 838.595235][T18899] dump_stack_lvl+0x100/0x190 [ 838.595282][T18899] should_fail_ex.cold+0x5/0xa [ 838.595310][T18899] _copy_from_user+0x2e/0xd0 [ 838.595341][T18899] kstrtouint_from_user+0xd6/0x1d0 [ 838.595365][T18899] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 838.595387][T18899] ? __lock_acquire+0x49f/0x1a40 [ 838.595427][T18899] proc_fail_nth_write+0x83/0x220 [ 838.595462][T18899] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 838.595502][T18899] vfs_write+0x2aa/0x1050 [ 838.595534][T18899] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 838.595568][T18899] ? __pfx_vfs_write+0x10/0x10 [ 838.595598][T18899] ? __fget_files+0x215/0x3d0 [ 838.595627][T18899] ? __fget_files+0x21f/0x3d0 [ 838.595657][T18899] ksys_write+0x12a/0x250 [ 838.595677][T18899] ? __pfx_ksys_write+0x10/0x10 [ 838.595697][T18899] ? trace_hardirqs_off+0x70/0x170 [ 838.595732][T18899] do_syscall_64+0x115/0x870 [ 838.595758][T18899] ? clear_bhb_loop+0x40/0x90 [ 838.595784][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.595806][T18899] RIP: 0033:0x7fcc6215e84e [ 838.595825][T18899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 838.595844][T18899] RSP: 002b:00007fcc630adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.595865][T18899] RAX: ffffffffffffffda RBX: 00007fcc630ae6c0 RCX: 00007fcc6215e84e [ 838.595879][T18899] RDX: 0000000000000001 RSI: 00007fcc630ae0a0 RDI: 0000000000000008 [ 838.595892][T18899] RBP: 00007fcc630ae090 R08: 0000000000000000 R09: 0000000000000000 [ 838.595905][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.595917][T18899] R13: 00007fcc62426218 R14: 00007fcc62426180 R15: 00007fff779a1c68 [ 838.595948][T18899] [ 838.859160][T18902] FAULT_INJECTION: forcing a failure. [ 838.859160][T18902] name failslab, interval 1, probability 0, space 0, times 0 [ 838.871983][T18902] CPU: 1 UID: 0 PID: 18902 Comm: syz.2.4095 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.872009][T18902] Tainted: [L]=SOFTLOCKUP [ 838.872015][T18902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 838.872024][T18902] Call Trace: [ 838.872031][T18902] [ 838.872038][T18902] dump_stack_lvl+0x100/0x190 [ 838.872064][T18902] should_fail_ex.cold+0x5/0xa [ 838.872085][T18902] should_failslab+0xc2/0x120 [ 838.872106][T18902] __kmalloc_noprof+0xfc/0x820 [ 838.872123][T18902] ? rcu_is_watching+0x12/0xc0 [ 838.872146][T18902] ? tomoyo_encode2+0xfb/0x3c0 [ 838.872167][T18902] tomoyo_encode2+0xfb/0x3c0 [ 838.872185][T18902] tomoyo_encode+0x29/0x50 [ 838.872200][T18902] tomoyo_realpath_from_path+0x18c/0x690 [ 838.872221][T18902] tomoyo_path_number_perm+0x23c/0x580 [ 838.872251][T18902] ? tomoyo_path_number_perm+0x22e/0x580 [ 838.872274][T18902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 838.872317][T18902] ? find_held_lock+0x2b/0x80 [ 838.872332][T18902] ? __fget_files+0x215/0x3d0 [ 838.872347][T18902] ? hook_file_ioctl_common+0x140/0x440 [ 838.872365][T18902] ? __fget_files+0x215/0x3d0 [ 838.872385][T18902] ? __fget_files+0x21f/0x3d0 [ 838.872405][T18902] security_file_ioctl+0xd3/0x230 [ 838.872430][T18902] __x64_sys_ioctl+0xb7/0x210 [ 838.872454][T18902] do_syscall_64+0x115/0x870 [ 838.872477][T18902] ? clear_bhb_loop+0x40/0x90 [ 838.872497][T18902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.872513][T18902] RIP: 0033:0x7f9e55f9e019 [ 838.872528][T18902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.872543][T18902] RSP: 002b:00007f9e56dd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.872559][T18902] RAX: ffffffffffffffda RBX: 00007f9e56225fa0 RCX: 00007f9e55f9e019 [ 838.872569][T18902] RDX: 0000000000000000 RSI: 0000000040049366 RDI: 0000000000000003 [ 838.872579][T18902] RBP: 00007f9e56dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 838.872589][T18902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.872598][T18902] R13: 00007f9e56226038 R14: 00007f9e56225fa0 R15: 00007ffd5bf8c6b8 [ 838.872621][T18902] [ 838.872659][T18902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 838.948215][ T30] audit: type=1400 audit(1786340058.729:5722): avc: denied { mount } for pid=18901 comm="syz.2.4095" name="/" dev="autofs" ino=74720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 839.131127][ T30] audit: type=1800 audit(1786340058.809:5723): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 839.232650][ T30] audit: type=1400 audit(1786340058.869:5724): avc: denied { write } for pid=18903 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.290597][T18914] tipc: Started in network mode [ 839.309523][T18914] tipc: Node identity 7e3080eb9a9, cluster identity 4711 [ 839.327972][T18914] tipc: Enabled bearer , priority 0 [ 839.336888][ T30] audit: type=1800 audit(1786340058.919:5725): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 839.363527][T18917] syzkaller0: entered promiscuous mode [ 839.372582][T18917] syzkaller0: entered allmulticast mode [ 839.381523][ T30] audit: type=1400 audit(1786340059.049:5726): avc: denied { unmount } for pid=15859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 839.442924][ T30] audit: type=1400 audit(1786340059.099:5727): avc: denied { sqpoll } for pid=18905 comm="syz.4.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 839.488832][ T30] audit: type=1800 audit(1786340059.109:5728): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 839.816615][T18932] FAULT_INJECTION: forcing a failure. [ 839.816615][T18932] name failslab, interval 1, probability 0, space 0, times 0 [ 839.840257][T18932] CPU: 0 UID: 0 PID: 18932 Comm: syz.6.4100 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.840297][T18932] Tainted: [L]=SOFTLOCKUP [ 839.840304][T18932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 839.840316][T18932] Call Trace: [ 839.840324][T18932] [ 839.840332][T18932] dump_stack_lvl+0x100/0x190 [ 839.840365][T18932] should_fail_ex.cold+0x5/0xa [ 839.840396][T18932] should_failslab+0xc2/0x120 [ 839.840424][T18932] __kvmalloc_node_noprof+0x116/0x970 [ 839.840452][T18932] ? io_uring_setup.cold+0x1f4/0x1cae [ 839.840489][T18932] io_uring_setup.cold+0x1f4/0x1cae [ 839.840524][T18932] ? __pfx_io_uring_setup+0x10/0x10 [ 839.840555][T18932] ? find_held_lock+0x2b/0x80 [ 839.840576][T18932] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 839.840600][T18932] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 839.840650][T18932] ? ksys_write+0x1ac/0x250 [ 839.840671][T18932] ? __pfx_ksys_write+0x10/0x10 [ 839.840695][T18932] __x64_sys_io_uring_setup+0xc2/0x170 [ 839.840728][T18932] do_syscall_64+0x115/0x870 [ 839.840752][T18932] ? clear_bhb_loop+0x40/0x90 [ 839.840776][T18932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.840798][T18932] RIP: 0033:0x7f953639e019 [ 839.840817][T18932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.840835][T18932] RSP: 002b:00007f95371feee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 839.840854][T18932] RAX: ffffffffffffffda RBX: 0000200000000548 RCX: 00007f953639e019 [ 839.840868][T18932] RDX: 00002000000005c8 RSI: 0000200000000548 RDI: 00000000000003c9 [ 839.840881][T18932] RBP: 0000200000000540 R08: 0000000000000000 R09: 0000000000000000 [ 839.840894][T18932] R10: 00002000000005d0 R11: 0000000000000206 R12: 00002000000005c8 [ 839.840907][T18932] R13: 00002000000005d0 R14: 00007f95371fefd8 R15: 0000000000000000 [ 839.840935][T18932] [ 840.385086][T18911] tipc: Resetting bearer [ 840.481678][T18911] tipc: Disabling bearer [ 840.540602][T15803] tipc: Node number set to 3835724011 [ 841.352646][T18957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 842.881604][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4109'. [ 842.905328][ T5737] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 843.247736][T18978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 843.304744][ T5737] usb 7-1: Using ep0 maxpacket: 32 [ 843.327543][ T5737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.360119][ T5737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.414466][ T5737] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 843.418464][T18980] binder: 18975:18980 ioctl c0306201 200000000040 returned -11 [ 843.436264][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.446350][T15803] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 843.472802][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 843.472820][ T30] audit: type=1800 audit(1786340063.349:5740): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256071 res=0 errno=0 [ 843.516699][ T5737] usb 7-1: config 0 descriptor?? [ 843.531461][ T30] audit: type=1800 audit(1786340063.389:5741): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=256100 res=0 errno=0 [ 843.563817][ T30] audit: type=1800 audit(1786340063.389:5742): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=256078 res=0 errno=0 [ 843.586283][ T30] audit: type=1800 audit(1786340063.389:5743): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=256079 res=0 errno=0 [ 843.609764][ T30] audit: type=1800 audit(1786340063.389:5744): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=256080 res=0 errno=0 [ 843.614684][T15803] usb 3-1: Using ep0 maxpacket: 32 [ 843.642831][ T30] audit: type=1800 audit(1786340063.439:5745): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256120 res=0 errno=0 [ 843.645678][T15803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.674353][T15803] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.689395][T15803] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 843.703390][T15803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.711493][T15803] usb 3-1: Product: syz [ 843.715772][T15803] usb 3-1: Manufacturer: syz [ 843.720375][T15803] usb 3-1: SerialNumber: syz [ 843.729972][ T30] audit: type=1800 audit(1786340063.609:5746): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256138 res=0 errno=0 [ 843.734117][T15803] usb 3-1: config 0 descriptor?? [ 843.763189][ T30] audit: type=1800 audit(1786340063.609:5747): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=256170 res=0 errno=0 [ 843.786441][ T30] audit: type=1800 audit(1786340063.609:5748): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=256145 res=0 errno=0 [ 843.808289][ T30] audit: type=1800 audit(1786340063.609:5749): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=256146 res=0 errno=0 [ 844.190999][ T5737] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 844.533200][ T5737] usb 7-1: USB disconnect, device number 4 [ 844.743057][T18987] ALSA: mixer_oss: invalid OSS volume '' [ 845.055236][ T5737] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 845.194581][ T5737] usb 7-1: device descriptor read/64, error -71 [ 845.632496][T19009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 845.916659][T15803] usb 3-1: USB disconnect, device number 82 [ 846.186586][T19015] netlink: 4379 bytes leftover after parsing attributes in process `syz.6.4117'. [ 846.325991][T18086] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 846.730450][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4121'. [ 848.165042][T19048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.465553][ T29] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 848.541466][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 848.541484][ T30] audit: type=1800 audit(1786340068.419:5775): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 848.606123][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4134'. [ 848.664638][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 848.693274][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 848.736794][ T29] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 848.757458][ T29] usb 5-1: config 117 has no interface number 0 [ 848.771899][ T29] usb 5-1: config 117 interface 163 has no altsetting 0 [ 848.782825][ T29] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 848.797332][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.822151][ T29] usb 5-1: Product: syz [ 848.839398][ T29] usb 5-1: Manufacturer: syz [ 848.852520][ T29] usb 5-1: SerialNumber: syz [ 848.877487][ T30] audit: type=1800 audit(1786340068.759:5776): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258179 res=0 errno=0 [ 849.043760][ T30] audit: type=1800 audit(1786340068.919:5777): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 849.069746][ T30] audit: type=1800 audit(1786340068.949:5778): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=258211 res=0 errno=0 [ 849.104632][ T30] audit: type=1800 audit(1786340068.979:5779): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=258186 res=0 errno=0 [ 849.132704][T13118] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 849.177297][ T30] audit: type=1800 audit(1786340068.979:5780): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=258187 res=0 errno=0 [ 849.249526][ T30] audit: type=1800 audit(1786340069.129:5781): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 849.505384][ T30] audit: type=1800 audit(1786340069.379:5782): pid=19092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4138" name="remove" dev="sysfs" ino=185245 res=0 errno=0 [ 850.390720][ T29] f81534a_ctrl 5-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 850.407117][ T30] audit: type=1800 audit(1786340070.289:5783): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=258208 res=0 errno=0 [ 850.410288][ T29] usb 5-1: USB disconnect, device number 42 [ 850.613307][ T30] audit: type=1800 audit(1786340070.289:5784): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=258209 res=0 errno=0 [ 851.177364][T19108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 851.853737][T19113] vhci_hcd vhci_hcd.0: failed to lookup sock [ 852.058889][T19118] netlink: 'syz.1.4142': attribute type 1 has an invalid length. [ 852.291557][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 852.325636][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4145'. [ 853.047942][T19113] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 853.283650][T19145] FAULT_INJECTION: forcing a failure. [ 853.283650][T19145] name failslab, interval 1, probability 0, space 0, times 0 [ 853.298296][T19145] CPU: 0 UID: 0 PID: 19145 Comm: syz.4.4152 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.298330][T19145] Tainted: [L]=SOFTLOCKUP [ 853.298337][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 853.298351][T19145] Call Trace: [ 853.298358][T19145] [ 853.298367][T19145] dump_stack_lvl+0x100/0x190 [ 853.298398][T19145] should_fail_ex.cold+0x5/0xa [ 853.298426][T19145] should_failslab+0xc2/0x120 [ 853.298454][T19145] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 853.298480][T19145] ? __alloc_skb+0x5b7/0x710 [ 853.298505][T19145] ? __alloc_skb+0x140/0x710 [ 853.298536][T19145] __alloc_skb+0x140/0x710 [ 853.298558][T19145] ? __alloc_skb+0x5b7/0x710 [ 853.298581][T19145] ? __pfx___alloc_skb+0x10/0x10 [ 853.298614][T19145] netlink_alloc_large_skb+0x69/0x150 [ 853.298639][T19145] netlink_sendmsg+0x680/0xda0 [ 853.298664][T19145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.298689][T19145] ? selinux_socket_sendmsg+0x198/0x2f0 [ 853.298724][T19145] ____sys_sendmsg+0xa4d/0xbe0 [ 853.298754][T19145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.298778][T19145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.298821][T19145] ___sys_sendmsg+0x190/0x1e0 [ 853.298844][T19145] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.298864][T19145] ? __lock_acquire+0x49f/0x1a40 [ 853.298890][T19145] ? get_pid_task+0x106/0x250 [ 853.298942][T19145] __sys_sendmsg+0x160/0x210 [ 853.298970][T19145] ? __pfx___sys_sendmsg+0x10/0x10 [ 853.299014][T19145] do_syscall_64+0x115/0x870 [ 853.299039][T19145] ? clear_bhb_loop+0x40/0x90 [ 853.299065][T19145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.299087][T19145] RIP: 0033:0x7fcc6219e019 [ 853.299105][T19145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.299125][T19145] RSP: 002b:00007fcc630f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.299146][T19145] RAX: ffffffffffffffda RBX: 00007fcc62425fa0 RCX: 00007fcc6219e019 [ 853.299166][T19145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 853.299179][T19145] RBP: 00007fcc630f0090 R08: 0000000000000000 R09: 0000000000000000 [ 853.299192][T19145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.299205][T19145] R13: 00007fcc62426038 R14: 00007fcc62425fa0 R15: 00007fff779a1c68 [ 853.299234][T19145] [ 853.562307][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 853.562323][ T30] audit: type=1800 audit(1786340073.439:5799): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 853.630233][ T30] audit: type=1804 audit(1786340073.509:5800): pid=19149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.4153" name="/newroot/194/file0" dev="tmpfs" ino=1044 res=1 errno=0 [ 853.738765][T13118] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 853.739890][ T30] audit: type=1800 audit(1786340073.619:5801): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 854.202993][ T30] audit: type=1400 audit(1786340074.079:5802): avc: denied { map } for pid=19153 comm="syz.6.4155" path="socket:[76392]" dev="sockfs" ino=76392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 854.363276][ T30] audit: type=1400 audit(1786340074.079:5803): avc: denied { read write } for pid=19153 comm="syz.6.4155" path="socket:[76392]" dev="sockfs" ino=76392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 854.421674][ T30] audit: type=1800 audit(1786340074.159:5804): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 854.474107][ T30] audit: type=1800 audit(1786340074.349:5805): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 854.538494][ T30] audit: type=1800 audit(1786340074.419:5806): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 854.613729][ T30] audit: type=1800 audit(1786340074.469:5807): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 854.708927][ T30] audit: type=1800 audit(1786340074.579:5808): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 854.849307][T19171] FAULT_INJECTION: forcing a failure. [ 854.849307][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 854.862198][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.4.4161 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.862226][T19171] Tainted: [L]=SOFTLOCKUP [ 854.862230][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 854.862238][T19171] Call Trace: [ 854.862243][T19171] [ 854.862249][T19171] dump_stack_lvl+0x100/0x190 [ 854.862270][T19171] should_fail_ex.cold+0x5/0xa [ 854.862285][T19171] should_failslab+0xc2/0x120 [ 854.862302][T19171] kmem_cache_alloc_noprof+0x91/0x6a0 [ 854.862316][T19171] ? kvm_sched_clock_read+0x11/0x20 [ 854.862330][T19171] ? sched_clock+0x38/0x60 [ 854.862344][T19171] ? alloc_empty_file+0x5b/0x1c0 [ 854.862362][T19171] alloc_empty_file+0x5b/0x1c0 [ 854.862377][T19171] path_openat+0xe7/0x4280 [ 854.862389][T19171] ? find_held_lock+0x2b/0x80 [ 854.862401][T19171] ? __schedule+0x31d8/0x6730 [ 854.862413][T19171] ? __schedule+0x31d8/0x6730 [ 854.862425][T19171] ? rcu_is_watching+0x12/0xc0 [ 854.862445][T19171] ? trace_sched_exit_tp+0x120/0x160 [ 854.862464][T19171] ? __schedule+0x126e/0x6730 [ 854.862476][T19171] ? __pfx_path_openat+0x10/0x10 [ 854.862492][T19171] do_file_open+0x20e/0x430 [ 854.862506][T19171] ? __pfx_do_file_open+0x10/0x10 [ 854.862518][T19171] ? __pfx___schedule+0x10/0x10 [ 854.862540][T19171] ? alloc_fd+0x471/0x7a0 [ 854.862554][T19171] ? do_getname+0x191/0x390 [ 854.862571][T19171] do_sys_openat2+0x10f/0x1e0 [ 854.862586][T19171] ? __pfx_do_sys_openat2+0x10/0x10 [ 854.862604][T19171] ? __x64_sys_openat+0x76/0x210 [ 854.862620][T19171] __x64_sys_openat+0x12d/0x210 [ 854.862635][T19171] ? __pfx___x64_sys_openat+0x10/0x10 [ 854.862656][T19171] do_syscall_64+0x115/0x870 [ 854.862671][T19171] ? clear_bhb_loop+0x40/0x90 [ 854.862685][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.862697][T19171] RIP: 0033:0x7fcc6219e019 [ 854.862709][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.862720][T19171] RSP: 002b:00007fcc630cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 854.862732][T19171] RAX: ffffffffffffffda RBX: 00007fcc62426090 RCX: 00007fcc6219e019 [ 854.862740][T19171] RDX: 000000000014e203 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 854.862748][T19171] RBP: 00007fcc630cf090 R08: 0000000000000000 R09: 0000000000000000 [ 854.862755][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.862762][T19171] R13: 00007fcc62426128 R14: 00007fcc62426090 R15: 00007fff779a1c68 [ 854.862778][T19171] [ 855.438644][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 856.001654][T19177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=19177 comm=syz.4.4163 [ 856.482755][ T905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 857.168553][T19205] cgroup: fork rejected by pids controller in /syz1 [ 857.954625][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 858.155155][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 858.171091][ T29] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 858.195389][ T29] usb 7-1: config 0 has no interface number 0 [ 858.224585][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 858.253910][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.286941][ T29] usb 7-1: Product: syz [ 858.305288][ T29] usb 7-1: Manufacturer: syz [ 858.323336][ T29] usb 7-1: SerialNumber: syz [ 858.348238][ T29] usb 7-1: config 0 descriptor?? [ 858.735126][T13082] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 858.755678][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 858.755693][ T30] audit: type=1800 audit(1786340078.639:5831): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258589 res=0 errno=0 [ 858.797208][ T30] audit: type=1800 audit(1786340078.679:5832): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258600 res=0 errno=0 [ 858.906159][T13082] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 858.924695][T13082] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 858.943687][T13082] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 858.960030][T13082] usb 5-1: config 0 has no interface number 0 [ 858.986889][T13118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 859.010083][T13118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 859.024008][T13118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 859.035924][T13118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.043659][T13118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 859.064149][T13082] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 859.084261][T13118] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 859.097010][ T30] audit: type=1800 audit(1786340078.959:5833): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258619 res=0 errno=0 [ 859.118543][T13082] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 859.131247][T13082] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 859.144901][ T30] audit: type=1800 audit(1786340078.979:5834): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258630 res=0 errno=0 [ 859.167220][T13082] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 859.176648][T13082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.191406][ T30] audit: type=1800 audit(1786340079.069:5835): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258641 res=0 errno=0 [ 859.221418][T13082] usb 5-1: config 0 descriptor?? [ 859.228737][ T30] audit: type=1800 audit(1786340079.099:5836): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=258670 res=0 errno=0 [ 859.250987][T19338] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 859.266563][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4176'. [ 859.276242][ T30] audit: type=1800 audit(1786340079.099:5837): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=258648 res=0 errno=0 [ 859.342395][T13082] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 859.392309][ T30] audit: type=1800 audit(1786340079.099:5838): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=258649 res=0 errno=0 [ 859.463476][ T30] audit: type=1800 audit(1786340079.099:5839): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=258650 res=0 errno=0 [ 859.523545][ T30] audit: type=1800 audit(1786340079.159:5840): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258690 res=0 errno=0 [ 859.530467][T13082] usb 5-1: USB disconnect, device number 43 [ 859.559556][ T905] usb 5-1: Failed to submit usb control message: -71 [ 859.578644][ T905] usb 5-1: unable to send the bmi data to the device: -71 [ 859.614087][ T905] usb 5-1: unable to get target info from device [ 859.638539][ T905] usb 5-1: could not get target info (-71) [ 859.654686][ T905] usb 5-1: could not probe fw (-71) [ 859.743327][T19348] hsr_slave_1 (unregistering): left promiscuous mode [ 860.097626][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 860.133847][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.143184][T19366] FAULT_INJECTION: forcing a failure. [ 860.143184][T19366] name failslab, interval 1, probability 0, space 0, times 0 [ 860.143218][T19366] CPU: 0 UID: 0 PID: 19366 Comm: syz.3.4186 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.143248][T19366] Tainted: [L]=SOFTLOCKUP [ 860.143256][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 860.143268][T19366] Call Trace: [ 860.143275][T19366] [ 860.143283][T19366] dump_stack_lvl+0x100/0x190 [ 860.143313][T19366] should_fail_ex.cold+0x5/0xa [ 860.143340][T19366] should_failslab+0xc2/0x120 [ 860.143368][T19366] kmem_cache_alloc_noprof+0x91/0x6a0 [ 860.143390][T19366] ? __lock_acquire+0x49f/0x1a40 [ 860.143416][T19366] ? fuse_request_alloc+0x22/0x200 [ 860.143449][T19366] fuse_request_alloc+0x22/0x200 [ 860.143477][T19366] fuse_get_req+0x20a/0x400 [ 860.143503][T19366] ? __pfx_fuse_get_req+0x10/0x10 [ 860.143529][T19366] ? from_kgid+0x8f/0xd0 [ 860.143551][T19366] ? __pfx_from_kgid+0x10/0x10 [ 860.143582][T19366] fuse_chan_send+0x257/0x9a0 [ 860.143607][T19366] __fuse_simple_request+0x18e/0x1e0 [ 860.143640][T19366] fuse_do_getattr+0x27a/0x530 [ 860.143667][T19366] ? __pfx_fuse_do_getattr+0x10/0x10 [ 860.143728][T19366] fuse_update_get_attr+0x5e1/0x6c0 [ 860.143760][T19366] fuse_getattr+0x234/0x2c0 [ 860.143789][T19366] vfs_getattr_nosec+0x2d4/0x430 [ 860.143813][T19366] ? __pfx_fuse_getattr+0x10/0x10 [ 860.143841][T19366] vfs_statx+0x148/0x3f0 [ 860.143865][T19366] ? __pfx_vfs_statx+0x10/0x10 [ 860.143889][T19366] ? do_getname+0x191/0x390 [ 860.143919][T19366] vfs_fstatat+0x77/0xe0 [ 860.143944][T19366] __do_sys_newfstatat+0x9d/0x120 [ 860.143973][T19366] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 860.144014][T19366] ? __pfx_ksys_write+0x10/0x10 [ 860.144046][T19366] do_syscall_64+0x115/0x870 [ 860.144070][T19366] ? clear_bhb_loop+0x40/0x90 [ 860.144095][T19366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.144116][T19366] RIP: 0033:0x7fb9b799e019 [ 860.144133][T19366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.144152][T19366] RSP: 002b:00007fb9b8918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 860.144172][T19366] RAX: ffffffffffffffda RBX: 00007fb9b7c26090 RCX: 00007fb9b799e019 [ 860.144186][T19366] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 860.144199][T19366] RBP: 00007fb9b8918090 R08: 0000000000000000 R09: 0000000000000000 [ 860.144212][T19366] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 860.144225][T19366] R13: 00007fb9b7c26128 R14: 00007fb9b7c26090 R15: 00007ffcf9eceae8 [ 860.144253][T19366] [ 860.441332][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 860.510452][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.518401][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.838756][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.863561][ T29] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 860.872134][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.879817][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.891365][ T29] usb 7-1: USB disconnect, device number 7 [ 860.897382][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.907840][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.917947][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.926206][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.934214][ T5737] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 860.951230][ T5737] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.03 Device [syz1] on syz1 [ 861.144931][T17962] Bluetooth: hci4: command tx timeout [ 861.233593][T19374] fido_id[19374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 861.562914][T19341] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.597942][T19341] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.632092][T19341] bridge_slave_0: entered allmulticast mode [ 861.672333][T19341] bridge_slave_0: entered promiscuous mode [ 861.791582][T19341] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.799194][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.806998][T19341] bridge_slave_1: entered allmulticast mode [ 861.839826][T19341] bridge_slave_1: entered promiscuous mode [ 861.882950][T17962] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 862.910909][T13082] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 863.151576][T19341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.163940][T19404] orangefs_mount: mount request failed with -4 [ 863.217820][T17962] Bluetooth: hci4: command tx timeout [ 863.223126][T13082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 863.239158][T19341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.250187][T13082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.294804][T13082] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 863.334608][T13082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.359163][T13082] usb 7-1: config 0 descriptor?? [ 863.523738][T19341] team0: Port device team_slave_0 added [ 863.559242][T19341] team0: Port device team_slave_1 added [ 863.614664][T17962] Bluetooth: hci3: command 0x0c1a tx timeout [ 863.768810][T19341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.799913][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 863.799928][ T30] audit: type=1400 audit(1786340083.619:5891): avc: denied { write } for pid=19413 comm="syz.3.4200" name="h" dev="configfs" ino=69400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 863.878050][T19341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.888821][ T30] audit: type=1400 audit(1786340083.659:5892): avc: denied { write } for pid=19413 comm="syz.3.4200" name="h" dev="configfs" ino=69400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 863.967327][ T29] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 864.043321][T19341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.052493][T19414] netlink: 'syz.3.4200': attribute type 10 has an invalid length. [ 864.091037][T19341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.116653][T19341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.148904][ T30] audit: type=1800 audit(1786340084.019:5893): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263356 res=0 errno=0 [ 864.170855][T19341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.181735][T13082] isku 0003:1E7D:319C.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 864.212602][ T29] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 864.223030][ T29] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 864.236222][ T30] audit: type=1800 audit(1786340084.069:5894): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263373 res=0 errno=0 [ 864.282735][ T29] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 864.321955][ T29] usb 3-1: config 0 has no interface number 0 [ 864.343265][ T29] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 864.357243][T19414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.399891][ T29] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 864.400566][T19414] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 864.436738][ T30] audit: type=1800 audit(1786340084.309:5895): pid=19417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=263358 res=0 errno=0 [ 864.474825][T19418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.493081][ T29] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 864.544060][ T29] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 864.554646][T19418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.586152][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.632421][ T29] usb 3-1: config 0 descriptor?? [ 864.657086][T19409] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 864.661216][T13082] isku 0003:1E7D:319C.002E: couldn't init struct isku_device [ 864.676611][ T30] audit: type=1800 audit(1786340084.559:5896): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 864.697949][T13082] isku 0003:1E7D:319C.002E: couldn't install keyboard [ 864.715738][T19341] hsr_slave_0: entered promiscuous mode [ 864.749566][T13082] isku 0003:1E7D:319C.002E: probe with driver isku failed with error -71 [ 864.766372][T19341] hsr_slave_1: entered promiscuous mode [ 864.774605][T19341] debugfs: 'hsr0' already exists in 'hsr' [ 864.784028][ T29] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 864.793757][T19341] Cannot create hsr debugfs directory [ 864.849058][ T30] audit: type=1800 audit(1786340084.589:5897): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263661 res=0 errno=0 [ 864.888492][T13082] usb 7-1: USB disconnect, device number 8 [ 865.227646][T19427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 865.297346][T17962] Bluetooth: hci4: command tx timeout [ 865.512204][ T30] audit: type=1800 audit(1786340084.609:5898): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=263690 res=0 errno=0 [ 865.546283][ T30] audit: type=1800 audit(1786340084.609:5899): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=263668 res=0 errno=0 [ 865.621297][ T5737] usb 3-1: USB disconnect, device number 83 [ 865.670698][ T30] audit: type=1800 audit(1786340084.609:5900): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=263669 res=0 errno=0 [ 865.694990][T17962] Bluetooth: hci3: command 0x0c1a tx timeout [ 865.707728][ T1043] usb 3-1: Failed to submit usb control message: -71 [ 865.746075][ T1043] usb 3-1: unable to send the bmi data to the device: -71 [ 866.195211][ T1043] usb 3-1: unable to get target info from device [ 866.205113][ T1043] usb 3-1: could not get target info (-71) [ 866.310240][ T1043] usb 3-1: could not probe fw (-71) [ 866.336104][T19434] xt_TPROXY: Can be used only with -p tcp or -p udp [ 867.345314][T19454] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 867.361490][T19341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.375166][T17962] Bluetooth: hci4: command tx timeout [ 867.605931][T19457] gadgetfs: bound to dummy_udc driver [ 867.634927][ T5737] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 867.709670][T19341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.800980][T17962] Bluetooth: hci3: command 0x0c1a tx timeout [ 867.816194][ T5737] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 867.832745][ T5737] usb 3-1: config 0 has no interface number 0 [ 867.833856][T19341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.855093][ T5737] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 867.899657][ T5737] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 867.929772][ T5737] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 867.949360][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 867.958342][ T5737] usb 3-1: Manufacturer: syz [ 867.963057][ T5737] usb 3-1: SerialNumber: syz [ 867.984448][ T5737] usb 3-1: config 0 descriptor?? [ 867.987575][T19341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.334055][T19469] xt_TPROXY: Can be used only with -p tcp or -p udp [ 868.438637][ T5737] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 868.477016][ T5737] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 868.561001][T19466] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 868.681163][T19341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 868.690513][T19341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.699155][T19341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 868.709312][T19341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.718485][T19341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 868.727901][T19341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.739276][T19341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 868.749768][T19341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.890053][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 868.890071][ T30] audit: type=1800 audit(1786340088.769:5921): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 868.923336][T19341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.960764][T19341] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.974325][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.981495][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.996455][T19482] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 869.012276][ T30] audit: type=1800 audit(1786340088.889:5922): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 869.057831][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.065059][T14855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.212509][ T30] audit: type=1800 audit(1786340089.089:5923): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 869.262163][ T30] audit: type=1800 audit(1786340089.139:5924): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266001 res=0 errno=0 [ 869.515018][T15803] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 869.570630][T19341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.609992][T19341] veth0_vlan: entered promiscuous mode [ 869.625593][T19341] veth1_vlan: entered promiscuous mode [ 869.655265][T19341] veth0_macvtap: entered promiscuous mode [ 869.664146][T19341] veth1_macvtap: entered promiscuous mode [ 869.677514][T15803] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 869.686864][T15803] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 869.690037][T19341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.700238][T15803] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 869.714346][T15803] usb 5-1: config 0 has no interface number 0 [ 869.716988][T19341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.726172][T15803] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 869.729138][ T5737] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 869.741021][T15803] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 869.757380][ T905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.759595][T15803] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 869.781598][T15803] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 869.791294][T15803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.845472][ T1043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.857095][T17962] Bluetooth: hci3: command 0x0c1a tx timeout [ 869.868724][ T1043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.888705][T15803] usb 5-1: config 0 descriptor?? [ 869.897715][T19495] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 869.906762][ T30] audit: type=1800 audit(1786340089.779:5925): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266037 res=0 errno=0 [ 869.928477][ T30] audit: type=1800 audit(1786340089.789:5926): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=266066 res=0 errno=0 [ 869.952602][ T30] audit: type=1800 audit(1786340089.789:5927): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266085 res=0 errno=0 [ 869.964645][T13975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.977319][ T5737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 869.991830][ T30] audit: type=1800 audit(1786340089.799:5928): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=266044 res=0 errno=0 [ 869.994366][T15803] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 870.014255][ T30] audit: type=1800 audit(1786340089.799:5929): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=266045 res=0 errno=0 [ 870.047473][ T5737] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 870.061404][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.070558][ T30] audit: type=1800 audit(1786340089.799:5930): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=266046 res=0 errno=0 [ 870.092313][ T5737] usb 4-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40 [ 870.102317][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.112665][ T5737] usb 4-1: Product: syz [ 870.117202][ T5737] usb 4-1: Manufacturer: syz [ 870.117503][ T1114] usb 5-1: Failed to submit usb control message: -71 [ 870.121872][ T5737] usb 4-1: SerialNumber: syz [ 870.131683][T13977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.148907][T13977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.160744][T19505] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 870.196113][T15803] usb 5-1: USB disconnect, device number 44 [ 870.203668][ T1114] usb 5-1: unable to send the bmi data to the device: -71 [ 870.226638][ T1114] usb 5-1: unable to get target info from device [ 870.238110][ T905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.238555][ T1114] usb 5-1: could not get target info (-71) [ 870.248195][ T905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.271252][ T1114] usb 5-1: could not probe fw (-71) [ 870.385442][ T5737] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.394435][ T5601] usb 3-1: USB disconnect, device number 84 [ 870.532572][ T5737] usb 4-1: USB disconnect, device number 58 [ 870.611980][T17593] udevd[17593]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.844753][ T5601] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 871.145928][T19522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 871.250971][ T5601] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 871.392407][ T5601] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 871.435256][ T5601] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 871.456527][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.502108][T19514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 871.531991][ T5601] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.857079][ T5601] usb 2-1: USB disconnect, device number 70 [ 871.946035][T17962] Bluetooth: hci3: command 0x0c1a tx timeout [ 872.043027][T13975] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.340003][T13118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 872.356325][T13118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 872.369718][T13118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 872.378197][T13118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 872.389774][T13118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.424646][T19539] SELinux: invalid class [ 872.517904][T19537] ip_tables: iptables: counters copy to user failed while replacing table [ 872.533527][T19539] SELinux: failed to load policy [ 872.589509][T19555] gadgetfs: bound to dummy_udc driver [ 872.642872][T19557] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4234'. [ 872.975196][T13082] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 872.984664][T15803] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 873.009061][T13975] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.126266][T13082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 873.146759][T13082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.160838][T13082] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 873.170416][T15803] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 873.180892][T15803] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 873.196746][T13082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.206872][T15803] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 873.238411][T15803] usb 2-1: config 0 has no interface number 0 [ 873.245735][T13082] usb 5-1: config 0 descriptor?? [ 873.252522][T15803] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 873.270137][T15803] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 873.290179][T13975] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.301209][T15803] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 873.316990][T15803] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 873.328405][T15803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.595000][T13118] Bluetooth: hci4: command tx timeout [ 873.672792][T15803] usb 2-1: config 0 descriptor?? [ 873.736323][T19560] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 873.761705][T15803] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 873.895211][T13975] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.912380][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.933233][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.968136][ T5737] usb 2-1: USB disconnect, device number 71 [ 873.970680][ T905] usb 2-1: Failed to submit usb control message: -71 [ 873.996006][T13082] usbhid 5-1:0.0: can't add hid device: -71 [ 874.009580][T13082] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 874.020889][ T905] usb 2-1: unable to send the bmi data to the device: -71 [ 874.052954][T13082] usb 5-1: USB disconnect, device number 45 [ 874.064299][ T905] usb 2-1: unable to get target info from device [ 874.080206][ T905] usb 2-1: could not get target info (-71) [ 874.122525][ T905] usb 2-1: could not probe fw (-71) [ 874.175110][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 874.175129][ T30] audit: type=1800 audit(1786340094.049:5985): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267204 res=0 errno=0 [ 874.211030][ T30] audit: type=1800 audit(1786340094.089:5986): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=267209 res=0 errno=0 [ 874.252449][ T30] audit: type=1800 audit(1786340094.089:5987): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=267213 res=0 errno=0 [ 874.279518][ T30] audit: type=1800 audit(1786340094.089:5988): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=267212 res=0 errno=0 [ 874.305420][ T30] audit: type=1800 audit(1786340094.089:5989): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=267215 res=0 errno=0 [ 874.339261][ T30] audit: type=1800 audit(1786340094.219:5990): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267290 res=0 errno=0 [ 874.363348][ T30] audit: type=1800 audit(1786340094.219:5991): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=267295 res=0 errno=0 [ 874.392303][ T30] audit: type=1800 audit(1786340094.219:5992): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=267299 res=0 errno=0 [ 874.425477][ T30] audit: type=1800 audit(1786340094.229:5993): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=267298 res=0 errno=0 [ 874.450465][ T30] audit: type=1800 audit(1786340094.229:5994): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=267301 res=0 errno=0 [ 874.510219][T13118] Bluetooth: hci1: command tx timeout [ 874.630213][T13975] bridge_slave_1: left allmulticast mode [ 874.661578][T13975] bridge_slave_1: left promiscuous mode [ 874.674298][T13975] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.691129][T13975] bridge_slave_0: left allmulticast mode [ 874.702566][T13975] bridge_slave_0: left promiscuous mode [ 874.722479][T13975] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.016681][T19594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 876.210881][T19623] FAULT_INJECTION: forcing a failure. [ 876.210881][T19623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.279593][T19623] CPU: 1 UID: 0 PID: 19623 Comm: syz.1.4245 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.279628][T19623] Tainted: [L]=SOFTLOCKUP [ 876.279637][T19623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 876.279649][T19623] Call Trace: [ 876.279657][T19623] [ 876.279667][T19623] dump_stack_lvl+0x100/0x190 [ 876.279699][T19623] should_fail_ex.cold+0x5/0xa [ 876.279726][T19623] _copy_from_user+0x2e/0xd0 [ 876.279757][T19623] kstrtouint_from_user+0xd6/0x1d0 [ 876.279780][T19623] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 876.279803][T19623] ? __lock_acquire+0x49f/0x1a40 [ 876.279842][T19623] proc_fail_nth_write+0x83/0x220 [ 876.279875][T19623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 876.279915][T19623] vfs_write+0x2aa/0x1050 [ 876.279948][T19623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 876.279982][T19623] ? __pfx_vfs_write+0x10/0x10 [ 876.280012][T19623] ? __fget_files+0x215/0x3d0 [ 876.280042][T19623] ? __fget_files+0x21f/0x3d0 [ 876.280073][T19623] ksys_write+0x12a/0x250 [ 876.280092][T19623] ? __pfx_ksys_write+0x10/0x10 [ 876.280121][T19623] do_syscall_64+0x115/0x870 [ 876.280146][T19623] ? clear_bhb_loop+0x40/0x90 [ 876.280172][T19623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.280193][T19623] RIP: 0033:0x7f8a01b5e84e [ 876.280211][T19623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 876.280231][T19623] RSP: 002b:00007f8a02a0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 876.280251][T19623] RAX: ffffffffffffffda RBX: 00007f8a02a0e6c0 RCX: 00007f8a01b5e84e [ 876.280265][T19623] RDX: 0000000000000001 RSI: 00007f8a02a0e0a0 RDI: 0000000000000007 [ 876.280278][T19623] RBP: 00007f8a02a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 876.280292][T19623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.280304][T19623] R13: 00007f8a01e26128 R14: 00007f8a01e26090 R15: 00007ffd9c2e5e48 [ 876.280334][T19623] [ 876.591234][T13118] Bluetooth: hci1: command tx timeout [ 876.618281][T13975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.661759][T13975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.675627][T13975] bond0 (unregistering): Released all slaves [ 877.185056][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 877.413889][T15803] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 877.522218][T13975] hsr_slave_0: left promiscuous mode [ 877.535103][T13975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.559234][T13975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.586275][T15803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 877.599911][T13975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.625328][T15803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.654302][T13975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.663525][T15803] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 877.706463][T15803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.738213][T15803] usb 4-1: config 0 descriptor?? [ 877.807736][T13975] veth1_macvtap: left promiscuous mode [ 877.814892][ T5737] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 877.834410][T13975] veth0_macvtap: left promiscuous mode [ 877.853173][T13975] veth1_vlan: left promiscuous mode [ 877.866133][T13975] veth0_vlan: left promiscuous mode [ 878.040522][T19655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 878.076859][ T5737] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 878.095683][ T5737] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 878.111392][ T5737] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 878.147695][ T5737] usb 2-1: config 0 has no interface number 0 [ 878.167505][ T5737] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 878.188900][ T5737] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 878.210427][ T5737] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 878.238826][ T5737] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 878.242318][T19659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.264633][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.285129][T19659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.296107][ T5737] usb 2-1: config 0 descriptor?? [ 878.309894][T19636] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 878.360671][ T5737] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 878.533014][ T1123] usb 2-1: Failed to submit usb control message: -71 [ 878.533341][ T5737] usb 2-1: USB disconnect, device number 72 [ 878.552266][ T1123] usb 2-1: unable to send the bmi data to the device: -71 [ 878.559629][ T1123] usb 2-1: unable to get target info from device [ 878.568636][ T1123] usb 2-1: could not get target info (-71) [ 878.569806][T13975] team0 (unregistering): Port device team_slave_1 removed [ 878.574674][ T1123] usb 2-1: could not probe fw (-71) [ 878.648503][T13975] team0 (unregistering): Port device team_slave_0 removed [ 878.655933][T13118] Bluetooth: hci1: command tx timeout [ 879.014222][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 879.040687][T15803] usbhid 4-1:0.0: can't add hid device: -71 [ 879.063307][T15803] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 879.088573][T15803] usb 4-1: USB disconnect, device number 59 [ 879.183493][T19675] gadgetfs: bound to dummy_udc driver [ 879.605892][T19547] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.627198][T19547] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.660679][T19547] bridge_slave_0: entered allmulticast mode [ 879.701825][T19547] bridge_slave_0: entered promiscuous mode [ 879.743747][T19547] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.761579][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 879.761597][ T30] audit: type=1400 audit(1786340099.639:6035): avc: denied { open } for pid=19696 comm="syz.1.4257" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 879.772209][T19547] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.807675][T19547] bridge_slave_1: entered allmulticast mode [ 879.815589][T19547] bridge_slave_1: entered promiscuous mode [ 879.825413][ T30] audit: type=1400 audit(1786340099.689:6036): avc: denied { ioctl } for pid=19696 comm="syz.1.4257" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 879.876320][ T30] audit: type=1800 audit(1786340099.749:6037): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 879.986289][T19547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.061101][ T30] audit: type=1400 audit(1786340099.939:6038): avc: denied { write } for pid=19684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.070182][T19547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.153999][ T30] audit: type=1400 audit(1786340100.029:6039): avc: denied { map } for pid=19709 comm="syz.4.4260" path="pipe:[41792]" dev="pipefs" ino=41792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 880.218213][ T30] audit: type=1800 audit(1786340100.069:6040): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 880.320858][T19547] team0: Port device team_slave_0 added [ 880.356030][T19547] team0: Port device team_slave_1 added [ 880.369906][ T30] audit: type=1400 audit(1786340100.249:6041): avc: denied { write } for pid=19713 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.505575][T19547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.545580][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.573636][T19720] xt_TPROXY: Can be used only with -p tcp or -p udp [ 880.664342][T19547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.723244][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 880.775459][T13118] Bluetooth: hci1: command tx timeout [ 880.857749][T19547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.891665][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.120912][T19547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.206840][T19547] hsr_slave_0: entered promiscuous mode [ 881.227296][T19547] hsr_slave_1: entered promiscuous mode [ 881.249306][T19547] debugfs: 'hsr0' already exists in 'hsr' [ 881.263558][T19547] Cannot create hsr debugfs directory [ 882.409885][ T30] audit: type=1800 audit(1786340102.169:6042): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 882.542847][ T30] audit: type=1800 audit(1786340102.409:6043): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272826 res=0 errno=0 [ 882.660756][ T30] audit: type=1800 audit(1786340102.529:6044): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 882.824753][T13082] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 882.976719][T13082] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 882.986471][T13082] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 882.994892][T15803] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 883.019810][T13082] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 883.071585][T13082] usb 5-1: config 0 has no interface number 0 [ 883.081489][T13082] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 883.092694][T13082] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 883.115611][ T5737] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 883.117486][T13082] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 883.142890][T15803] usb 3-1: device descriptor read/64, error -71 [ 883.168831][T13082] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 883.180576][T13082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.198121][T13082] usb 5-1: config 0 descriptor?? [ 883.208597][T19742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 883.210645][T19758] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4268'. [ 883.241125][T13082] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 883.273431][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 883.286962][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 883.300814][T19547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 883.313490][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.314729][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.338136][T19547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 883.356846][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.363940][ T5737] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 883.378566][T19547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 883.391375][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.399108][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.400576][T15803] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 883.418117][T19547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 883.435107][ T5737] usb 4-1: config 0 descriptor?? [ 883.437367][ T189] usb 5-1: USB disconnect, device number 46 [ 883.460937][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.473271][T14855] usb 5-1: Failed to submit usb control message: -71 [ 883.482824][T14855] usb 5-1: unable to send the bmi data to the device: -71 [ 883.504408][T14855] usb 5-1: unable to get target info from device [ 883.520280][T14855] usb 5-1: could not get target info (-71) [ 883.532874][T14855] usb 5-1: could not probe fw (-71) [ 883.565770][T15803] usb 3-1: device descriptor read/64, error -71 [ 883.697713][T15803] usb usb3-port1: attempt power cycle [ 883.760280][T19547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.891889][T19752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.903163][T19547] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.903954][T19752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.936554][ T5737] usbhid 4-1:0.0: can't add hid device: -71 [ 883.946629][ T5737] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 883.974113][ T5737] usb 4-1: USB disconnect, device number 60 [ 883.977918][T14855] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.987236][T14855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.054981][T15803] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 884.075831][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.085446][T14855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.107807][T15803] usb 3-1: device descriptor read/8, error -71 [ 884.368907][T15803] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 884.436107][T15803] usb 3-1: device descriptor read/8, error -71 [ 884.471650][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4273'. [ 884.562407][T15803] usb usb3-port1: unable to enumerate USB device [ 885.356172][T19800] gadgetfs: bound to dummy_udc driver [ 885.993563][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 885.993577][ T30] audit: type=1800 audit(1786340105.869:6064): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 886.127362][T19547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.338408][T19801] ALSA: mixer_oss: invalid OSS volume '' [ 886.595771][ T30] audit: type=1800 audit(1786340106.469:6065): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 886.786352][ T30] audit: type=1800 audit(1786340106.659:6066): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 886.859131][T19547] veth0_vlan: entered promiscuous mode [ 886.893480][T19547] veth1_vlan: entered promiscuous mode [ 886.973159][T19547] veth0_macvtap: entered promiscuous mode [ 887.343497][T19547] veth1_macvtap: entered promiscuous mode [ 887.844565][ T30] audit: type=1800 audit(1786340107.719:6067): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 887.854657][T19547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.892267][T13977] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 887.900371][ T30] audit: type=1800 audit(1786340107.759:6068): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 887.975722][T19547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.246544][ T189] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 888.466424][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 888.540154][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.655070][T13975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.670477][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.711032][T13975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.744307][ T189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.808268][ T189] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 888.838539][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 888.874883][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.914905][T13975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.009625][ T189] usb 3-1: config 0 descriptor?? [ 889.015450][T14854] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.057349][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 889.142252][ T30] audit: type=1800 audit(1786340108.999:6069): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274428 res=0 errno=0 [ 889.165948][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.182868][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 889.197586][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.204244][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 889.213440][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.310986][ T9] usb 4-1: config 0 descriptor?? [ 889.322263][ T30] audit: type=1800 audit(1786340109.209:6070): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=274457 res=0 errno=0 [ 889.371928][ T30] audit: type=1800 audit(1786340109.249:6071): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=274435 res=0 errno=0 [ 889.424662][ T30] audit: type=1800 audit(1786340109.249:6072): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=274436 res=0 errno=0 [ 889.476289][ T30] audit: type=1800 audit(1786340109.249:6073): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=274437 res=0 errno=0 [ 889.560735][T13977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.579234][T13977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.610469][ T189] usbhid 3-1:0.0: can't add hid device: -71 [ 889.617860][ T189] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 889.633575][ T189] usb 3-1: USB disconnect, device number 89 [ 889.667219][T13975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.679349][T13975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.711125][T19858] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 889.823439][ T9] hid_parser_main: 72 callbacks suppressed [ 889.823464][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x3 [ 889.844269][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 889.853067][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 889.862991][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 889.873783][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 889.885187][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 889.895656][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 889.912752][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x2 [ 889.959751][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x2 [ 889.995284][ T9] logitech-hidpp-device 0003:046D:C088.002F: unknown main item tag 0x0 [ 890.030380][ T9] logitech-hidpp-device 0003:046D:C088.002F: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.3-1/input0 [ 890.072579][ T9] usb 4-1: USB disconnect, device number 61 [ 890.391845][T19871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 891.281718][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 891.281736][ T30] audit: type=1800 audit(1786340111.159:6089): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 891.290891][T19867] fido_id[19867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 891.455452][ T30] audit: type=1800 audit(1786340111.319:6090): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 891.610263][ T30] audit: type=1800 audit(1786340111.489:6091): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 891.745047][T13082] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 891.754144][ T30] audit: type=1800 audit(1786340111.629:6092): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 891.833856][ T30] audit: type=1400 audit(1786340111.679:6093): avc: denied { setopt } for pid=19882 comm="syz.3.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 891.938554][T13082] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 891.953229][T13082] usb 3-1: config 0 has no interface number 0 [ 891.976997][T13082] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 891.982659][T19894] gadgetfs: bound to dummy_udc driver [ 892.028439][T13082] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 892.089220][T13082] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 892.126347][T13082] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 892.148821][T13082] usb 3-1: Manufacturer: syz [ 892.172707][T13082] usb 3-1: SerialNumber: syz [ 892.255686][T13082] usb 3-1: config 0 descriptor?? [ 892.267052][ T30] audit: type=1800 audit(1786340112.139:6094): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274938 res=0 errno=0 [ 892.450666][ T30] audit: type=1800 audit(1786340112.149:6095): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=274969 res=0 errno=0 [ 892.487709][ T30] audit: type=1800 audit(1786340112.149:6096): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=274945 res=0 errno=0 [ 892.513304][ T30] audit: type=1800 audit(1786340112.149:6097): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=274946 res=0 errno=0 [ 892.588831][ T30] audit: type=1800 audit(1786340112.369:6098): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 892.620996][T13082] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 892.635780][T13082] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 895.290479][ T5737] usb 3-1: USB disconnect, device number 90 [ 895.804736][ T5737] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 896.654786][ T5737] usb 3-1: Using ep0 maxpacket: 16 [ 896.682597][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.811570][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 896.811591][ T30] audit: type=1400 audit(1786340116.689:6114): avc: denied { write } for pid=19934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.863078][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.883930][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 896.935132][ T5737] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 896.944473][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.955452][ T5737] usb 3-1: config 0 descriptor?? [ 897.156617][ T30] audit: type=1800 audit(1786340117.039:6115): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275049 res=0 errno=0 [ 897.368876][ T30] audit: type=1800 audit(1786340117.049:6116): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=275078 res=0 errno=0 [ 897.430660][T19945] xt_connbytes: Forcing CT accounting to be enabled [ 897.476368][ T30] audit: type=1800 audit(1786340117.049:6117): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=275056 res=0 errno=0 [ 897.534031][ T30] audit: type=1800 audit(1786340117.049:6118): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=275057 res=0 errno=0 [ 897.574868][ T30] audit: type=1800 audit(1786340117.049:6119): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=275058 res=0 errno=0 [ 897.660053][ T30] audit: type=1800 audit(1786340117.169:6120): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275098 res=0 errno=0 [ 897.708940][ T30] audit: type=1400 audit(1786340117.409:6121): avc: denied { write } for pid=19982 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.756205][T19958] ALSA: mixer_oss: invalid OSS volume '' [ 897.767148][ T30] audit: type=1800 audit(1786340117.509:6122): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 898.395278][T19945] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 898.460712][ T30] audit: type=1800 audit(1786340118.339:6123): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 898.662717][ T5737] usbhid 3-1:0.0: can't add hid device: -71 [ 898.669819][ T5737] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 898.685097][ T5737] usb 3-1: USB disconnect, device number 91 [ 898.843368][T20008] gadgetfs: bound to dummy_udc driver [ 898.857461][T20005] FAULT_INJECTION: forcing a failure. [ 898.857461][T20005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 898.993564][T20005] CPU: 1 UID: 0 PID: 20005 Comm: syz.4.4319 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.993605][T20005] Tainted: [L]=SOFTLOCKUP [ 898.993613][T20005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 898.993626][T20005] Call Trace: [ 898.993634][T20005] [ 898.993643][T20005] dump_stack_lvl+0x100/0x190 [ 898.993674][T20005] should_fail_ex.cold+0x5/0xa [ 898.993697][T20005] ? prepare_alloc_pages+0x16d/0x5f0 [ 898.993729][T20005] should_fail_alloc_page+0xeb/0x140 [ 898.993758][T20005] prepare_alloc_pages+0x1f0/0x5f0 [ 898.993792][T20005] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 898.993819][T20005] ? __lock_acquire+0x49f/0x1a40 [ 898.993852][T20005] ? __lock_acquire+0x49f/0x1a40 [ 898.993882][T20005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 898.993907][T20005] ? __bfs+0x150/0x2a0 [ 898.993934][T20005] ? check_irq_usage+0x19d/0x810 [ 898.993957][T20005] ? is_bpf_text_address+0x8a/0x1a0 [ 898.993986][T20005] ? __bfs+0x150/0x2a0 [ 898.994009][T20005] ? __lock_acquire+0x49f/0x1a40 [ 898.994035][T20005] ? __bfs+0x150/0x2a0 [ 898.994054][T20005] ? check_noncircular+0x97/0x160 [ 898.994078][T20005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 898.994106][T20005] ? policy_nodemask+0xed/0x4f0 [ 898.994136][T20005] alloc_pages_mpol+0x1fb/0x540 [ 898.994166][T20005] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 898.994192][T20005] ? __bfs+0x150/0x2a0 [ 898.994220][T20005] folio_alloc_mpol_noprof+0x36/0x260 [ 898.994254][T20005] vma_alloc_folio_noprof+0xed/0x1d0 [ 898.994285][T20005] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 898.994326][T20005] do_anonymous_page+0xb2b/0x2080 [ 898.994359][T20005] ? rcu_read_unlock+0x2d/0xb0 [ 898.994388][T20005] __handle_mm_fault+0x1d2c/0x2a00 [ 898.994425][T20005] ? mt_find+0x45e/0x8e0 [ 898.994455][T20005] ? __pfx___handle_mm_fault+0x10/0x10 [ 898.994486][T20005] ? __pfx_mt_find+0x10/0x10 [ 898.994523][T20005] ? find_vma+0xbf/0x140 [ 898.994543][T20005] ? __pfx_find_vma+0x10/0x10 [ 898.994567][T20005] handle_mm_fault+0x37b/0xa30 [ 898.994610][T20005] do_user_addr_fault+0x74c/0x12f0 [ 898.994650][T20005] exc_page_fault+0x6f/0xd0 [ 898.994675][T20005] asm_exc_page_fault+0x26/0x30 [ 898.994697][T20005] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 898.994729][T20005] Code: 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 9e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 898.994748][T20005] RSP: 0018:ffffc9000432f8d8 EFLAGS: 00050202 [ 898.994765][T20005] RAX: 0000000000000001 RBX: 0000200000000240 RCX: 000000000000018b [ 898.994779][T20005] RDX: 0000000000000001 RSI: ffff888032b5edc0 RDI: 0000200000001000 [ 898.994792][T20005] RBP: ffff888079db5220 R08: 0000000000000000 R09: ffffed100656bde9 [ 898.994806][T20005] R10: ffff888032b5ef4a R11: 0000000000000000 R12: 000020000000118b [ 898.994819][T20005] R13: 00007ffffffff000 R14: ffff888032b5e000 R15: 0000000000000f4b [ 898.994849][T20005] _copy_to_iter+0x391/0x1720 [ 898.994884][T20005] ? __pfx__copy_to_iter+0x10/0x10 [ 898.994911][T20005] ? __up_read+0x333/0x980 [ 898.994939][T20005] ? __pfx___up_read+0x10/0x10 [ 898.994965][T20005] ? seq_read_iter+0xd33/0x1270 [ 898.994986][T20005] ? seq_read_iter+0xd33/0x1270 [ 898.995013][T20005] seq_read_iter+0xdab/0x1270 [ 898.995046][T20005] ? proc_reg_get_unmapped_area+0x2b1/0x370 [ 898.995071][T20005] proc_reg_read_iter+0x220/0x310 [ 898.995095][T20005] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 898.995116][T20005] __io_read+0x357/0x1470 [ 898.995154][T20005] io_read+0x8d/0x230 [ 898.995180][T20005] ? __pfx_io_read+0x10/0x10 [ 898.995211][T20005] ? __fget_files+0x21f/0x3d0 [ 898.995236][T20005] __io_issue_sqe+0xe8/0x7a0 [ 898.995268][T20005] io_issue_sqe+0x88/0x1540 [ 898.995304][T20005] io_submit_sqes+0xb17/0x2480 [ 898.995350][T20005] __do_sys_io_uring_enter+0xa88/0x1b10 [ 898.995385][T20005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 898.995412][T20005] ? __fget_files+0x21f/0x3d0 [ 898.995432][T20005] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 898.995468][T20005] ? fput+0x79/0x100 [ 898.995492][T20005] ? ksys_write+0x1ac/0x250 [ 898.995511][T20005] ? __pfx_ksys_write+0x10/0x10 [ 898.995538][T20005] do_syscall_64+0x115/0x870 [ 898.995562][T20005] ? clear_bhb_loop+0x40/0x90 [ 898.995593][T20005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.995615][T20005] RIP: 0033:0x7fcc6219e019 [ 898.995632][T20005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.995652][T20005] RSP: 002b:00007fcc630f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 898.995671][T20005] RAX: ffffffffffffffda RBX: 00007fcc62425fa0 RCX: 00007fcc6219e019 [ 898.995685][T20005] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 898.995697][T20005] RBP: 00007fcc630f0090 R08: 0000000000000000 R09: 0000000000000000 [ 898.995710][T20005] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 898.995724][T20005] R13: 00007fcc62426038 R14: 00007fcc62425fa0 R15: 00007fff779a1c68 [ 898.995754][T20005] [ 900.002293][T20010] netlink: 'syz.3.4320': attribute type 2 has an invalid length. [ 900.010117][T20010] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 900.194377][T20034] xfrm0: entered allmulticast mode [ 900.304405][T20012] Process accounting resumed [ 900.496128][T20043] overlayfs: workdir and upperdir must be separate subtrees [ 902.537196][ T5601] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 902.675277][ T5746] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 902.834545][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 902.852506][ T5746] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 902.862200][T20084] SELinux: invalid class [ 902.874714][ T5601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.875657][ T5746] usb 3-1: config 0 has no interface number 0 [ 902.915909][ T5746] usb 3-1: config 0 interface 131 has no altsetting 0 [ 902.916499][ T5601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.957152][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 902.957170][ T30] audit: type=1800 audit(1786340122.839:6140): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 902.984846][ T5601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.996825][ T5746] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10 [ 903.025533][ T5601] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.039142][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.056742][ T5746] usb 3-1: Product: syz [ 903.071539][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.097350][ T5746] usb 3-1: Manufacturer: syz [ 903.152277][ T5746] usb 3-1: SerialNumber: syz [ 903.293459][ T5746] usb 3-1: config 0 descriptor?? [ 903.339834][ T30] audit: type=1800 audit(1786340123.159:6141): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275174 res=0 errno=0 [ 903.493898][ T30] audit: type=1800 audit(1786340123.279:6142): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=275206 res=0 errno=0 [ 903.593709][ T30] audit: type=1800 audit(1786340123.299:6143): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=275181 res=0 errno=0 [ 903.811312][ T5746] ims_pcu 3-1:0.131: Zero length descriptor [ 903.890053][ T30] audit: type=1800 audit(1786340123.329:6144): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=275182 res=0 errno=0 [ 903.928416][ T5746] ims_pcu 3-1:0.131: probe with driver ims_pcu failed with error -22 [ 904.144778][ T5746] usb 3-1: USB disconnect, device number 92 [ 904.185315][ T30] audit: type=1800 audit(1786340123.949:6145): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=275203 res=0 errno=0 [ 904.293237][ T30] audit: type=1800 audit(1786340124.009:6146): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=275204 res=0 errno=0 [ 904.357721][ T5601] usb 2-1: config 0 descriptor?? [ 904.382113][ T30] audit: type=1800 audit(1786340124.029:6147): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=275183 res=0 errno=0 [ 904.405050][T20084] SELinux: failed to load policy [ 904.472402][ T30] audit: type=1800 audit(1786340124.209:6148): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=275205 res=0 errno=0 [ 904.528149][ T30] audit: type=1800 audit(1786340124.259:6149): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275264 res=0 errno=0 [ 904.770773][T20100] futex_wake_op: syz.7.4336 tries to shift op by 144; fix this program [ 904.809839][ T5601] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 904.848047][T20100] futex_wake_op: syz.7.4336 tries to shift op by 144; fix this program [ 905.469380][T20120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 906.196065][T20134] gadgetfs: bound to dummy_udc driver [ 906.203112][T20132] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 907.092365][ T9] usb 2-1: USB disconnect, device number 73 [ 907.346204][T20156] 9p: Bad value for 'rfdno' [ 907.352622][T20156] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4348'. [ 907.635121][ T5737] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 907.879928][ T5737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.892602][ T5737] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 907.902811][ T5737] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 907.913334][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.984333][T20165] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 908.023670][ T5737] usb 4-1: config 0 descriptor?? [ 908.029483][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 908.029500][ T30] audit: type=1800 audit(1786340127.909:6170): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275426 res=0 errno=0 [ 908.058419][ T30] audit: type=1800 audit(1786340127.919:6171): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=275455 res=0 errno=0 [ 908.082408][ T5737] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 908.089151][ T5737] dvb-usb: bulk message failed: -22 (3/0) [ 908.116714][ T30] audit: type=1800 audit(1786340127.919:6172): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=275433 res=0 errno=0 [ 908.148308][ T5737] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 908.233534][ T30] audit: type=1800 audit(1786340127.939:6173): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=275434 res=0 errno=0 [ 908.283657][T20156] dvb-usb: bulk message failed: -22 (2/0) [ 908.293388][ T5737] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 908.336630][ T5737] usb 4-1: media controller created [ 908.373072][ T30] audit: type=1800 audit(1786340127.989:6174): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 908.394783][ T30] audit: type=1800 audit(1786340127.999:6175): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=275435 res=0 errno=0 [ 908.402454][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.420529][ T30] audit: type=1800 audit(1786340128.049:6176): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 908.449555][ T30] audit: type=1800 audit(1786340128.109:6177): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275475 res=0 errno=0 [ 908.470801][ T30] audit: type=1800 audit(1786340128.109:6178): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275502 res=0 errno=0 [ 908.497160][ T30] audit: type=1326 audit(1786340128.159:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20169 comm="syz.7.4353" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372519e019 code=0x7ffc0000 [ 908.578911][ T5737] dvb-usb: bulk message failed: -22 (6/0) [ 908.607353][ T5737] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 908.638423][ T5737] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input77 [ 908.677355][ T5737] dvb-usb: schedule remote query interval to 150 msecs. [ 908.695352][ T5737] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 908.732369][ T5737] usb 4-1: USB disconnect, device number 62 [ 909.918172][T20170] kvm: apic: phys broadcast and lowest prio [ 909.999042][T20181] netlink: 'syz.2.4356': attribute type 4 has an invalid length. [ 910.100124][ T5737] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 910.104667][T20181] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 910.115574][T20181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 910.123250][T20181] vhci_hcd vhci_hcd.0: Device attached [ 910.261994][T20184] vhci_hcd: connection closed [ 910.289008][T13977] vhci_hcd vhci_hcd.2: stop threads [ 910.345212][T13977] vhci_hcd vhci_hcd.2: release socket [ 910.365193][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 910.376154][T13977] vhci_hcd vhci_hcd.2: disconnect device [ 910.451315][T20198] xfrm0: entered allmulticast mode [ 910.543266][ T9] usb 37-1: enqueue for inactive port 0 [ 910.633316][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 912.174656][T20228] 9p: Bad value for 'rfdno' [ 912.180290][T20227] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4364'. [ 912.202181][T20228] netlink: 348 bytes leftover after parsing attributes in process `syz.7.4367'. [ 913.002671][T20237] gadgetfs: bound to dummy_udc driver [ 913.234974][ T5746] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 913.257766][ T30] kauditd_printk_skb: 573 callbacks suppressed [ 913.257784][ T30] audit: type=1800 audit(1786340133.139:6753): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 913.818363][ T5746] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 913.829671][ T5746] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 913.839576][ T5746] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 913.848861][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.859243][T20235] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 913.864640][T13082] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 913.866561][ T30] audit: type=1800 audit(1786340133.749:6754): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275639 res=0 errno=0 [ 913.892232][ T5746] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 913.916372][ T30] audit: type=1800 audit(1786340133.749:6755): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=275668 res=0 errno=0 [ 913.938624][ T30] audit: type=1800 audit(1786340133.749:6756): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=275646 res=0 errno=0 [ 913.971274][ T30] audit: type=1800 audit(1786340133.759:6757): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=275647 res=0 errno=0 [ 913.996905][ T30] audit: type=1800 audit(1786340133.759:6758): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=275648 res=0 errno=0 [ 914.082735][T13082] usb 3-1: unable to get BOS descriptor or descriptor too short [ 914.094759][ T30] audit: type=1800 audit(1786340133.769:6759): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275688 res=0 errno=0 [ 914.125275][T13082] usb 3-1: not running at top speed; connect to a high speed hub [ 914.142995][ T30] audit: type=1800 audit(1786340133.789:6760): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275707 res=0 errno=0 [ 914.168150][T13082] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.201581][ T30] audit: type=1800 audit(1786340133.909:6761): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275720 res=0 errno=0 [ 914.203484][ T5746] usb 5-1: USB disconnect, device number 47 [ 914.230475][T13082] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.236574][ T30] audit: type=1800 audit(1786340133.909:6762): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275733 res=0 errno=0 [ 914.251100][T13082] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 914.296622][T13082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.333160][T13082] usb 3-1: Product: syz [ 914.342558][T13082] usb 3-1: Manufacturer: syz [ 914.347926][T13082] usb 3-1: SerialNumber: syz [ 914.859393][T13082] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 914.888270][T13082] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 914.924767][T13082] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 914.984005][T13082] usb 3-1: USB disconnect, device number 93 [ 915.041117][T10698] udevd[10698]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.057071][T20267] FAULT_INJECTION: forcing a failure. [ 915.057071][T20267] name failslab, interval 1, probability 0, space 0, times 0 [ 915.085703][T20267] CPU: 1 UID: 0 PID: 20267 Comm: syz.4.4378 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.085739][T20267] Tainted: [L]=SOFTLOCKUP [ 915.085747][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 915.085758][T20267] Call Trace: [ 915.085766][T20267] [ 915.085775][T20267] dump_stack_lvl+0x100/0x190 [ 915.085807][T20267] should_fail_ex.cold+0x5/0xa [ 915.085835][T20267] should_failslab+0xc2/0x120 [ 915.085863][T20267] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 915.085892][T20267] ? __get_vm_area_node+0x101/0x330 [ 915.085924][T20267] __get_vm_area_node+0x101/0x330 [ 915.085955][T20267] __vmalloc_node_range_noprof+0x228/0x1630 [ 915.085985][T20267] ? vhost_task_create+0x1db/0x370 [ 915.086008][T20267] ? rcu_is_watching+0x12/0xc0 [ 915.086048][T20267] ? vhost_task_create+0x1db/0x370 [ 915.086078][T20267] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 915.086110][T20267] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 915.086145][T20267] ? trace_kmem_cache_alloc+0xdd/0x100 [ 915.086177][T20267] ? vhost_task_create+0x1db/0x370 [ 915.086198][T20267] __vmalloc_node_noprof+0xad/0xf0 [ 915.086224][T20267] ? vhost_task_create+0x1db/0x370 [ 915.086248][T20267] copy_process+0x7fb/0x8030 [ 915.086290][T20267] ? __pfx_copy_process+0x10/0x10 [ 915.086315][T20267] ? __kasan_kmalloc+0xaa/0xb0 [ 915.086338][T20267] ? lockdep_init_map_type+0x5c/0x250 [ 915.086364][T20267] ? lockdep_init_map_type+0x5c/0x250 [ 915.086390][T20267] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 915.086430][T20267] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 915.086464][T20267] vhost_task_create+0x1db/0x370 [ 915.086489][T20267] ? __pfx_vhost_task_create+0x10/0x10 [ 915.086522][T20267] ? __pfx_vhost_task_fn+0x10/0x10 [ 915.086549][T20267] ? __pfx___mutex_lock+0x10/0x10 [ 915.086574][T20267] ? kasan_quarantine_put+0x104/0x240 [ 915.086605][T20267] kvm_mmu_post_init_vm+0x1b3/0x360 [ 915.086636][T20267] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 915.086666][T20267] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 915.086696][T20267] kvm_vcpu_ioctl+0x730/0x1700 [ 915.086723][T20267] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 915.086748][T20267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 915.086776][T20267] ? do_vfs_ioctl+0x226/0x13e0 [ 915.086808][T20267] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 915.086837][T20267] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 915.086881][T20267] ? __fget_files+0x215/0x3d0 [ 915.086900][T20267] ? hook_file_ioctl_common+0x140/0x440 [ 915.086933][T20267] ? selinux_file_ioctl+0x13b/0x290 [ 915.086963][T20267] ? selinux_file_ioctl+0xb6/0x290 [ 915.086994][T20267] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 915.087018][T20267] __x64_sys_ioctl+0x18e/0x210 [ 915.087048][T20267] do_syscall_64+0x115/0x870 [ 915.087070][T20267] ? clear_bhb_loop+0x40/0x90 [ 915.087091][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.087110][T20267] RIP: 0033:0x7fcc6219e019 [ 915.087128][T20267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.087148][T20267] RSP: 002b:00007fcc630f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.087168][T20267] RAX: ffffffffffffffda RBX: 00007fcc62425fa0 RCX: 00007fcc6219e019 [ 915.087180][T20267] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 915.087191][T20267] RBP: 00007fcc630f0090 R08: 0000000000000000 R09: 0000000000000000 [ 915.087204][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.087216][T20267] R13: 00007fcc62426038 R14: 00007fcc62425fa0 R15: 00007fff779a1c68 [ 915.087243][T20267] [ 915.089570][T20267] syz.4.4378: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 915.500791][T20267] CPU: 0 UID: 0 PID: 20267 Comm: syz.4.4378 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.500813][T20267] Tainted: [L]=SOFTLOCKUP [ 915.500817][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 915.500825][T20267] Call Trace: [ 915.500829][T20267] [ 915.500834][T20267] dump_stack_lvl+0x100/0x190 [ 915.500860][T20267] warn_alloc.cold+0x94/0xa8 [ 915.500873][T20267] ? __pfx_warn_alloc+0x10/0x10 [ 915.500886][T20267] ? __kasan_kmalloc+0x8a/0xb0 [ 915.500906][T20267] ? __get_vm_area_node+0x208/0x330 [ 915.500926][T20267] __vmalloc_node_range_noprof+0xccd/0x1630 [ 915.500943][T20267] ? rcu_is_watching+0x12/0xc0 [ 915.500966][T20267] ? vhost_task_create+0x1db/0x370 [ 915.500984][T20267] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 915.501002][T20267] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 915.501023][T20267] ? trace_kmem_cache_alloc+0xdd/0x100 [ 915.501041][T20267] ? vhost_task_create+0x1db/0x370 [ 915.501054][T20267] __vmalloc_node_noprof+0xad/0xf0 [ 915.501071][T20267] ? vhost_task_create+0x1db/0x370 [ 915.501085][T20267] copy_process+0x7fb/0x8030 [ 915.501111][T20267] ? __pfx_copy_process+0x10/0x10 [ 915.501137][T20267] ? __kasan_kmalloc+0xaa/0xb0 [ 915.501161][T20267] ? lockdep_init_map_type+0x5c/0x250 [ 915.501189][T20267] ? lockdep_init_map_type+0x5c/0x250 [ 915.501216][T20267] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 915.501240][T20267] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 915.501261][T20267] vhost_task_create+0x1db/0x370 [ 915.501274][T20267] ? __pfx_vhost_task_create+0x10/0x10 [ 915.501292][T20267] ? __pfx_vhost_task_fn+0x10/0x10 [ 915.501307][T20267] ? __pfx___mutex_lock+0x10/0x10 [ 915.501322][T20267] ? kasan_quarantine_put+0x104/0x240 [ 915.501340][T20267] kvm_mmu_post_init_vm+0x1b3/0x360 [ 915.501360][T20267] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 915.501379][T20267] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 915.501395][T20267] kvm_vcpu_ioctl+0x730/0x1700 [ 915.501410][T20267] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 915.501424][T20267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 915.501440][T20267] ? do_vfs_ioctl+0x226/0x13e0 [ 915.501457][T20267] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 915.501474][T20267] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 915.501500][T20267] ? __fget_files+0x215/0x3d0 [ 915.501511][T20267] ? hook_file_ioctl_common+0x140/0x440 [ 915.501529][T20267] ? selinux_file_ioctl+0x13b/0x290 [ 915.501547][T20267] ? selinux_file_ioctl+0xb6/0x290 [ 915.501565][T20267] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 915.501579][T20267] __x64_sys_ioctl+0x18e/0x210 [ 915.501598][T20267] do_syscall_64+0x115/0x870 [ 915.501612][T20267] ? clear_bhb_loop+0x40/0x90 [ 915.501627][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.501639][T20267] RIP: 0033:0x7fcc6219e019 [ 915.501650][T20267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.501661][T20267] RSP: 002b:00007fcc630f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.501673][T20267] RAX: ffffffffffffffda RBX: 00007fcc62425fa0 RCX: 00007fcc6219e019 [ 915.501681][T20267] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 915.501688][T20267] RBP: 00007fcc630f0090 R08: 0000000000000000 R09: 0000000000000000 [ 915.501695][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.501702][T20267] R13: 00007fcc62426038 R14: 00007fcc62425fa0 R15: 00007fff779a1c68 [ 915.501718][T20267] [ 915.501724][T20267] Mem-Info: [ 915.888229][T20267] active_anon:30467 inactive_anon:0 isolated_anon:0 [ 915.888229][T20267] active_file:113 inactive_file:68842 isolated_file:0 [ 915.888229][T20267] unevictable:768 dirty:527 writeback:0 [ 915.888229][T20267] slab_reclaimable:13003 slab_unreclaimable:118432 [ 915.888229][T20267] mapped:35307 shmem:18778 pagetables:1801 [ 915.888229][T20267] sec_pagetables:0 bounce:0 [ 915.888229][T20267] kernel_misc_reclaimable:0 [ 915.888229][T20267] free:1238890 free_pcp:8812 free_cma:0 [ 915.969408][T20267] Node 0 active_anon:121868kB inactive_anon:0kB active_file:424kB inactive_file:274880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140936kB dirty:2072kB writeback:0kB shmem:73576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14468kB pagetables:7052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 916.175291][T20267] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:292kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 916.212085][T15471] ================================================================== [ 916.220177][T15471] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 916.227835][T15471] Read of size 8 at addr ffff88804c1e4458 by task syz-executor/15471 [ 916.235901][T15471] [ 916.238222][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 916.238253][T15471] Tainted: [L]=SOFTLOCKUP [ 916.238261][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 916.238274][T15471] Call Trace: [ 916.238282][T15471] [ 916.238290][T15471] dump_stack_lvl+0x100/0x190 [ 916.238319][T15471] print_report+0x13d/0x4b0 [ 916.238349][T15471] ? __virt_addr_valid+0x239/0x430 [ 916.238377][T15471] ? __mutex_lock+0x15ca/0x1bd0 [ 916.238402][T15471] kasan_report+0xdf/0x1c0 [ 916.238430][T15471] ? __mutex_lock+0x15ca/0x1bd0 [ 916.238459][T15471] __mutex_lock+0x15ca/0x1bd0 [ 916.238484][T15471] ? ep_open+0x4c/0x2c0 [ 916.238511][T15471] ? __pfx_avc_has_perm+0x10/0x10 [ 916.238535][T15471] ? hook_file_open+0x24f/0x8f0 [ 916.238563][T15471] ? __pfx___mutex_lock+0x10/0x10 [ 916.238593][T15471] ? __pfx_selinux_file_open+0x10/0x10 [ 916.238628][T15471] ? ep_open+0x4c/0x2c0 [ 916.238655][T15471] ep_open+0x4c/0x2c0 [ 916.238683][T15471] do_dentry_open+0x6ab/0x14d0 [ 916.238704][T15471] ? __pfx_ep_open+0x10/0x10 [ 916.238735][T15471] vfs_open+0x82/0x3f0 [ 916.238761][T15471] path_openat+0x2873/0x4280 [ 916.238796][T15471] ? __pfx_path_openat+0x10/0x10 [ 916.238822][T15471] do_file_open+0x20e/0x430 [ 916.238845][T15471] ? __pfx_do_file_open+0x10/0x10 [ 916.238877][T15471] ? alloc_fd+0x471/0x7a0 [ 916.238902][T15471] ? do_getname+0x191/0x390 [ 916.238928][T15471] do_sys_openat2+0x10f/0x1e0 [ 916.238955][T15471] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.238986][T15471] __x64_sys_openat+0x12d/0x210 [ 916.239012][T15471] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.239037][T15471] ? putname+0xb1/0x110 [ 916.239065][T15471] do_syscall_64+0x115/0x870 [ 916.239089][T15471] ? clear_bhb_loop+0x40/0x90 [ 916.239113][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.239135][T15471] RIP: 0033:0x7fb9b795e84e [ 916.239154][T15471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 916.239175][T15471] RSP: 002b:00007ffcf9eccbb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.239196][T15471] RAX: ffffffffffffffda RBX: 000055557c111500 RCX: 00007fb9b795e84e [ 916.239211][T15471] RDX: 0000000000000000 RSI: 00007ffcf9eccd20 RDI: ffffffffffffff9c [ 916.239225][T15471] RBP: 00007ffcf9eccd20 R08: 0000000000000000 R09: 0000000000000000 [ 916.239239][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf9ecde10 [ 916.239253][T15471] R13: 00007fb9b7a3445c R14: 000055557c1114e8 R15: 0000000000000006 [ 916.239276][T15471] [ 916.239283][T15471] [ 916.493490][T15471] Allocated by task 20237: [ 916.497909][T15471] kasan_save_stack+0x30/0x50 [ 916.502570][T15471] kasan_save_track+0x14/0x30 [ 916.507222][T15471] __kasan_kmalloc+0xaa/0xb0 [ 916.511787][T15471] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 916.517158][T15471] gadgetfs_bind+0x582/0x890 [ 916.521727][T15471] gadget_bind_driver+0x28c/0xbf0 [ 916.526741][T15471] really_probe+0x241/0xa60 [ 916.531222][T15471] __driver_probe_device+0x20e/0x450 [ 916.536490][T15471] driver_probe_device+0x4a/0x140 [ 916.541503][T15471] __driver_attach+0x21f/0x5b0 [ 916.546255][T15471] bus_for_each_dev+0x13e/0x1d0 [ 916.551095][T15471] bus_add_driver+0x305/0x5b0 [ 916.555753][T15471] driver_register+0x1e2/0x360 [ 916.560497][T15471] usb_gadget_register_driver_owner+0x132/0x210 [ 916.566746][T15471] dev_config+0xdce/0x1610 [ 916.571156][T15471] vfs_write+0x2aa/0x1050 [ 916.575470][T15471] ksys_write+0x12a/0x250 [ 916.579773][T15471] do_syscall_64+0x115/0x870 [ 916.584343][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.590221][T15471] [ 916.592538][T15471] Freed by task 5737: [ 916.596486][T15471] kasan_save_stack+0x30/0x50 [ 916.601140][T15471] kasan_save_track+0x14/0x30 [ 916.605795][T15471] kasan_save_free_info+0x3b/0x70 [ 916.610808][T15471] __kasan_slab_free+0x5f/0x80 [ 916.615549][T15471] kfree+0x22b/0x6c0 [ 916.619428][T15471] put_ep+0x117/0x150 [ 916.623392][T15471] destroy_ep_files+0x163/0x420 [ 916.628219][T15471] gadgetfs_unbind+0x139/0x260 [ 916.632990][T15471] gadget_unbind_driver+0x20c/0x4f0 [ 916.638169][T15471] device_remove+0xcb/0x180 [ 916.642654][T15471] device_release_driver_internal+0x44e/0x620 [ 916.648706][T15471] driver_detach+0xd8/0x1b0 [ 916.653186][T15471] bus_remove_driver+0x13b/0x2e0 [ 916.658099][T15471] driver_unregister+0x76/0xb0 [ 916.662841][T15471] usb_gadget_unregister_driver+0x49/0x70 [ 916.668535][T15471] dev_release+0x132/0x1b0 [ 916.672930][T15471] __fput+0x3ff/0xb50 [ 916.676892][T15471] delayed_fput+0x72/0x90 [ 916.681199][T15471] process_one_work+0xa23/0x1940 [ 916.686109][T15471] worker_thread+0x5ef/0xe50 [ 916.690669][T15471] kthread+0x370/0x450 [ 916.694708][T15471] ret_from_fork+0x72b/0xd50 [ 916.699272][T15471] ret_from_fork_asm+0x1a/0x30 [ 916.704018][T15471] [ 916.706319][T15471] The buggy address belongs to the object at ffff88804c1e4400 [ 916.706319][T15471] which belongs to the cache kmalloc-512 of size 512 [ 916.720355][T15471] The buggy address is located 88 bytes inside of [ 916.720355][T15471] freed 512-byte region [ffff88804c1e4400, ffff88804c1e4600) [ 916.734041][T15471] [ 916.736352][T15471] The buggy address belongs to the physical page: [ 916.742772][T15471] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c1e4 [ 916.751513][T15471] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 916.760015][T15471] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 916.767537][T15471] page_type: f5(slab) [ 916.771498][T15471] raw: 00fff00000000040 ffff88813fe23c80 dead000000000100 dead000000000122 [ 916.780066][T15471] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 916.788626][T15471] head: 00fff00000000040 ffff88813fe23c80 dead000000000100 dead000000000122 [ 916.797272][T15471] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 916.805918][T15471] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 916.814566][T15471] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 916.823214][T15471] page dumped because: kasan: bad access detected [ 916.829613][T15471] page_owner tracks the page as allocated [ 916.835299][T15471] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 905, tgid 905 (kworker/u8:6), ts 791301508373, free_ts 791288086112 [ 916.856033][T15471] post_alloc_hook+0xfd/0x120 [ 916.860700][T15471] get_page_from_freelist+0xf48/0x3530 [ 916.866135][T15471] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 916.872007][T15471] new_slab+0xa2/0x640 [ 916.876048][T15471] refill_objects+0xe3/0x410 [ 916.880613][T15471] __pcs_replace_empty_main+0x376/0x680 [ 916.886137][T15471] __kmalloc_cache_noprof+0x479/0x6c0 [ 916.891489][T15471] batadv_forw_packet_alloc+0x3a9/0x4d0 [ 916.897039][T15471] batadv_iv_ogm_aggregate_new+0x126/0x4b0 [ 916.902824][T15471] batadv_iv_ogm_schedule_buff+0x1120/0x15e0 [ 916.908781][T15471] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 916.915787][T15471] process_one_work+0xa23/0x1940 [ 916.920698][T15471] worker_thread+0x5ef/0xe50 [ 916.925272][T15471] kthread+0x370/0x450 [ 916.929311][T15471] ret_from_fork+0x72b/0xd50 [ 916.933880][T15471] ret_from_fork_asm+0x1a/0x30 [ 916.938621][T15471] page last free pid 4978 tgid 4978 stack trace: [ 916.944946][T15471] __free_frozen_pages+0x79f/0x1090 [ 916.950130][T15471] qlist_free_all+0x47/0xf0 [ 916.954609][T15471] kasan_quarantine_reduce+0x1a0/0x1f0 [ 916.960039][T15471] __kasan_krealloc+0xe7/0x160 [ 916.964777][T15471] krealloc_node_align_noprof+0x269/0x3e0 [ 916.970469][T15471] ima_collect_measurement+0x531/0xb30 [ 916.975905][T15471] process_measurement+0xdfe/0x2350 [ 916.981084][T15471] ima_file_check+0xc3/0x110 [ 916.985649][T15471] security_file_post_open+0xc4/0x210 [ 916.991001][T15471] path_openat+0x985/0x4280 [ 916.995484][T15471] do_file_open+0x20e/0x430 [ 916.999961][T15471] do_sys_openat2+0x10f/0x1e0 [ 917.004615][T15471] __x64_sys_openat+0x12d/0x210 [ 917.009445][T15471] do_syscall_64+0x115/0x870 [ 917.014010][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.019873][T15471] [ 917.022170][T15471] Memory state around the buggy address: [ 917.027780][T15471] ffff88804c1e4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.035833][T15471] ffff88804c1e4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.043889][T15471] >ffff88804c1e4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 917.051927][T15471] ^ [ 917.058834][T15471] ffff88804c1e4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 917.066871][T15471] ffff88804c1e4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 917.074916][T15471] ================================================================== [ 917.114558][T15471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 917.121784][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 917.132872][T15471] Tainted: [L]=SOFTLOCKUP [ 917.137173][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 917.147212][T15471] Call Trace: [ 917.150483][T15471] [ 917.153389][T15471] dump_stack_lvl+0x100/0x190 [ 917.158047][T15471] vpanic+0x552/0x970 [ 917.162007][T15471] ? __pfx_vpanic+0x10/0x10 [ 917.166483][T15471] ? __mutex_lock+0x15ca/0x1bd0 [ 917.171311][T15471] panic+0xd1/0xe0 [ 917.175008][T15471] ? __pfx_panic+0x10/0x10 [ 917.179396][T15471] ? __mutex_lock+0x15ca/0x1bd0 [ 917.184224][T15471] ? preempt_schedule_common+0x42/0xc0 [ 917.189663][T15471] ? check_panic_on_warn+0x1f/0x90 [ 917.194749][T15471] check_panic_on_warn.cold+0x19/0x34 [ 917.200095][T15471] end_report.part.0+0x3a/0x90 [ 917.204839][T15471] kasan_report.cold+0xe/0x18 [ 917.209495][T15471] ? __mutex_lock+0x15ca/0x1bd0 [ 917.214323][T15471] __mutex_lock+0x15ca/0x1bd0 [ 917.218980][T15471] ? ep_open+0x4c/0x2c0 [ 917.223116][T15471] ? __pfx_avc_has_perm+0x10/0x10 [ 917.228118][T15471] ? hook_file_open+0x24f/0x8f0 [ 917.232945][T15471] ? __pfx___mutex_lock+0x10/0x10 [ 917.237974][T15471] ? __pfx_selinux_file_open+0x10/0x10 [ 917.243418][T15471] ? ep_open+0x4c/0x2c0 [ 917.247554][T15471] ep_open+0x4c/0x2c0 [ 917.251519][T15471] do_dentry_open+0x6ab/0x14d0 [ 917.256261][T15471] ? __pfx_ep_open+0x10/0x10 [ 917.260834][T15471] vfs_open+0x82/0x3f0 [ 917.264880][T15471] path_openat+0x2873/0x4280 [ 917.269448][T15471] ? __pfx_path_openat+0x10/0x10 [ 917.274363][T15471] do_file_open+0x20e/0x430 [ 917.278844][T15471] ? __pfx_do_file_open+0x10/0x10 [ 917.283848][T15471] ? alloc_fd+0x471/0x7a0 [ 917.288155][T15471] ? do_getname+0x191/0x390 [ 917.292638][T15471] do_sys_openat2+0x10f/0x1e0 [ 917.297296][T15471] ? __pfx_do_sys_openat2+0x10/0x10 [ 917.302475][T15471] __x64_sys_openat+0x12d/0x210 [ 917.307307][T15471] ? __pfx___x64_sys_openat+0x10/0x10 [ 917.312653][T15471] ? putname+0xb1/0x110 [ 917.316786][T15471] do_syscall_64+0x115/0x870 [ 917.321353][T15471] ? clear_bhb_loop+0x40/0x90 [ 917.326004][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.331872][T15471] RIP: 0033:0x7fb9b795e84e [ 917.336263][T15471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 917.355856][T15471] RSP: 002b:00007ffcf9eccbb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 917.364247][T15471] RAX: ffffffffffffffda RBX: 000055557c111500 RCX: 00007fb9b795e84e [ 917.372193][T15471] RDX: 0000000000000000 RSI: 00007ffcf9eccd20 RDI: ffffffffffffff9c [ 917.380183][T15471] RBP: 00007ffcf9eccd20 R08: 0000000000000000 R09: 0000000000000000 [ 917.388137][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf9ecde10 [ 917.396103][T15471] R13: 00007fb9b7a3445c R14: 000055557c1114e8 R15: 0000000000000006 [ 917.404077][T15471] [ 917.407338][T15471] Kernel Offset: disabled [ 917.411647][T15471] Rebooting in 86400 seconds..