last executing test programs: 17m18.348343963s ago: executing program 32 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xb6) 13m47.580214974s ago: executing program 33 (id=1250): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x20199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 13m4.319384284s ago: executing program 34 (id=1322): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 9m25.151682918s ago: executing program 35 (id=1880): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 8m27.513701122s ago: executing program 36 (id=2007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) readlink(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@upperdir, 0x5c}]}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x84883, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000200)=""/195, &(0x7f0000000040)=0xc3) 8m26.885592457s ago: executing program 37 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b0000000005000500020000000500"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_delroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_NH_ID={0x8, 0x1e, 0x7}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_TABLE={0x8, 0xf, 0x1}]}, 0x44}}, 0x4c810) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000140)="162b04", 0x3}], 0x1, 0x4) r8 = accept4(r7, 0x0, 0x0, 0x800) splice(r5, 0x0, r8, 0x0, 0x8001, 0x2) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xfffffc01, 0x400}}, './file0\x00'}) 8m21.5643746s ago: executing program 38 (id=2022): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0xe8, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'wg2\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000540)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, {0x306, @link_local}, 0x0, {0x2, 0x4e23, @multicast2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x6}}]}, 0x38}}, 0x20000000) 7m59.757521141s ago: executing program 9 (id=2077): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) 7m56.571343239s ago: executing program 9 (id=2079): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x400001, 0x4, 0x0, 0x0, 0x4063, "57c71ae721305900"}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) close_range(r0, 0xffffffffffffffff, 0x0) 7m55.644986412s ago: executing program 9 (id=2083): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)="0b065c93b9444ca857e169f7d8dd5ce92f55160ac34d5b16b5b07c495b7fae04ab90c161a338af12cff76713aa3f516a20f52e3ca40dfa5515f301da0322", 0x3e}, {&(0x7f0000000480)="7de00b9581660fe3be539aea6f027f4015711eb0101dd1c4199a07a94139f38589463522a3bfa5ed9c69879f4c1fc6f1c1816e0520baa5fe53f86902b5cfcd354df553f37b9b510eb779ab28298a40238b9bd8b9b2493194e33e17", 0xffffffffffffff5d}, {&(0x7f0000000600)="2a1fe5af5998037698f56fe75a7e054f8fa348c17e980b404e38ea13c978f8adb0113244792f4df4e75aa68dbbcc4550a4cb08ec6de87013ead8b26ec458836d7a3cec7aae8d72a897a4bd", 0x4b}, {&(0x7f0000000680)="cbea6eed8fa301908872275b45265ab4f7f61c866a568a0fc5853da6cb7456e53102c51dac422d2abec5dbaffe33830462dc7135e42831e2ed7fbe624ad104262182c101fb29fa64ecb72069479078dec4647a8a0aff05bc0b93687db0d444a2768813b855c76634246108d874b49ad85f53fe6fdf289958480622370698ec2172b40fd9613e0fa4b857caed5837b94ba5", 0x91}, {&(0x7f0000000400)="bf508f47e3da9f71638eda756732b8f8edb9270ac31fb367e1a7351fd0b60f7fdb7b9c3a2d913e2ce2", 0x29}, {&(0x7f0000000740)="90459f9ece1bfbfa093d28b83da74439f0a4f9f170d79e0d679fa92d3916526774726ec092ba76996e270f42e0392b87b0e8d7a6174f2ef863f1a1ef72282c09f5b7a3d81c2ce6a6cdbe0f1f84c23a699c8507d070829fe2991484c58c3c414ecc48cd7a82d16b4c53c08a4701ac80d3973915f132ff279a5496c915d30d24a8a01a2df83a62a94be745fd066b3589388f0d034f64a2d668b203dc92e7ccb69d5e818175f55ec4d5f8d2f4cfeab89c470eb4941a14e980ab81cdb8ea42", 0xbd}], 0x6, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2]}}], 0x20, 0x40080}}, {{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000940)="9d4139ef93723e92fcb2aa8e35d8f84ea870d30272bb7c92a42250f624f1fa2bac58fe5657c6ea2fd8f684ca28e5043e9ebaae2ac521c5479158b795ba73deddbec70c9dfc25a218073742a7bbb5e6aef234c036c6bc8c625411f10c6242ef08e1419485842e899f23541fd7898775c5ea1d66b37e06df4140b82b284f91ef1baa23e74d6ed955b439fc7d5900bffc00b9413b1a30d4bd78c6243c041edda0e797ad3f6f7c849765a7161b571a72e8f01cf37eeabad3fec65422fefa93f365335edada5f22b94181ae937b08ebcb806e895a3579bf44419ecd4ad3d2405c42133f705c7cb61dc570ef54a67e677cb8cbd86672c106", 0xf5}, {&(0x7f0000000a40)="16ee91795cc99427ceff73336d52cd4ba65d179a503a5eb90031a9b7a067b7e00885c662e3fc3f2d730a78ac77275554f2f820c0d64d8a5374b37b365cf0b30ba28d055d2c67f4a8f6f6849b83fddb10ecb69fe1550b0225c199667d008bff18803aef3a9574ddf07112e827186ef1ab320b2170e8", 0x75}], 0x2, &(0x7f0000000c40)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r2, r1, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r2, r2, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x38}}], 0xd8, 0x4000860}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x10001, 0xfa11, 0xfffffefb}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000f66a5112cddb486e00000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd70000435"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100), 0x8) listen(r5, 0x1ff) sendto$inet(r5, &(0x7f00000001c0)="ec", 0x1, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) 7m54.575701553s ago: executing program 9 (id=2085): write(0xffffffffffffffff, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) 7m54.437214419s ago: executing program 9 (id=2087): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$isdn(0x22, 0x3, 0x26) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0xffffffffffffffff}, 0xc) syz_open_dev$dri(0x0, 0x4, 0x490401) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) socket$isdn(0x22, 0x3, 0x11) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0xf, 0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x20f, &(0x7f0000000500)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7m53.614012889s ago: executing program 9 (id=2089): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r2, 0xfffffffffffffffc}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000380)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001100)={0x1, @sdr={0x50323234, 0x1000}}) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 7m52.346010105s ago: executing program 2 (id=2093): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) (async) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) (async) fsopen(&(0x7f0000000200)='jffs2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x10, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x4008040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0xfffffffffffff821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x7e}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xc7}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40048c0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f00003dd000/0x2000)=nil, 0x2000, 0xb, 0x810, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) r4 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) (async) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) (async) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000040)={0x80, "fc3b717789c7a69dc3f10c48c5dd62f84efd1ddadd94160a399556d2f64f6849", 0x4, 0x8, 0x7f, 0x2, 0x4, 0x4, 0x8, 0x5}) (async) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f000000a580)=@add_del={0x2, &(0x7f000000a540)='batadv0\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) 7m52.127293447s ago: executing program 2 (id=2095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 7m50.29594405s ago: executing program 2 (id=2100): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12030000000000106a053103000000000001090224000100008086090400101c0300010009210000000122f804090581039906c49a8b3951dda2519cbf66c02f0401da41c06454486a97356106d8875d841fb732"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x76, &(0x7f0000000200)=@string={0x76, 0x3, "388daea8ce1eb014756d2a695c68c16516c9d59aa6a082827a32186f72252b1bea5f3c94586321cf0e2b80b1777a244f16879d755af6993c64aa8099babb5b682fc3c13ce9e401c393f7d8a4a8341985b506a5563ced76380f9fc02556f439761ebf9a7f0090198b09050be8aaf3b136a46c1654"}}]}) (async) r1 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7m46.849991036s ago: executing program 2 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004640)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 7m46.689097965s ago: executing program 2 (id=2105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000280)={0x0, 0xfffffffffffffe6c, r8, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000700)={r9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000400)={r3, r4, r9, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 7m43.334298813s ago: executing program 2 (id=2109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x2, 0xffffffea, 0x0, 0x0) 7m37.82933946s ago: executing program 39 (id=2089): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r2, 0xfffffffffffffffc}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000380)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001100)={0x1, @sdr={0x50323234, 0x1000}}) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 7m27.36237677s ago: executing program 40 (id=2109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x2, 0xffffffea, 0x0, 0x0) 6m13.47451155s ago: executing program 8 (id=2309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xfa}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x1, 0x3}, 0x8) r2 = syz_clone(0x800a8080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r3, 0x0, &(0x7f00000000c0)={0x20000ffff, 0x48e}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0x6, r4, 0xfffffeffffff7e01, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000032680)=""/102376, 0x18fe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) memfd_secret(0xa51cd372813f45c5) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x88}, 0x0) 6m11.581338665s ago: executing program 8 (id=2312): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) prctl$PR_CAP_AMBIENT(0x2f, 0x5, 0x15) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8400, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$packet(0x11, 0x3, 0x300) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) read$FUSE(r5, &(0x7f0000008880)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x24048014) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$KDGKBENT(r9, 0x4b46, &(0x7f0000000000)={0x4, 0x10, 0x4}) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x79]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) 6m4.375414768s ago: executing program 8 (id=2322): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"07f30201", 0x5, 0x0, 0x0, 0x0, 0x2, "244a18d1c4e6469a005caf0c0ff58a", "00003dd8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6m3.823291191s ago: executing program 8 (id=2324): syz_pidfd_open(0x0, 0x1f) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='romfs\x00', 0x2208000, 0x0) 6m2.981658869s ago: executing program 8 (id=2326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000a00)={0x2c, &(0x7f0000000bc0)={0x20, 0x22, 0xca, {0xca, 0x23, "bf21d539927c9258eab1794ff071a922c94d8277c2e897bf866a4b4f1ff5b5161e66c24168deb63586f96224fb21262642b5697ab7ad84e83924188536cbc4d1010790ad669af6a677ef8eb0cfc9e1cc5848deda9a1cf1498d07307716d7d557f874592bf4465bc175c4d1ac635805738ec4f9c78b97404aecb44939cc92d07904911087101ed166d1459c17143159d66722d2863b0f651c3a84fade0f1e49d691e68ab12f8d2210190aff39d88a6dc5899f96ec570b69be8b3e697d085b1600d9de005c2fddf64f"}}, &(0x7f0000000cc0)={0x0, 0x3, 0xed, @string={0xed, 0x3, "9f5fcb37dd18ff912810366e6d22a666b2672b6ef3a8a1526c10ae1a38a15fa9a29b92413a2648debe6f99db2a39f65f3b6933f810abdb07b1e0c5839267fa72d32b4a72035bdcd9d36bc32d17a06c213a514639dd4ca3de89bd05cb2dc3ad2e6962d1d6958ee16ce4d0a9d8a3b9878b9dd0f151d4ee97c01d971e213f16830adaf74e557e13f54e4de1ab0d56ef9923b9f9ce54e7f881a55e7c55aa43e07a49e7feefec553fef28131f370e76739ee98ffaf027dad349b499a486f4daba231c35258f32334a80db72438667a76002c99144acdd543537015a4ca607a601ef25a5364a26f4ec90bd9fc11e"}}, &(0x7f00000007c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x7, 0xff00, 0xb8, [0xff3f00, 0x0, 0xf, 0xff3f3f, 0xff006f, 0xff0000]}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x0, 0x9, "0b432905", "a14cfe08"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x18, 0x0, 0x83, 0xf9, 0x0, 0x8}}}, &(0x7f00000011c0)={0x84, &(0x7f0000000dc0)={0x0, 0x3, 0xad, "3da690548af73882ddaa0d5ff1efe0072697c3e1b11bd119ba76f65830cbab5e9df5bc2ecf53f3a4d9ae371d17c7fafc2fbe7f20e0d7196136e3b70b744cfa60c5a53374f320004caaf59f3e827cd4590083fa1c4f2641ea5e3843a243055e9c69fe19a9c82f2778a811634c7a645b6b635709a07ae9daefe6a3ff97ae1cadfaa5488dfd3453ebd50f6b8678ffb762e788ca45a75586e0808dc5e61389fbbd88e5aa1b7aa8819d6ce2ebb4f332"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f0000000f00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0xd6}, &(0x7f0000000f80)={0x40, 0xb, 0x2, "e3fd"}, &(0x7f0000000fc0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001000)={0x40, 0x13, 0x6}, &(0x7f0000001040)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001080)={0x40, 0x19, 0x2, "83a3"}, &(0x7f00000010c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001100)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001140)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001180)={0x40, 0x21, 0x1, 0x4f}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='r', 0x1}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e652481000000009deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd1, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x33, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8987, 0x80, 0x1, {0x22, 0x638}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbe, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xdf, 0x5, 0x81}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x1, 0x5, 0xff, 0xff}, 0x115, &(0x7f0000000240)={0x5, 0xf, 0x115, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0xf, 0x300}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0750640bcb412f249f9afc92a64ecd8b"}, @generic={0xa0, 0x10, 0x2, "43f5ada2e9efb9e1d5fe8144af69b9206d35b73a2a6f13c5831b76078dc022aec86aef3e6b965f7783a2e9ed43a65ac448382b74f4496b2c76774220efbb092ef769a57be7c608efddb1a3b6e3b9d73e6388f2e060597a66dd7a9f267eb38ea20e8051774504c0387b7ddcf146dfab398d6ea20f44535be22ff16c7817bd8c035fda13feed733aa81b0ec38c21381b12238cc57d9934cabe3849bacade"}, @generic={0x32, 0x10, 0x1, "37448dd37b588d3431988bfabee5d0d6cf3c9f5468bdca494a67d70bb329292114807518ca014786b20cf7efb4d11f"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0xffff, 0xf000, 0x1, [0xff00d7, 0xff3f, 0xc0cf, 0x18000]}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "3ddeb2cec2a7bb60249d4b88aa304ad0fb4ac1d856664cc5fd218a4bd96c1e3915904d92f77ad40bff0defa7186ccf70f44fc8"}}, {0xa7, &(0x7f0000000400)=@string={0xa7, 0x3, "931f93a2c28d5beb78939751bc8617f171a3fc1270f0663639995ffae81246cbfc2607ea9946abe345f84b2de49c47b915ae1d15234d54e8faa0cbb52fa85d96da2cde6d9730f1e1686e48d77ead2ba243523a8dd9b4642f4f45f5d8ed88b8762a4fc6460b99e28dc1e07209c8ee404f5141c9fc665c654a5ee25085a3c3a56e9f3adcb1c054124aa164b628ccb017bd1121494657dae6bb7f05a6579a8b07a352f508c7de"}}, {0x60, &(0x7f0000000500)=@string={0x60, 0x3, "72dd3631d7da0c84b880aef53a998c391091321db5ea2f86c681e65d3b38bf78665cee091be0e725ba06ef40e7aafd815c3c5ff77e2b61dbcd595486b219440f5417c1c9651688fb8e6711c9b670cc95bdb8793ad59ed599533838639b62"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@host}, {@hyper, 0x400}, 0x400, "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"}, 0x418, 0xa}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f00002d1000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/153) 5m57.954819892s ago: executing program 8 (id=2330): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) r4 = syz_open_dev$hiddev(&(0x7f0000000600), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x8, 0x0, 0xa02}) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000580)={0x1, 0x3, 0x4, 0x40, 0xa0c, 0x2, 0xff, 0xe, 0x9, 0x0, 0xc00000, 0xffffffff, 0x1f4, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x8004510a, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000080009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/51, 0x33}], 0x3) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) 5m42.541721651s ago: executing program 41 (id=2330): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) r4 = syz_open_dev$hiddev(&(0x7f0000000600), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x8, 0x0, 0xa02}) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000580)={0x1, 0x3, 0x4, 0x40, 0xa0c, 0x2, 0xff, 0xe, 0x9, 0x0, 0xc00000, 0xffffffff, 0x1f4, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x8004510a, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000080009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/51, 0x33}], 0x3) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) 4m13.789777661s ago: executing program 6 (id=2551): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x7, 0x1, {{0x5, 'vegas'}, 0x5}}, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f0000001e80)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "feaa33ac922663ed"}}}, 0x11) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) 4m12.826104732s ago: executing program 6 (id=2553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) 4m12.69139045s ago: executing program 6 (id=2554): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x6, &(0x7f00000002c0)=0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@exit_looper], 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="fdffffff000000000000000000000000000000e82291487900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_procfs(r4, &(0x7f0000000580)='limits\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) getdents64(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r9, @ANYRESDEC=r8], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 4m11.598278179s ago: executing program 6 (id=2555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x50200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="bda6063335e5953ffb9e6b07f5411480acbdb305adfcbe77", @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24008844) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES8=r5, @ANYRESOCT=r4], 0xa0}, 0x1, 0x0, 0x0, 0x8801}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) 3m57.139295325s ago: executing program 6 (id=2579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r1, &(0x7f0000002700)) getegid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040055) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m57.032155257s ago: executing program 6 (id=2581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200f2ffffffffffffff000307"], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) 3m41.218623102s ago: executing program 42 (id=2581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200f2ffffffffffffff000307"], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) 3m3.87056391s ago: executing program 4 (id=2679): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket(0x22, 0xa, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0xfffffffb, 0x2000, 0x0, 0x200000, 0x0, r4}, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x20000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x9, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={0x0}) 2m59.091369497s ago: executing program 4 (id=2684): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="11", 0x1}], 0x2}}], 0x4, 0x4000000) 2m58.785407311s ago: executing program 4 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40010000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES64=r4, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bdbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 2m57.616282404s ago: executing program 4 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x0}, 0x20) 2m56.32315014s ago: executing program 4 (id=2693): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r0 = socket(0x1e, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = msgget$private(0x0, 0x3ac) msgsnd(r1, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r5 = dup(r4) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) 2m54.414561247s ago: executing program 4 (id=2697): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xffff315f, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x24382, 0xffffffffffffffff, 0x4, &(0x7f0000000140)=[0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x2, 0x3, 0x7, 0xc}, {0x0, 0x4, 0xc, 0x1}, {0x1, 0x4, 0xb, 0xb}, {0x5, 0x1, 0x1, 0x5}]}, 0x94) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000001000000000000000", @ANYRES32, @ANYBLOB="3fa346a5980ee8b3f8dd3801b6023ffcce096de3687e6e1a1df3348a008274685e71ab6c88b21902dbcbe2d1660d2bcea443d9398b045258fd1394f1b3d87a79ad18450465a9ccb4f4b2bb811742140f59814c4e12f8fb36fcc26ef545af18452ce575033f8813b1a40aa0b818d3df9298eb7d7e7dea4f6c61248b2d258f4382571f4412adf0aad397a946a914549fe4ada5db7dcd5cc8ee1a1d9d8eb97674bc540a910b4f428829ea02616ba66b58d5f529d7fc27d6e0b1e6d9328216f4a596658437813cc75d4f85af6e5b58539145a2189869c7c7440f0088e570849035fadf1629d5d7eeb56a9317b29f5d47868b", @ANYRES64=r5], 0x20) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r6, r3, 0xa, 0x24, r3, @void, @void, @void, @value, r5}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac40, 0x148) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000040)={0x11080}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') read$FUSE(r8, &(0x7f0000004dc0)={0x2020}, 0x2020) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@cgroup=r7, r0, 0x33, 0x19, r1, @void, @value=r8, @void, @void, r5}, 0x20) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xd}, [@generic="b5"]}, 0x18}}, 0x0) 2m38.111149621s ago: executing program 43 (id=2697): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xffff315f, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x24382, 0xffffffffffffffff, 0x4, &(0x7f0000000140)=[0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x2, 0x3, 0x7, 0xc}, {0x0, 0x4, 0xc, 0x1}, {0x1, 0x4, 0xb, 0xb}, {0x5, 0x1, 0x1, 0x5}]}, 0x94) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000001000000000000000", @ANYRES32, @ANYBLOB="3fa346a5980ee8b3f8dd3801b6023ffcce096de3687e6e1a1df3348a008274685e71ab6c88b21902dbcbe2d1660d2bcea443d9398b045258fd1394f1b3d87a79ad18450465a9ccb4f4b2bb811742140f59814c4e12f8fb36fcc26ef545af18452ce575033f8813b1a40aa0b818d3df9298eb7d7e7dea4f6c61248b2d258f4382571f4412adf0aad397a946a914549fe4ada5db7dcd5cc8ee1a1d9d8eb97674bc540a910b4f428829ea02616ba66b58d5f529d7fc27d6e0b1e6d9328216f4a596658437813cc75d4f85af6e5b58539145a2189869c7c7440f0088e570849035fadf1629d5d7eeb56a9317b29f5d47868b", @ANYRES64=r5], 0x20) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r6, r3, 0xa, 0x24, r3, @void, @void, @void, @value, r5}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac40, 0x148) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000040)={0x11080}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') read$FUSE(r8, &(0x7f0000004dc0)={0x2020}, 0x2020) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@cgroup=r7, r0, 0x33, 0x19, r1, @void, @value=r8, @void, @void, r5}, 0x20) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xd}, [@generic="b5"]}, 0x18}}, 0x0) 10.846601453s ago: executing program 7 (id=3248): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x24008800) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x9d, '\x00', {0x0, 0x6, "572692", 0x2, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [], "d8be966753d2e95f"}}}}}}}, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000100)=[0x7f, 0x4], &(0x7f0000000040), &(0x7f00000001c0), 0x0, 0x10000}) munlockall() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000280), &(0x7f0000000300)=[{}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x0, 0x0, r5}) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10.433926682s ago: executing program 7 (id=3249): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_usb_disconnect(r2) pwritev(r4, &(0x7f0000000580)=[{&(0x7f0000000040)="91d0", 0x2}], 0x1, 0xd, 0xb2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.167830169s ago: executing program 1 (id=3252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0xc8}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b0001010000000904"], 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x2) 8.412335422s ago: executing program 1 (id=3257): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x10000000000008, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setparam(r0, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000006c0000012dbd7000ffdbdf2500000000a454a8730f52e8ae52057e8a0674dc264a4b962673f2e40a37e9b95c965a3e6bafbacad92cf8037277bc662bb2353e7d3a4489f97249389950e12e125b203e3ee49bcfb75964a6ddbfdc274f61acfca1665a929ecf46f834db2cf6b727e18237b1b1eb9bfe7908e3f28cb8832c1aa6168138d43b01e2e46889bb57a017761980913de5", @ANYRES32=0x0, @ANYBLOB="000000000260000014001400776c616e3000"/28], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r7, 0x5501) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write(r4, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffffffffffffffc0, 0x80) 8.339606023s ago: executing program 0 (id=3258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.388661999s ago: executing program 0 (id=3259): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/51, 0x33}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000003c0)=""/25, 0x19}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/48, 0x30}], 0x9}, 0x9}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, &(0x7f0000000980)=""/39, 0x27}, 0x1000006}, {{&(0x7f00000009c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a40)=""/5, 0x5}, {&(0x7f0000000a80)=""/170, 0xaa}, {&(0x7f0000000b40)=""/255, 0xff}, {&(0x7f0000000c40)=""/80, 0x50}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000000dc0)=""/1, 0x1}], 0x6}, 0x7}], 0x3, 0x2102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000002, 0x0, 0xff, 0x0, 0x4}, 0x20) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 7.131558184s ago: executing program 7 (id=3260): symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='.\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x81, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000942319ffbe5a5aaadaab4a81"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2a73, 0x10, 0x80}, {0x6, 0x24, 0x1a, 0x0, 0x18}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x2, 0x2, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xfb}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x7, 0x400}, @obex={0x5, 0x24, 0x15, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0xd, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x4a, 0x9, 0x7, 0x20, 0xf0}, 0x3f, &(0x7f0000000840)={0x5, 0xf, 0x3f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x7, 0x0, 0xb, 0xf7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xff, 0x9, 0xe9}, @generic={0x25, 0x10, 0xa, "8d7c23a1e7b7059f3ea216ed196568941f19a9d8cf822fdb06ccfb1c51984dfd9dd0"}]}, 0xa, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x404}}, {0x37, &(0x7f0000000a00)=@string={0x37, 0x3, "56a94d385d75afd027eef37e7625e5f53b0e13367c44db45a1c555d48dd796c32b776927e17d1e95ca853bfae853f7a9b3f3418ba2"}}, {0x48, &(0x7f0000000a40)=@string={0x48, 0x3, "955071fa33a1201da63bd363d65b16e9d09edd9ee729f783de8ac5315bf0a6ff5188dc70face1e0e087c765627d3c0be7f243f5bd07c9d7d7da69aa8c1ea1ea1c42241d3d78c"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2a5a}}, {0x9c, &(0x7f0000000b40)=@string={0x9c, 0x3, "4e3bdcb9514179f4de0532fca7e01c7b4af8821a87ab1c712649a551ffc6b743c618205e36a9cfdcdc14295b6c375c2cf34b64632f956b0500170227deac2a93b5f8479cf196ba4b6b270bdef4f8734b8e917bed516822a83fbe1f2f3772c1e2ae6a6f4a68a107c64b849e712413273635e438caa9edc0215bd6fc303d7aff4807aee9d11a6a8cf591b0ef316f6755ec4e0c2c1bccf75c95bd86"}}, {0x7f, &(0x7f0000000c00)=@string={0x7f, 0x3, "24665cffe17961792b50c9d064d7addefb774292cbe75f706a7604f451315198210aa6aaa63d0716abca81f35f19dbd2d08cbc3c9e3e102f93451937aea39aac27e3fccc085545cadfb58fad2881cefe9afa94b8457ef07c1ec4619d7f91e7cad7a73f4f4209a71a415a6456e92b40a825a54f1ff7980d10d910a3dd9a"}}, {0x5e, &(0x7f0000000c80)=@string={0x5e, 0x3, "f3d8514bb36d96e27d2f32aeac417d40bf53ad50d8709c8864196927b2061bd7345a3c139f4e8b85e2b445a3fb1a76512247accf5b822d0d34d5ce73927790429b314a846f75e97b9f91ece716e852d709a082be81400060af88a93d"}}, {0xe7, &(0x7f0000000d00)=@string={0xe7, 0x3, "948df5d6571bd38a4d9d7f78e3e742193eea1e9b023683ffab0e3a89bfb49e435bb94a287eb319f4f9660b6631e9bfe7a80a7d063722afb288c578a18cc6a15c729d278806f573a7e6bbe03af3f6a66daee13c6dd1b4713e8c489f892a9e17cdb9dfb3e5523152ba3642c322d838eb1e21169dec26fb819e438ceac411516cdc38e2bdb0c85c7a42501f51447ee270a647a10d6d5012239097813816a7aa65e78075ccbd7416b3ab82d18efb3b29f819b7cb64fa2b828b64624ed1da1fd6b6b4aa73599a3516e85b35290c129ec4ffa5a909daca5899da9509bcddca4993a6699f5e236620"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000fc0)={0x14, &(0x7f0000000f00)={0x20, 0xe, 0x3d, {0x3d, 0x30, "e7dda0959d21c0e0f42a10dd3dc4b104aa4ca73a6de0f25805ec86d88b65a0a6569011d5ce3632bb8d98f0ce6ad31a197eb727e9d1ed34377ae7d6"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x44, &(0x7f0000001000)={0x0, 0x10, 0x48, "d92976fd0d64e9c59feed79156d5f131f4b59402bdb710776ef6ef755dca0d883c4066cf3d37d0f891f3041cc60ccfb2498ee878bc6ade748c5d517a20f8164e9f27d16713f1c271"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001100)={0x20, 0x80, 0x1c, {0xfffb, 0x2, 0xca, 0x97, 0xaeb, 0x14, 0x0, 0x69, 0x7, 0x7, 0x9, 0xfff}}, &(0x7f0000001140)={0x20, 0x85, 0x4, 0x81b}, &(0x7f0000001180)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000011c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000001200)={0x20, 0x89, 0x2, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYBLOB="0100e6000000fddb"], 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x11, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}, 'J'}}}}}}}}, 0x4b) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x58, {0x58, 0x8, "0c0da9211fb1217168ae13a9f899ba6bad6679ae1905f69511804fb5f7a137752ad281fe64f613ca80c57354934a3d9f143187ebd2c45b89976ed2f13ff25da38c6b364ec807f051c6e52d22c564b25b6063da6a60b8"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x803}}, &(0x7f0000000180)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x3, [@ptm_cap={0x3}, @generic={0x6, 0x10, 0x4, "358559"}, @ss_container_id={0x14, 0x10, 0x4, 0x9b, "70a7760c194ee2ac63386014c583f1bf"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x10, 0xf9, "2e65d5fe", "a1a6f054"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x2, 0xb4, 0x52, 0x8, 0x7, 0xb}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x31, 0xf3, "7ae8ee810228789490446a02f7980a8940d3aa537e058394f57b7fcbe4f898494ca9aa09e6866655868346bbf76fa61faefbe057eabbe82e481d795dd3e00172ee5be08426e11c6e5f38fa25a78c429462802137ca0a67449562fbf28c6b09a8d8c2fc5349576d44cd36734a484b924e19957a341409830b6c75eadb6dfe462f620dc604aee3cc072a10550a8e3f085e70563e361ba7f877752aba357c1cfcde5b06a9f48d3603a8d10cdbd860ba639a725c894b4c80015750aa4af0579c82ab84aa3abc56cb897f08801f3e2f13f8913f20e696eb7ac8e532ced88c5e2a5c3edcd3659772e727ebdd9ee9533f9ae991f27850"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xed}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x99cf9ecd635069e5, [0xf000]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, '\f#'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="b51b648a4dda"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "9e98"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x80}}) 6.417818645s ago: executing program 3 (id=3262): socket$kcm(0x2, 0x200000000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYRES8=r0, @ANYRES32=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setreuid(0xee01, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) (async) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)="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", 0x0, 0x90004, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r5}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x108}, r7, 0xb}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x108}, r7, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x300060c1) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x93e, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x93e, 0x4) 5.878242174s ago: executing program 0 (id=3263): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) setregid(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2020010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) syz_usb_connect(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r3, @ANYRES8=r1], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x0, 0x2]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000003440)=[{{&(0x7f0000000280)=@caif, 0x21, &(0x7f0000001880)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/81, 0x51}, {&(0x7f0000001780)=""/206, 0xce}], 0x8, &(0x7f0000001900)=""/238, 0xee}, 0x3}, {{&(0x7f0000001a00)=@tipc=@name, 0x80, &(0x7f0000000700)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/83, 0x53}], 0x2, &(0x7f0000002b00)=""/90, 0x5a}, 0x3838b89e}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b80)=""/251, 0xfb}, {&(0x7f0000002c80)=""/199, 0xc7}], 0x2, &(0x7f0000002dc0)=""/68, 0x44}, 0x9}, {{&(0x7f0000002e40)=@nfc, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)=""/106, 0x6a}], 0x1, &(0x7f0000002f80)}, 0x200}, {{&(0x7f0000002fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003040)=""/57, 0x39}, {&(0x7f0000003080)=""/161, 0xa1}, {&(0x7f0000003140)=""/149, 0x95}], 0x3, &(0x7f0000003240)=""/225, 0xe1}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003340)=""/40, 0x28}, {&(0x7f0000003380)}, {&(0x7f00000033c0)=""/39, 0x27}], 0x3}, 0x6}], 0x6, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000180)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 5.874473782s ago: executing program 1 (id=3264): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$isdn(0x22, 0x3, 0x26) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0xffffffffffffffff}, 0xc) syz_open_dev$dri(0x0, 0x4, 0x490401) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) socket$isdn(0x22, 0x3, 0x11) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0xf, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x20f, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb884800000f000000000000000000000f0f0063fe96a201c9060100000000000000000000ffffac1414aa200100000000000000000000000000013a06010500000000fc020000000000000000000000000001fe800000000000000000000000000034ff0100000000000000000000000000010602000000000000c910fe8000000000000000000000000000aa050203ff000068000bb0660000008904008100000000fe8000000000000000000000000000aafe8000000000000000000000000000aa2c0c040696780300fc010000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbfc010000000000000000000000000000fe88000000000000000000000000000116000519650000004e234e22", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="50e2fff190780003de28ed0645e9b5371e7f49d9b7a6e846dc2b9e679e542f45d02d62b4af836798b6be2bcdaca0116431e81a58890ad0e7ef2df1785190aedb9a1c93fca93465d8e1c5526f55dfcc3598f52a1ee4d6d93a717854ed5ec544f6e6b3814fb34ead302555fbe8f65b71b86dc4638476dff0f3013686fd9bc1ae4d869641ee24fbc1d67a2d353bde955bc10c05f35e6ef4210ed6d5ff33f18c7769db90ea17445cc9fd22ca9f81c0efe643c16b9767c6ae9c0bace65a0b126a1498fa2b3ed33d"], &(0x7f0000000180)={0x0, 0x3, [0x69c, 0xd5f, 0x22a, 0x824]}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.647337903s ago: executing program 3 (id=3265): fsopen(&(0x7f0000000480)='adfs\x00', 0x0) r0 = syz_io_uring_setup(0x48c7, &(0x7f0000000000)={0x0, 0x9e55, 0x0, 0x1, 0x1c4}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1558, &(0x7f0000000100)={0x0, 0xbf53, 0x20, 0x1, 0x31e, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) 4.34393929s ago: executing program 1 (id=3267): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.259752449s ago: executing program 3 (id=3268): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) 4.217319472s ago: executing program 5 (id=3269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x30}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0xc) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0002006}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x10202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.178331222s ago: executing program 1 (id=3270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_usb_disconnect(r2) pwritev(r4, &(0x7f0000000580)=[{&(0x7f0000000040)="91d0", 0x2}], 0x1, 0xd, 0xb2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.095680498s ago: executing program 3 (id=3271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(r1, 0x4, 0x42000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=0xffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x4f0ce05d2b8016d9, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044005}, 0x20004000) socket(0x3, 0x3, 0xf) 3.717834053s ago: executing program 7 (id=3272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x763082) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r9 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$AUDIT_MAKE_EQUIV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x3f7, 0x10, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 3.548629078s ago: executing program 5 (id=3273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(r1, 0x4, 0x42000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=0xffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x4f0ce05d2b8016d9, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044005}, 0x20004000) socket(0x3, 0x3, 0xf) 2.873680703s ago: executing program 3 (id=3274): r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00080000003f09001c0012800b00010062726964676500000c00028005000700060000000800", @ANYRES32, @ANYBLOB="08001f00"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) 2.740971745s ago: executing program 3 (id=3275): syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120102030109021200013f000000000000000000000000000000f0120000000000000000"], 0x0) 2.460154922s ago: executing program 5 (id=3276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000400cb00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xa8) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b, 0x9}, [@jmp={0x5, 0x0, 0x8, 0x7, 0x7, 0x40, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @broadcast}, 0xc) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000000c0)={&(0x7f0000000980)="eb78a186ccde057d13823466159aacc00a46af6ef784de9063f919a2c5af1fba84cfb061a8914f0ab332411fd09e4f2f84573bf9025bcecaa7ca34281d4e4850f0e22ab179ef28084cf25decf4af522da4df7a2978e16c43defd969992851814ce2121de936f823f9f9df00b704d600ea8138fc6481010b4e791a9c3bb422a0b39775ad5f7ee1bfc13724201df75c00f5fbf8b589ca3a0b899c6f2718d47fd3f4e72db690bdd9278c3a0b26bd05c328523e591a1a2e73b713206c84d68ec3014547bd5707d5217a799cfa6300c0bfc2e35f528edc5db6943cf89eae6e0b70f17ea151f76c3846c4d42623f836206c6059ab4dd5f792b92ee90f92d827dcaedb2a7a89992edc3ed87eeff5015ec677944aa5d1d5ad91ee195ff4311d9eb687b183349517cff73edea8174226133e934f6d7435766e5dab165fed941503d2aa22fc374019456c252696631c64163fb3b5c67160156fe832fd0f7a10c450492081cb5c8ab4635d1dee115ac8a65f94f42fdb0cfa360b64197ec4d6017a0fd81258ff4a918c663ad1938a43a1d96fce0a0e592caabb8ebea9517b078e423084c991aed6ba9c60fea769d3cad3a8a243835ab0bb94c44a12cd21a061bf2712d0e4803bca60e89a6a523dd78fe753d023ec67007df5364e8df4653f4b46974d210ebb977490d4d2083eedea2eadc4b100ae33fc474e2d04ab877b690b00cf9e5da40d41584fe1898d40861a93e2c3df6124e1c15972ec75a7526c3268cafafa2088105ec8e3a91106b870186f9a8abcf308b8dfffec40a45460dfa8305a4c6813e7dff6ba15ca04c44d4b737c03f81a90384008b870b83524870fe85d439ef2b0b7b26d5099ccd35040143532b0722dfb15313636537a3cb136141da2f4f4f151909c7cd61314cf2054c4b1e8e7fe83f4db0a9e630a21b213177c103d9633ae5453191c8bc7c24a814f3e10a0e64d9d25b793dfa689422a87c2e559bd346cc0f3d4c03cc2c97dfb4246b72b8f72662bf8e1cf1164c6d569ab65a0a6e21c131802c4900e761b54b5203db59c536b649ea92204a7902a1aaf1c13b88a4945c69920e4931b19fdeedaedd313b56431bdc56176063baa626a1ffd4463a67728c94292626a297eb08ac1a721dbf93ccbdbbbb9e36b7fa157c006d7aae568b71e08963de4775a31f74878fb194505cc38906cd474418b34801d5cbde3364b16543bd4b96b52ca9241af9463fd05ffed6ea2556a44f2684f36376ec179900866405f38b5bc9875cb4e13617b8fee2b5fd908339490fe10a25c81627a36a4a2460debc12e27c741ee8c5f9dd739bdef2c91ac73620a198a7c9137ba8d8e4ea821653696cdb772f06a6aecaf3875e43022538401c523bfdd3708c4d214b11b9d2d09723e3e41d119b2f12d103b4effe458bb8be122012dbca931aa136e71b8bd2a959bf9583ad0eb522c9b194685f7835de1f80a2c7b955ebfee4801a81f7375648b549eb9e1b1c0ac830cc4623b1be38ddaf8ed2f0972d82eb4ff08c61c61174fd4190cba757ae0007629c835b58514168bcf193471e0bea85f0bf400668240069bc6ee10d1c599db1619aaad33fdda3dda239cf99b2cbc4d8ec756e6d03f6ecad858d2dd7a93cb4bf8474e274191ffa2f0fd42316e9c98521be277d24b281e85ac312c2b6487a8366c5145bfb5ba20b64e288bf97e208fc2a6b17424e7220b32cb846d2b14776a24497487faa1b37168a39331ac0efdb943d497add54c8397252754d592519085e04bc7e536e97304852b8d770948e03423e4a33037b76f2d7a9c69d0343b1da9847b7c3b529c8259a36832c1a0fc1a7764a45712dc2bdfa4b7cab2ebeefcb868183dd99a485f3b02e7cab74d708903269781fca83a02e20e0fa0e2fbb1bf07e8f3737a1f467ba8b472a462b23ecf1d0b1a1b1545ebee4fce69dd24effdd79cfabc9739f9c7142be681c4612864171d6ffc353606ef00da74f2f71cc5ff53b4ab6cc8407e88b2c97c3aa69412b648ea35130bff1ee91cba490dbb873b36a8c8ce8faa84ed811740f447161905a06cffcc3853b91f28f5f0c074e212d1e75c38c2d1623b25713ad71f69d510fea22d7cc6905bb835f18aaa29c1b7dc48fe3474b8f75746132db377e3603d5ae966807232d261ae322beb9bb91270fcbb9ed09acec073828a79e5969bcf270fcbea5dc59a3acc2609b9a144b3ced9fef08923ec74d251538f88b06c01f83bcc781f9ec9ef60ed0ffe4b53fc681c6a08f58f4192c617b49237f729e73ac98b92050cdf7bb12a9d96e8810f38d35a0e9dcaed0faa7f37a5346bcbd361adb051e7416b83264cd90498d2094a899071d6532b1a25e7c9f2f8f998420af4684febe44bdf723bd3605bc1068ae9ca194043a35e883128eabb4cd434d46e20c0d4ccc4cbad1767611d9bae9544036757900e0439e77606cad241fe665326c02eaaa88f0c6d04087641a8b921f5b099a1f7c2b7fe6935e8c8bee7a9df87937a5d1acf0a1da78accd6d4e9df186e55d1fd9f9159865dfe38a8af33a75de7d60c51f73afcf629cf605d6571e7a761abf0d95753843ae051b7e9d3bf5410ab6d12ad67521baaff76dd305979ff28dc1c4781295d015ed9a014aa2b38d246e7ce68718399d1123e7f85c6aacaf4c9ef564761d7236bd6402a79002ca6d8f9851368dc3b8cc04eb707770f238ec80087ab781968634dc63e13fb4e7ab29ed131445d715b2913d3a41d4c7f4befa123ab2419041932e795fae75b2f56da7b1782339e3cbdb2f5d21da54c3305c082c013143c8aadf9bcb2a33a1213f8578575a97ff9e91c01367840f4d602f01858ed773d9bb325c77e8e6021bf754e921741e4bf2cd4488bd56e37537b0bd4bdf682ec31dc8808a1fa40c660595c7159c7503fbf4a1913b8a709e35dba70fc5842d043e89681441a0cd442628241cfa09768d248bb5aae684226586d2858459bf5559b5586d465339b19df643fd497af8d1cec440fb7ce844677ef4be2f70bc97afe2283777ae280557ff2d93e463a2d457ebf85e20688e6ff462405b4b3dc42a0829ac9d727b63a8d4972938c4960771e50c0f3bd705534eb5d64f8036c2b8ab0ea352dbc69eb641ea32536d35433de17a85d926ed29fab47e475769885ccedc30c16cb06e84b5b7de2e1b82483e83a2c5e9384b1fcec853b2845d976fb1891298ec033006bbf7f2c409e38bec90bf9a0aaf87b95ebaf0a034df09c051fd11fa8922baed87d27fbda6daf604e3648b8e2caf10cf2b144dd7d97682dd176e82fff1b639706ea2727f28e7ffa189cc2face95f714073139c32669e85ae8d3ea88c28d197bfaa32d6666bb6c4135d73fef6b7ce915b2a1937f5142949c4b04be66c7eb62be41af49180aa47627f4823ab32762c43ed57ea5df768f3f632693c821c4b71aa05f496a1d11dfa7ebff986320635befad673e89d1d57cc05fc3d5b35fafea6d1884d6cd6693b50d79a22e94fdd198a89d9f4003cc865d12bb0d8e1f28a8070e94f44605fb71880efe86c52c95d7482f7fa732751baa24fa58c74812a04ab40a1b9e2a502a5b794c3117f1adb7626ad32db46b94d352c06deab7fab8ad2d4bcf017faf1e96a00e355bcb5bfa4c273ac5b9eb86202ddde802eb9343f6cb78f5ef2d97a0ab018010c17a41d9ce6da5988b6d8022eb5da0438355fd18a51bd835c392c73cf8b851869b97c02775f1caa74c4640432f02c4ae0ee74d0a95366247aec59dcb439dc017a2fde8bc6e75c6f79abcd76567f021fdf220a8f0ea8d937b4b6ac02988a2b3b8e1c1a4e6345f8aa70fc5fb0db1ac337a4cc034452458760eb17681dc7214eba4e0f0246b75407c8c2e7cc0436b13ee8300e070bdf80febf42c100881c0593c792650f137ab6497579ce0ab8d2cf541959dc3a25317cd187201f6a76d7cf2651cc876a227cf20f11bb7b78bf35f4b87c0614f9d438c6e91a7888f979fdfb3767807414eebd8d0557aee3dd40f4a568b1574ddd19849bd584e05cca236e1ae10bfa0276f8b8e232a1c8aa11a8435e629c5ea48656a6af7fc75db9bd94fa217ae4e7c321ef91255c6c0a1697e76370c06422290b7a1372e93e65614b3684f0960640e4d1d85c378016354a176e298b12528457464c0ec5d913a9ea1a70e8d5a8e91e81acd6beba9138a8f52ac09fcaf1c9c13caa58f7f06eca412fa6928641857afbb72a774249fc55f147418254bc35780412c04d2c24d2bef4a702c196b65b854aaf572ab611f72b032f19eae6136d87bdc5cf4c969702bb1f7fc3a059a3ed4f9719d5c15737b29081f7935213f527f256c9c5c65877f0b6e243c8e5959e2f0854a036e32315df73a3527cf9b5c5600992304cf6e1470d7541fd273da0acbee9a040b92fe2e20f577cdad0f17428bd30b18677f822bd8e7242818cb7aae915f6607024a1311cd52cf938ff77e12f4e80c29243cd7a64fa195d221189d0ce70a3b9dfdfca1ed6e5969a041aae3961cf1635fa19114513c7de090fc4221e418d1f6a2874e333e91f61c982ec4925c3dae01e7d5237287c3eee72d568fa4b24e35a833e3f22b8139ae28ea634d982b38c65686f88d3caa96e77424a23f6bb30beb0a7e39e873588934c6ac21d594098d53aa8543e65d28f48abe1b032b175114ffca4d71432918f4272b77f309ebb1ddb911c9b5d2807df979ea7ea145b7462b07602590f7d1a6040b39dae47fe96d38760175bab166422d52235a4db98ff498cf36ea244c7ac2bbc87444cb6fa0df5c518c5db65eaacb4693077e650a8c19a7989b71ca9f3ea31ce49edba41c2ac62651c0b59445c671a374eb4f2b1fc721997cff4d680005a7fbca8fc3a63062f387fc8f096f86466f35ac5f3642788c81a6dca18acf2d1f377b58f881bb7078081deecc4f17f1a92b2b07c1b8616e76a9fa7c1a3406ce45c84e949050abccc6a0b8806848eb85294a151ff44d9ddb8ca18bacc4a3948e40b4abfa3c159b94c81ce834208ed30ad4c0e9b3d378432062ee882f3bb542bfd2064c8f1a10b70d17c66db10394e300b23ff5983a25e11b7df4097d6484612a071043489e5e96c6918aadab489c2a63ba1ed1f345aa06fdeb5f158d20f6e8662275b4ed8514e8fc1ab6dd14ab83deeda5eaee6db0607ed0f9efa445d319b9dbc225f45eb270a39649de88cd0527de2016bdbe7b08cb6a0d661db6bb9bc413c6871478edaa030ec67c2d3232a0040cc624767f5fda5247804b2ee212008aac6db47764bd7a0c3559bb0854a1f508fa4158e82e9f71114d362f095783e5ce892b03767dfaab41bfdf717b9206a54e70de748569d466b16938c9adaae41e56359d7297a38eb045e88161a9a2ef0c7634b8df8d229c9b3867bd78e0feded6b7cd063966c7065bf24ce57c908c8a1710e8b53795f533bc60905bbf560c15e4e7870e91fbde2e72ad638936a6ba60045d01add49df7b77d308df279ad65a8198284adcc4353a89f678f9af768a2c01264ed459f270072f89840004d2fb6a7522cd708069a0219d5b36a5a82d798c60f98fc3a49bbafdecd63c65adc64d5e8f2962fafd62ab8f855fd4b436aae83b82146858a18b4769c37f7bc9ecb14ec691cc4408798d04ee39495b1e86f97806e7fc6d947390b1a6c2bdf06c17362a0f023bf9838f465dcbd7b252d67fc555b18398a145faca6eb6939c66187011ae881440d5e7686604ff9a81cf1cc3c51aa29fd8dec7c0ca833f2b502be750308764479cba353e05ad62b1e46b8efb596cfcb2deea97631647e88bebd60b39f771ca6ce1def2e8", &(0x7f0000000300)=""/168, &(0x7f0000000480)="d56fc67d6645ed07cb058a71bd26c1078e02ac2538f13a8db5252809833dd08d5560f61d19626fc8d596ea5f73710e287e2898f97ee856524bf4bebb62a83af9557c6aad0ca3c353d89480c324c3fc6ced85e9c44fd5a70b2f35a8d043e2d542a67d57a002e852d09e9beb81dfea26ceb26a2802ba4bf09bcb80fcd920bb110e3c75", &(0x7f0000000540)="7fcfbb1f662873dff541366bbd813ed53782992ab7d2d59ccecdf75409ffc3fb627f1efbee6a2e0d588d5229385a300f6ec4d40ab641584956c489ceda4334d888550d372fcf5b02a5befad3cfb1e63baa499fb90f36165adfeea6c798d67aa6b4d741cfc4c1eea474c6b7cd7f91d1aa599a719acfcbf5f19da6e9ce22f217db1e53efc53b3f75a81470d80f704a75bf4ba846def47fc35c", 0xc, r3}, 0x38) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') (async) r8 = fanotify_init(0x2, 0x800) fanotify_mark(r8, 0x401, 0x1000, r7, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.395698475s ago: executing program 0 (id=3277): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x20, 0x14, 0x0, 0xff, 0x0, 0xfe, 0x2, 0x200}, [@RTA_PRIORITY={0x8, 0x1e, 0x2}]}, 0x24}}, 0x4048890) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) ptrace$peekuser(0x3, r3, 0x368) bind$alg(r2, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7", 0x7b}, {&(0x7f0000000300)}], 0x5}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x78, 0x100, 0x7, 0xa, 0x6}) 2.343107401s ago: executing program 5 (id=3278): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r3, &(0x7f0000000300)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="af4722cc8462fb1c188059a0f07e48ab6e00549911e6fe07e4e6889f44e1596b2dc619f27a6cc77b2e7a39566c7ccbf4313f82d58a573be73c62cc52ce549aa96b99da85ecf1c90364420c341fc0", 0x4e}, {&(0x7f0000001540)="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", 0x1000}], 0x3, &(0x7f0000002540)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xc0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000000091"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.136213132s ago: executing program 1 (id=3279): prctl$PR_SET_UNALIGN(0x6, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x890, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x12043}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x890, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x12043}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) (async) prctl$PR_SET_UNALIGN(0x6, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) 735.308415ms ago: executing program 0 (id=3280): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, 0x0, 0x917, 0x10, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008e00"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200e0000040a01080000000000000000070000060900010073797a88f656be02553000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) 726.766348ms ago: executing program 5 (id=3281): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r0, 0x10, 0x30, 0x30, 0x0, @ib={0x1b, 0x4f53, 0xffff, {"15bf3c0782bafb0045c4377b8e39aed9"}, 0x7c4fd0a9, 0xa6, 0x5e}, @ib={0x1b, 0x38e, 0x0, {}, 0x9, 0x0, 0x8}}}, 0x118) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = creat(0x0, 0xd) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000004b12da00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r4, &(0x7f00000002c0)="e4bf54937c224a2549ff295419b8cde0a963b5aa4debddb9571b3be4be1526900027b7c84ddd5fab0841051093afdf701e", &(0x7f0000000000)=""/85}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x40010, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-):\'%'}, {0x20, '^--'}, {0x20, '/dev/nullb0\x00'}, {0x20, '-'}, {0x20, '/\\..{^v&'}, {0x20, 'GPL\x00'}], 0xa, "8305553b18d5ac320f70d89258bb31ac33f9ce8851e67a3cee83547268808828f588a09731af826bd6a7c78c3141156085d10418ac262a295b7b8c371cace39ed2d3a757a42bccdba6f0f67166d79de682734d4e172e8f116bc0311c660828ab7c183a86b44856e302be0c88b40405d524a994da42e9900e5cc2886423f7e84c58af0e908e6af9d1dc4860b6dc8c08d6ff"}, 0xc3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x18db80, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x1}}) 3.343853ms ago: executing program 7 (id=3282): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, 0x0, 0x917, 0x10, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008e00"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200e0000040a01080000000000000000070000060900010073797a88f656be02553000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) 2.193764ms ago: executing program 0 (id=3283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x70, 0x32, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x42}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x9afdd1f811394b82, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x8042}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r3 = syz_usb_connect(0x6, 0x36, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES8=0x0, @ANYBLOB="2a66a2136dddfe44e05fb2e34435bf08eecb71bfa71424ce29184f877b2a71e08fe8f3e9ce9f7871916b0e90bfb78e3dbff6a7a98e4465eb1f5fe47b611c8873d209ead83d7910ad0336cfe1c73e856cdb192ed5d743f2fbc0b283b328aeb2c6333c91cf09048212f7929837bab475ebb3698186c8aee7ac6465943d1c6d5ea51734869a0a0f3f39e007fd697b02fedd5bcb4ab3896c9861e666f209256ba768bc906761227bad60ab458131fd43008591f2"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r5 = syz_open_dev$vcsa(&(0x7f0000000700), 0x5, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000030000000000000004000000850000008700000018010000646c6c2500000000002020207b1af8e1976c1e39ff00000000bfa100000000000007010000f8ffffffaf02000008000000b7030000020000008500000973000000950000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x82}, 0x94) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000001000)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f0", 0xa4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmdt(0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES16=r3]) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f00000000c0)=0x5) ioctl$sock_ifreq(r8, 0x8926, &(0x7f0000000580)={'gretap0\x00', @ifru_mtu=0xffffff1f}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008842}, 0x0) socket(0x2b, 0x1, 0x100) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) 1.253297ms ago: executing program 5 (id=3284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x94}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x83, @mcast1, 0xca}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000004900000000000500000a48000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff04040009800800084000000001140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r6, 0x10, 0x0, 0x1062200) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}}) ioctl$KDDELIO(r6, 0x4b35, 0x7fffffffffffffff) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x8}, 0x50) shutdown(r4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 7 (id=3285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(r1, 0x4, 0x42000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=0xffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x4f0ce05d2b8016d9, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044005}, 0x20004000) socket(0x3, 0x3, 0xf) kernel console output (not intermixed with test programs): ted event for opcode 0x0000 [ 1212.828621][ T30] audit: type=1400 audit(2000000081.228:3388): avc: denied { audit_read } for pid=17789 comm="syz.3.2813" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1213.195174][T17792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1213.876879][ T30] audit: type=1400 audit(2000000082.210:3389): avc: denied { listen } for pid=17803 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1214.647681][T16530] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1214.656730][T16530] Bluetooth: hci2: Injecting HCI hardware error event [ 1214.667287][T16530] Bluetooth: hci2: hardware error 0x00 [ 1215.956559][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2824'. [ 1215.966401][T17819] smc: net device bond0 applied user defined pnetid SYZ0 [ 1215.989470][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2825'. [ 1216.107777][T14622] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1216.183339][ T30] audit: type=1400 audit(2000000084.371:3390): avc: denied { unmount } for pid=16953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1216.311391][T14622] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1216.330914][T14622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1216.356027][T14622] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1216.383953][T14622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.392022][T14622] usb 6-1: Product: syz [ 1216.405377][T14622] usb 6-1: Manufacturer: syz [ 1216.410032][T14622] usb 6-1: SerialNumber: syz [ 1216.427873][T14622] usb 6-1: config 0 descriptor?? [ 1216.446948][T14622] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1216.529270][ T30] audit: type=1400 audit(2000000084.689:3391): avc: denied { mount } for pid=17830 comm="syz.3.2827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1216.619201][T14727] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1216.792000][T14727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.810767][T14727] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1216.830418][ T30] audit: type=1400 audit(2000000084.969:3392): avc: denied { create } for pid=17816 comm="syz.5.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1216.848320][T14727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.876234][T16530] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1216.888582][T14727] usb 1-1: config 0 descriptor?? [ 1216.912625][T16377] usb 6-1: USB disconnect, device number 49 [ 1217.123679][T16530] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1217.125339][T14727] usbhid 1-1:0.0: can't add hid device: -71 [ 1217.134458][T16530] Bluetooth: hci5: Injecting HCI hardware error event [ 1217.149270][T16519] Bluetooth: hci5: hardware error 0x00 [ 1217.163370][T14727] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1217.196670][T14727] usb 1-1: USB disconnect, device number 82 [ 1217.213633][ T6795] dvb-usb: could not initialize remote control. [ 1217.229164][ T6795] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1217.248420][ T6795] usb 2-1: USB disconnect, device number 52 [ 1217.289492][ T6795] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1217.367696][T16377] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1217.588782][T16377] usb 4-1: device descriptor read/64, error -71 [ 1217.688502][ T6795] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1217.859436][ T6795] usb 1-1: Using ep0 maxpacket: 16 [ 1217.871502][ T6795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.884992][T16377] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1217.902373][ T6795] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1217.924019][ T6795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.955845][ T6795] usb 1-1: config 0 descriptor?? [ 1218.179746][ T30] audit: type=1400 audit(2000000086.232:3393): avc: denied { ioctl } for pid=17850 comm="syz.1.2834" path="socket:[68755]" dev="sockfs" ino=68755 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1218.303297][ T30] audit: type=1400 audit(2000000086.326:3394): avc: denied { connect } for pid=17850 comm="syz.1.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1218.371451][T16377] usb 4-1: device descriptor read/64, error -71 [ 1218.464278][ T6795] kye 0003:0458:5016.003B: control desc unexpectedly large [ 1218.482548][ T6795] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.003B/input/input59 [ 1218.501094][T16377] usb usb4-port1: attempt power cycle [ 1218.589103][ T6795] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.003B/input/input60 [ 1218.657627][ T6795] kye 0003:0458:5016.003B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1218.682609][T15278] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1218.864186][T15278] usb 2-1: Using ep0 maxpacket: 16 [ 1218.876015][T15278] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 1218.884126][T15278] usb 2-1: config 0 has no interface number 0 [ 1218.885977][T16377] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1218.906965][T15278] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1218.921932][T17833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.928439][T15278] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1218.933734][T16377] usb 4-1: device descriptor read/8, error -71 [ 1218.947675][T17833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.959045][T15278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.978419][T15278] usb 2-1: Product: syz [ 1218.983276][T15278] usb 2-1: Manufacturer: syz [ 1218.989038][T17833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.003721][T15278] usb 2-1: SerialNumber: syz [ 1219.015525][T17833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.022108][T15278] usb 2-1: config 0 descriptor?? [ 1219.060211][T17855] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1219.117405][T15278] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1219.217121][T16377] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1219.259619][T17833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.272604][T16377] usb 4-1: device descriptor read/8, error -71 [ 1219.296559][T17833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.338215][T17855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.345496][T16519] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1219.376343][T17855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.401999][ T6737] usb 2-1: Failed to submit usb control message: -71 [ 1219.409154][T15278] usb 2-1: USB disconnect, device number 53 [ 1219.416152][T16377] usb usb4-port1: unable to enumerate USB device [ 1219.439870][ T6737] usb 2-1: unable to send the bmi data to the device: -71 [ 1219.470016][ T6737] usb 2-1: unable to get target info from device [ 1219.486700][ T6737] usb 2-1: could not get target info (-71) [ 1219.502891][ T6737] usb 2-1: could not probe fw (-71) [ 1219.764761][ T30] audit: type=1400 audit(2000000087.719:3395): avc: denied { listen } for pid=17832 comm="syz.0.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1219.849298][T15278] usb 1-1: USB disconnect, device number 83 [ 1219.883492][ T30] audit: type=1400 audit(2000000087.738:3396): avc: denied { write } for pid=17832 comm="syz.0.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1220.692492][T15278] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1220.844221][T17895] IPVS: stopping master sync thread 17896 ... [ 1220.856897][ T30] audit: type=1400 audit(2000000088.730:3397): avc: denied { map } for pid=17888 comm="syz.7.2846" path="socket:[68268]" dev="sockfs" ino=68268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1221.011281][ T30] audit: type=1400 audit(2000000088.739:3398): avc: denied { read accept } for pid=17888 comm="syz.7.2846" path="socket:[68268]" dev="sockfs" ino=68268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1221.078524][ T6795] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1221.152438][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1221.241315][T15278] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1221.250562][T15278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.258585][T15278] usb 6-1: Product: syz [ 1221.263385][T15278] usb 6-1: Manufacturer: syz [ 1221.268015][T15278] usb 6-1: SerialNumber: syz [ 1221.276649][T15278] hub 6-1:24.0: bad descriptor, ignoring hub [ 1221.286227][T15278] hub 6-1:24.0: probe with driver hub failed with error -5 [ 1221.290961][ T6795] usb 1-1: Using ep0 maxpacket: 32 [ 1221.305219][ T6795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.316708][ T6795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.326615][ T6795] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1221.327195][ T9] usb 4-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 1221.336423][ T6795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.356995][ T6795] usb 1-1: config 0 descriptor?? [ 1221.364297][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1221.377714][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1221.386797][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.397431][ T9] usb 4-1: config 0 descriptor?? [ 1221.407834][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1221.568976][T15278] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1221.596402][T15278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1221.619837][T15278] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1221.640574][T15278] usb 6-1: media controller created [ 1221.655273][T15278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1221.751192][T15220] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1221.811185][ T6795] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1221.838754][ T6795] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1221.846348][ T6795] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1221.855419][ T6795] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1221.862720][ T6795] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1221.870110][ T6795] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1221.884100][ T6795] logitech 0003:046D:C29C.003C: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 1221.900351][ T6795] logitech 0003:046D:C29C.003C: no inputs found [ 1221.926819][T15220] usb 2-1: Using ep0 maxpacket: 16 [ 1221.930931][ T6795] usb 1-1: USB disconnect, device number 84 [ 1221.944723][T15220] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 1222.043066][T15278] DVB: Unable to find symbol dib7000p_attach() [ 1222.064922][T15220] usb 2-1: config 0 has no interface number 0 [ 1222.183620][T15278] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1222.204532][T16519] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1222.213795][T15220] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1222.294969][T15220] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1222.314058][T15220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.332446][T15220] usb 2-1: Product: syz [ 1222.341066][T15220] usb 2-1: Manufacturer: syz [ 1222.351234][T15220] usb 2-1: SerialNumber: syz [ 1222.375335][T15220] usb 2-1: config 0 descriptor?? [ 1222.384842][T17898] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1222.458076][T15220] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1222.523694][T15278] rc_core: IR keymap rc-dib0700-rc5 not found [ 1222.539256][T15278] Registered IR keymap rc-empty [ 1222.612089][T15278] dvb-usb: could not initialize remote control. [ 1222.888180][T15278] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1222.903791][T17898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.930859][T15278] usb 6-1: USB disconnect, device number 50 [ 1222.937049][T17898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.955713][T14816] usb 2-1: Failed to submit usb control message: -71 [ 1222.969085][T14816] usb 2-1: unable to send the bmi data to the device: -71 [ 1222.981652][ T9] usb 2-1: USB disconnect, device number 54 [ 1222.995679][T14816] usb 2-1: unable to get target info from device [ 1223.005783][T15278] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1223.019081][T14816] usb 2-1: could not get target info (-71) [ 1223.027398][ T30] audit: type=1400 audit(2000000090.769:3399): avc: denied { read } for pid=17919 comm="syz.5.2852" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1223.029745][T14816] usb 2-1: could not probe fw (-71) [ 1223.598408][ T30] audit: type=1400 audit(2000000091.302:3400): avc: denied { ioctl } for pid=17919 comm="syz.5.2852" path="socket:[68322]" dev="sockfs" ino=68322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1223.765459][ T9] usb 4-1: USB disconnect, device number 63 [ 1224.100034][ T30] audit: type=1400 audit(2000000091.770:3401): avc: denied { getopt } for pid=17941 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1224.372162][ T30] audit: type=1400 audit(2000000092.032:3402): avc: denied { read write } for pid=17945 comm="syz.1.2861" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1224.426479][ T30] audit: type=1400 audit(2000000092.032:3403): avc: denied { open } for pid=17945 comm="syz.1.2861" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1224.485112][ T30] audit: type=1400 audit(2000000092.078:3404): avc: denied { ioctl } for pid=17945 comm="syz.1.2861" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1224.786871][T14727] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1224.950567][T14727] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1224.966855][T14727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.985142][T14727] usb 6-1: Product: syz [ 1224.994291][T14727] usb 6-1: Manufacturer: syz [ 1225.004405][T14727] usb 6-1: SerialNumber: syz [ 1225.027028][T14727] hub 6-1:24.0: bad descriptor, ignoring hub [ 1225.041481][T14727] hub 6-1:24.0: probe with driver hub failed with error -5 [ 1225.247882][T14727] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1225.311415][T14727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1225.555754][T14727] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1225.683504][T14727] usb 6-1: media controller created [ 1225.762772][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1225.762801][ T30] audit: type=1400 audit(2000000093.322:3406): avc: denied { remount } for pid=17956 comm="syz.0.2864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1226.080519][T14727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.099761][ T30] audit: type=1400 audit(2000000093.332:3407): avc: denied { ioctl } for pid=17956 comm="syz.0.2864" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1226.267246][T14727] DVB: Unable to find symbol dib7000p_attach() [ 1226.276953][T14727] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1226.796641][T14727] rc_core: IR keymap rc-dib0700-rc5 not found [ 1226.853015][T14727] Registered IR keymap rc-empty [ 1226.858275][T14727] dvb-usb: could not initialize remote control. [ 1226.875323][T14727] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1226.970417][ T30] audit: type=1400 audit(2000000094.454:3408): avc: denied { bind } for pid=17976 comm="syz.5.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1227.172754][T14727] usb 6-1: USB disconnect, device number 51 [ 1227.235406][ T30] audit: type=1326 audit(2000000094.464:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17976 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171fb8f749 code=0x7ffc0000 [ 1227.264290][T14727] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1227.304872][ T30] audit: type=1326 audit(2000000094.464:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17976 comm="syz.5.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171fb8f749 code=0x7ffc0000 [ 1227.481592][ T30] audit: type=1400 audit(2000000094.941:3411): avc: denied { map } for pid=17985 comm="syz.1.2872" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1227.577262][T15199] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1227.684008][T14727] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1227.758921][T15199] usb 1-1: Using ep0 maxpacket: 8 [ 1227.780301][T15199] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.823068][T15199] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.866623][T14727] usb 6-1: Using ep0 maxpacket: 8 [ 1227.866623][T15199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.866649][T15199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.894170][T14727] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.938052][T14727] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.956680][T15199] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.972699][T14727] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.992394][T15199] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1228.009663][T14727] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.024217][T15199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.045043][T14727] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.089707][T14727] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1228.129268][T14727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.296516][T15199] usb 1-1: GET_CAPABILITIES returned 7c [ 1228.310716][T15199] usbtmc 1-1:16.0: can't read capabilities [ 1228.376931][T14727] usb 6-1: GET_CAPABILITIES returned 7c [ 1228.396551][T14727] usbtmc 6-1:16.0: can't read capabilities [ 1228.496871][T16519] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1228.896325][T15220] usb 1-1: USB disconnect, device number 85 [ 1229.760635][ T5859] usb 6-1: USB disconnect, device number 52 [ 1229.898588][ T30] audit: type=1400 audit(2000000097.120:3412): avc: denied { read } for pid=18004 comm="syz.1.2876" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1229.927286][ T30] audit: type=1400 audit(2000000097.120:3413): avc: denied { open } for pid=18004 comm="syz.1.2876" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1229.969265][ T30] audit: type=1400 audit(2000000097.260:3414): avc: denied { ioctl } for pid=18004 comm="syz.1.2876" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1230.314062][ T5859] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1230.506290][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 1230.574360][ T5859] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1230.583098][ T5859] usb 4-1: config 0 has no interface number 0 [ 1230.589284][ T5859] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1230.604095][ T5859] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1230.613991][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.622372][ T5859] usb 4-1: Product: syz [ 1230.627873][ T5859] usb 4-1: Manufacturer: syz [ 1230.632754][ T5859] usb 4-1: SerialNumber: syz [ 1230.642281][ T5859] usb 4-1: config 0 descriptor?? [ 1230.649408][T18007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1230.677419][ T5859] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1230.975183][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.028288][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.056546][T14814] usb 4-1: Failed to submit usb control message: -71 [ 1231.056757][T15278] usb 4-1: USB disconnect, device number 64 [ 1231.106863][T14814] usb 4-1: unable to send the bmi data to the device: -71 [ 1231.149888][T14814] usb 4-1: unable to get target info from device [ 1231.175779][T14814] usb 4-1: could not get target info (-71) [ 1231.263083][T14814] usb 4-1: could not probe fw (-71) [ 1231.297414][ T5859] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1231.480886][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 1231.496458][ T5859] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1231.531145][ T5859] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1231.532636][T16377] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1231.548414][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.575435][ T5859] usb 2-1: Product: syz [ 1231.579623][ T5859] usb 2-1: Manufacturer: syz [ 1231.593863][ T5859] usb 2-1: SerialNumber: syz [ 1231.607288][ T5859] usb 2-1: config 0 descriptor?? [ 1231.810760][T16377] usb 6-1: Using ep0 maxpacket: 32 [ 1232.019307][T16377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.048222][T16377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.102035][T16377] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1232.112214][T18044] tmpfs: Bad value for 'mpol' [ 1232.117933][T16377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.130681][T16377] usb 6-1: config 0 descriptor?? [ 1232.159972][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1232.171106][T18047] netlink: 'syz.0.2889': attribute type 5 has an invalid length. [ 1232.181257][T18047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1232.209386][T18047] geneve2: entered promiscuous mode [ 1232.214712][T18047] geneve2: entered allmulticast mode [ 1232.598740][T16377] ft260 0003:0403:6030.003D: unknown main item tag 0x7 [ 1232.806183][T16377] ft260 0003:0403:6030.003D: chip code: 6524 8100 [ 1232.933985][ T5859] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1233.021353][T18033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.044972][T18033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.077284][T18033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.109897][T18033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.136233][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 1233.153399][T16377] ft260 0003:0403:6030.003D: failed to retrieve system status [ 1233.171514][T16377] ft260 0003:0403:6030.003D: probe with driver ft260 failed with error -32 [ 1233.189968][ T5859] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1233.205155][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1233.234227][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1233.279441][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1233.313909][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.372395][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1233.411290][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.600659][T15199] usb 2-1: USB disconnect, device number 55 [ 1233.654724][ T5859] usb 4-1: GET_CAPABILITIES returned 7c [ 1233.673877][ T5859] usbtmc 4-1:16.0: can't read capabilities [ 1234.400342][ T5859] usb 4-1: USB disconnect, device number 65 [ 1235.067991][ T5859] usb 6-1: USB disconnect, device number 53 [ 1236.041638][ T30] audit: type=1400 audit(2000000102.938:3415): avc: denied { read write } for pid=18084 comm="syz.1.2900" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1236.119611][ T30] audit: type=1400 audit(2000000102.938:3416): avc: denied { open } for pid=18084 comm="syz.1.2900" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1236.198876][ T6737] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1236.394937][ T30] audit: type=1400 audit(2000000103.191:3417): avc: denied { ioctl } for pid=18084 comm="syz.1.2900" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1236.587815][ T30] audit: type=1400 audit(2000000103.453:3418): avc: denied { checkpoint_restore } for pid=18093 comm="syz.3.2903" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1236.642814][ T5859] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1236.935653][ T5859] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1236.967696][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.975930][ T5859] usb 2-1: Product: syz [ 1236.980088][ T5859] usb 2-1: Manufacturer: syz [ 1236.986288][ T5859] usb 2-1: SerialNumber: syz [ 1236.992926][ T5859] usb 2-1: config 0 descriptor?? [ 1236.998113][T15199] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1237.027273][ T5859] hso 2-1:0.0: Not our interface [ 1237.037047][ T5859] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1237.079357][T18103] trusted_key: encrypted_key: insufficient parameters specified [ 1237.198901][T15199] usb 6-1: Using ep0 maxpacket: 16 [ 1237.237269][T15199] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1237.281917][T15199] usb 6-1: config 1 has no interface number 0 [ 1237.309651][T15199] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1237.332678][T15199] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1237.379227][T15199] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1237.405932][ T5859] usb 2-1: USB disconnect, device number 56 [ 1237.416726][T15199] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1237.429523][T15199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.439524][T15199] usb 6-1: Product: syz [ 1237.444199][T15199] usb 6-1: Manufacturer: syz [ 1237.449214][T15199] usb 6-1: SerialNumber: syz [ 1237.540331][T18097] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1237.551981][T18097] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1238.150097][T14622] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1238.310615][T14622] usb 4-1: device descriptor read/64, error -71 [ 1238.358235][T18096] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1238.397178][T18096] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1238.634954][T14622] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1238.802326][T14622] usb 4-1: device descriptor read/64, error -71 [ 1238.958271][T14622] usb usb4-port1: attempt power cycle [ 1239.350365][T14622] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1239.404577][T14622] usb 4-1: device descriptor read/8, error -71 [ 1239.678882][T14622] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1239.715382][T14622] usb 4-1: device descriptor read/8, error -71 [ 1239.753144][T18130] syzkaller0: entered promiscuous mode [ 1239.759786][T18130] syzkaller0: entered allmulticast mode [ 1239.847141][T14622] usb usb4-port1: unable to enumerate USB device [ 1240.074460][T14622] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1240.529429][T14622] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1241.044477][T14622] usb 1-1: config 0 has no interface number 0 [ 1241.052228][T14622] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1241.066880][T14622] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1241.076473][T14622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.084851][T14622] usb 1-1: Product: syz [ 1241.089051][T14622] usb 1-1: Manufacturer: syz [ 1241.096425][T15199] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1241.107186][T14622] usb 1-1: SerialNumber: syz [ 1241.113626][T15199] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1241.126104][T14622] usb 1-1: config 0 descriptor?? [ 1241.133556][T18132] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1241.165052][T15199] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:93:2f:9c:f2:ce [ 1241.183769][T14622] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 82:7a:d8:64:b6:c8 [ 1241.200345][T15199] usb 6-1: USB disconnect, device number 54 [ 1241.210228][T15199] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1241.228498][T18147] netlink: 'syz.5.2919': attribute type 4 has an invalid length. [ 1241.236484][T18147] netlink: 'syz.5.2919': attribute type 3 has an invalid length. [ 1241.245200][T18147] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1241.255843][T18146] input: syz0 as /devices/virtual/input/input64 [ 1241.307128][T15199] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1241.330792][T18150] tmpfs: Bad value for 'mpol' [ 1241.344016][T15199] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1241.356077][T18147] Cannot find add_set index 0 as target [ 1241.369043][ T6795] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1241.390341][T15199] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1241.538309][T18132] Bluetooth: MGMT ver 1.23 [ 1241.551389][ T30] audit: type=1400 audit(2000000108.102:3419): avc: denied { write } for pid=18131 comm="syz.0.2914" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1241.581120][T16377] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1241.583471][ T30] audit: type=1400 audit(2000000108.120:3420): avc: denied { bind } for pid=18131 comm="syz.0.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1241.601423][ T6795] usb 4-1: Using ep0 maxpacket: 16 [ 1241.626475][ T6795] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1241.658793][ T6795] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1241.699856][ T6795] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1241.720509][ T6795] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1241.750191][ T6795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1241.798338][T16377] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1241.813389][ T6795] usb 4-1: config 0 has no interface number 0 [ 1241.834293][T16377] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.851118][ T6795] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1241.899807][ T6795] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1241.926325][T16377] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1241.954076][ T6795] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1241.966216][T16377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.004956][T16377] usb 2-1: Product: syz [ 1242.016583][ T6795] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1242.031109][T16377] usb 2-1: Manufacturer: syz [ 1242.035786][T16377] usb 2-1: SerialNumber: syz [ 1242.060239][T16377] rtl8150 2-1:1.0: couldn't find required endpoints [ 1242.066975][ T6795] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1242.101003][T16377] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1242.130039][ T6795] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1242.156930][ T6795] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1242.184775][ T6795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.243811][ T6795] usb 4-1: Product: syz [ 1242.253041][ T6795] usb 4-1: Manufacturer: syz [ 1242.276812][ T6795] usb 4-1: SerialNumber: syz [ 1242.310981][ T6795] usb 4-1: config 0 descriptor?? [ 1242.347361][ T6795] usb 4-1: selecting invalid altsetting 2 [ 1242.376698][T18159] syzkaller0: entered promiscuous mode [ 1242.389783][T18159] syzkaller0: entered allmulticast mode [ 1242.662551][ T30] audit: type=1400 audit(2000000109.009:3421): avc: denied { getopt } for pid=18145 comm="syz.1.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1242.879225][T15199] usb 2-1: USB disconnect, device number 57 [ 1243.049815][T18170] syzkaller0: entered promiscuous mode [ 1243.061446][T18170] syzkaller0: entered allmulticast mode [ 1243.628855][T15199] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1243.663332][T16377] usb 1-1: USB disconnect, device number 86 [ 1243.711416][T16377] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1243.807486][ T6795] get_1284_register timeout [ 1243.871476][ C1] usb 4-1: async_complete: urb error -104 [ 1243.877349][ C1] usb 4-1: async_complete: urb error -104 [ 1243.883130][ C1] usb 4-1: async_complete: urb error -104 [ 1243.888914][ C1] usb 4-1: async_complete: urb error -104 [ 1243.926049][ T6795] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 1244.201879][T15199] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1244.211291][T15199] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1244.271232][T15199] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1244.303871][T15199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.347663][T15199] usb 6-1: config 0 descriptor?? [ 1244.377854][T15199] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1244.391836][ T30] audit: type=1400 audit(2000000110.749:3422): avc: denied { bind } for pid=18175 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1244.622397][T18176] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2928'. [ 1244.668319][ T30] audit: type=1400 audit(2000000110.880:3423): avc: denied { setopt } for pid=18183 comm="syz.7.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1245.364914][ T30] audit: type=1400 audit(2000000111.067:3424): avc: denied { setattr } for pid=18183 comm="syz.7.2930" name="NETLINK" dev="sockfs" ino=70741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1245.559288][ T30] audit: type=1400 audit(2000000111.843:3425): avc: denied { watch watch_reads } for pid=18189 comm="syz.7.2931" path="/proc/361" dev="proc" ino=70233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1245.615878][T15199] usb 4-1: USB disconnect, device number 70 [ 1245.828795][T18195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1246.008305][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.104667][ T30] audit: type=1400 audit(2000000112.171:3426): avc: denied { setopt } for pid=18189 comm="syz.7.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1246.160383][ T30] audit: type=1400 audit(2000000112.180:3427): avc: denied { setopt } for pid=18189 comm="syz.7.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1246.435331][T15199] IPVS: starting estimator thread 0... [ 1246.489974][T15220] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1246.578571][T15199] usb 6-1: USB disconnect, device number 55 [ 1246.681173][T18209] IPVS: using max 49 ests per chain, 117600 per kthread [ 1246.732614][T15220] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.769425][T15220] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1246.812416][T15220] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1246.845000][T15220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.875900][T15220] usb 2-1: config 0 descriptor?? [ 1246.895211][T15220] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1246.909847][T15220] dvb-usb: bulk message failed: -22 (3/0) [ 1246.927322][T15220] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1246.949225][T15220] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1246.963989][T15220] usb 2-1: media controller created [ 1246.974724][T15220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1247.000362][T15220] dvb-usb: bulk message failed: -22 (6/0) [ 1247.018981][T15220] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1247.040481][T15220] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 1247.070355][T15220] dvb-usb: schedule remote query interval to 150 msecs. [ 1247.085479][T15220] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1247.137468][T18201] dibusb: i2c wr: len=8192 is too big! [ 1247.137468][T18201] [ 1247.193143][T15220] usb 2-1: USB disconnect, device number 58 [ 1247.253804][T15220] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1247.515749][ T5820] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1247.708268][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 1247.731206][ T5820] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1247.753612][ T5820] usb 6-1: config 0 has no interface number 0 [ 1247.782366][ T5820] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1247.828272][ T5820] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1247.855380][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.889278][ T5820] usb 6-1: Product: syz [ 1247.900996][ T5820] usb 6-1: Manufacturer: syz [ 1247.924107][ T5820] usb 6-1: SerialNumber: syz [ 1247.936327][ T5820] usb 6-1: config 0 descriptor?? [ 1247.956396][T18220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1247.977931][T18227] syzkaller0: entered promiscuous mode [ 1248.014745][T18227] syzkaller0: entered allmulticast mode [ 1248.203913][T18220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1248.211220][T16377] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1248.381008][T14727] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1248.393477][T16377] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1248.423865][T16377] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1248.444626][T16377] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 1248.461064][T16377] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1248.487399][T16377] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1248.500327][T16377] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1248.508627][T16377] usb 2-1: Product: syz [ 1248.548097][T15199] IPVS: starting estimator thread 0... [ 1248.552059][T16377] usb 2-1: Manufacturer: syz [ 1248.621879][T14727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.649775][T16377] usb 2-1: SerialNumber: syz [ 1248.715461][T14727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.734029][T18246] IPVS: using max 39 ests per chain, 93600 per kthread [ 1248.745113][T14727] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1248.796255][T16377] usb 2-1: config 0 descriptor?? [ 1248.830246][T18229] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1248.848972][T14727] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1248.928246][T16377] usb 2-1: selecting invalid altsetting 0 [ 1248.936902][T14727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.959104][T14727] usb 4-1: config 0 descriptor?? [ 1249.014859][ T5820] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1249.029568][T18250] lo: entered allmulticast mode [ 1249.035027][T18250] lo: left allmulticast mode [ 1249.041353][ T5820] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1249.083412][ T5820] usb 6-1: USB disconnect, device number 56 [ 1249.149877][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.158272][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.166827][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.177555][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.185991][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.195679][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.205623][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.220919][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.229699][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.238038][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.246735][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.255440][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.264481][T18229] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1249.275828][ T5820] usb 2-1: USB disconnect, device number 59 [ 1249.415281][T14727] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1249.552251][T16530] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1249.697608][T15199] usb 4-1: USB disconnect, device number 71 [ 1249.699023][T18262] FAULT_INJECTION: forcing a failure. [ 1249.699023][T18262] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.735483][T18262] CPU: 1 UID: 0 PID: 18262 Comm: syz.5.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1249.735511][T18262] Tainted: [L]=SOFTLOCKUP [ 1249.735518][T18262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.735528][T18262] Call Trace: [ 1249.735534][T18262] [ 1249.735542][T18262] dump_stack_lvl+0x16c/0x1f0 [ 1249.735568][T18262] should_fail_ex+0x512/0x640 [ 1249.735593][T18262] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1249.735623][T18262] should_failslab+0xc2/0x120 [ 1249.735646][T18262] __kmalloc_cache_noprof+0x80/0x800 [ 1249.735669][T18262] ? __lock_acquire+0x436/0x2890 [ 1249.735687][T18262] ? _parse_integer_limit+0x17f/0x1d0 [ 1249.735705][T18262] ? refill_pi_state_cache+0x89/0x250 [ 1249.735735][T18262] ? refill_pi_state_cache+0x89/0x250 [ 1249.735759][T18262] ? __pfx__kstrtoull+0x10/0x10 [ 1249.735775][T18262] refill_pi_state_cache+0x89/0x250 [ 1249.735801][T18262] futex_lock_pi+0x175/0x7c0 [ 1249.735818][T18262] ? find_held_lock+0x2b/0x80 [ 1249.735843][T18262] ? __pfx_futex_lock_pi+0x10/0x10 [ 1249.735868][T18262] ? __lock_acquire+0x436/0x2890 [ 1249.735917][T18262] ? __pfx_futex_wake_mark+0x10/0x10 [ 1249.735939][T18262] ? find_held_lock+0x2b/0x80 [ 1249.735963][T18262] ? ksys_write+0x190/0x250 [ 1249.735988][T18262] do_futex+0x11a/0x350 [ 1249.736009][T18262] ? __pfx_do_futex+0x10/0x10 [ 1249.736035][T18262] __x64_sys_futex+0x1e0/0x4c0 [ 1249.736058][T18262] ? fput+0x70/0xf0 [ 1249.736071][T18262] ? __pfx___x64_sys_futex+0x10/0x10 [ 1249.736093][T18262] ? ksys_write+0x1ac/0x250 [ 1249.736113][T18262] ? __pfx_ksys_write+0x10/0x10 [ 1249.736138][T18262] do_syscall_64+0xcd/0xf80 [ 1249.736158][T18262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.736173][T18262] RIP: 0033:0x7f171fb8f749 [ 1249.736188][T18262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.736204][T18262] RSP: 002b:00007f1720978038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1249.736221][T18262] RAX: ffffffffffffffda RBX: 00007f171fde5fa0 RCX: 00007f171fb8f749 [ 1249.736233][T18262] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 1249.736244][T18262] RBP: 00007f1720978090 R08: 0000000000000000 R09: 00000000fffffffc [ 1249.736254][T18262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.736264][T18262] R13: 00007f171fde6038 R14: 00007f171fde5fa0 R15: 00007ffca8707d78 [ 1249.736288][T18262] [ 1251.330427][T18274] FAULT_INJECTION: forcing a failure. [ 1251.330427][T18274] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.379395][T18274] CPU: 0 UID: 0 PID: 18274 Comm: syz.3.2958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1251.379425][T18274] Tainted: [L]=SOFTLOCKUP [ 1251.379431][T18274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1251.379445][T18274] Call Trace: [ 1251.379452][T18274] [ 1251.379459][T18274] dump_stack_lvl+0x16c/0x1f0 [ 1251.379485][T18274] should_fail_ex+0x512/0x640 [ 1251.379510][T18274] ? fs_reclaim_acquire+0xae/0x150 [ 1251.379532][T18274] should_failslab+0xc2/0x120 [ 1251.379555][T18274] __kmalloc_noprof+0xeb/0x910 [ 1251.379579][T18274] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1251.379609][T18274] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1251.379632][T18274] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1251.379658][T18274] ? tomoyo_profile+0x47/0x60 [ 1251.379686][T18274] tomoyo_path_number_perm+0x245/0x580 [ 1251.379705][T18274] ? tomoyo_path_number_perm+0x237/0x580 [ 1251.379727][T18274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1251.379749][T18274] ? find_held_lock+0x2b/0x80 [ 1251.379796][T18274] ? find_held_lock+0x2b/0x80 [ 1251.379819][T18274] ? hook_file_ioctl_common+0x144/0x410 [ 1251.379850][T18274] ? __fget_files+0x20e/0x3c0 [ 1251.379877][T18274] security_file_ioctl+0x9b/0x240 [ 1251.379901][T18274] __x64_sys_ioctl+0xb7/0x210 [ 1251.379922][T18274] do_syscall_64+0xcd/0xf80 [ 1251.379946][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.379963][T18274] RIP: 0033:0x7fc27398f749 [ 1251.379977][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1251.379997][T18274] RSP: 002b:00007fc2747ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1251.380013][T18274] RAX: ffffffffffffffda RBX: 00007fc273be5fa0 RCX: 00007fc27398f749 [ 1251.380024][T18274] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000006 [ 1251.380034][T18274] RBP: 00007fc2747ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.380044][T18274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.380054][T18274] R13: 00007fc273be6038 R14: 00007fc273be5fa0 R15: 00007fff67846a78 [ 1251.380079][T18274] [ 1251.381416][T18274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1253.613320][T16530] Bluetooth: hci0: command 0x0406 tx timeout [ 1253.907366][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 1254.638637][ T30] audit: type=1400 audit(2000000120.337:3428): avc: denied { name_bind } for pid=18305 comm="syz.3.2967" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1254.675143][T18311] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1254.688668][T18311] overlayfs: failed to set xattr on upper [ 1254.699170][T18311] overlayfs: ...falling back to redirect_dir=nofollow. [ 1254.717175][T18311] overlayfs: ...falling back to index=off. [ 1254.718496][ T30] audit: type=1400 audit(2000000120.374:3429): avc: denied { mounton } for pid=18307 comm="syz.5.2966" path="/file0" dev="ramfs" ino=71297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1254.727629][T18311] overlayfs: ...falling back to uuid=null. [ 1254.766983][T18311] overlayfs: ...falling back to xino=off. [ 1254.797520][ T30] audit: type=1400 audit(2000000120.477:3430): avc: denied { bind } for pid=18313 comm="syz.3.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1255.121333][ T30] audit: type=1400 audit(2000000120.786:3431): avc: denied { write } for pid=18317 comm="syz.5.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1255.607894][ T30] audit: type=1400 audit(2000000121.225:3432): avc: denied { connect } for pid=18323 comm="syz.1.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1255.843227][T15199] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1255.956136][ T30] audit: type=1400 audit(2000000121.571:3433): avc: denied { accept } for pid=18337 comm="syz.0.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1256.014951][T15199] usb 2-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 1256.036173][T15199] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1256.056345][T15199] usb 2-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66 [ 1256.077658][T15199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.085918][T15220] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1256.105612][T15199] usb 2-1: config 0 descriptor?? [ 1256.270907][T16377] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1256.281412][T15220] usb 4-1: Using ep0 maxpacket: 16 [ 1256.294452][T15220] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1256.302542][T15220] usb 4-1: config 0 has no interface number 0 [ 1256.324282][T15220] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1256.336548][ T30] audit: type=1400 audit(2000000121.927:3434): avc: denied { listen } for pid=18344 comm="syz.0.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1256.364988][T18324] tipc: Enabled bearer , priority 0 [ 1256.373200][T18324] syzkaller0: entered promiscuous mode [ 1256.374637][T15220] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1256.379124][T18324] syzkaller0: entered allmulticast mode [ 1256.387828][T15220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.387850][T15220] usb 4-1: Product: syz [ 1256.398341][ T6795] usb 2-1: USB disconnect, device number 60 [ 1256.413175][T18323] tipc: Resetting bearer [ 1256.416201][ T30] audit: type=1400 audit(2000000121.946:3435): avc: denied { accept } for pid=18344 comm="syz.0.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1256.450896][T15220] usb 4-1: Manufacturer: syz [ 1256.451719][T16377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.468020][T18323] tipc: Disabling bearer [ 1256.475507][T16377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.487239][T16377] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1256.488435][T15220] usb 4-1: SerialNumber: syz [ 1256.496622][T16377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.511326][T16377] usb 6-1: config 0 descriptor?? [ 1256.518509][T15220] usb 4-1: config 0 descriptor?? [ 1256.531499][T18334] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1256.585001][T15220] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1256.828493][T18334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.847775][T18334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.869912][ T6795] usb 4-1: USB disconnect, device number 72 [ 1256.875913][T14745] usb 4-1: Failed to submit usb control message: -71 [ 1256.886756][T14745] usb 4-1: unable to send the bmi data to the device: -71 [ 1256.894303][T14745] usb 4-1: unable to get target info from device [ 1256.900745][T14745] usb 4-1: could not get target info (-71) [ 1256.906705][T14745] usb 4-1: could not probe fw (-71) [ 1256.953749][T16377] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 1256.963682][T16377] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1257.167755][T16377] cp2112 0003:10C4:EA90.003F: Part Number: 0x82 Device Version: 0xFE [ 1257.463791][T18358] FAULT_INJECTION: forcing a failure. [ 1257.463791][T18358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.477065][T18358] CPU: 0 UID: 0 PID: 18358 Comm: syz.0.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.477090][T18358] Tainted: [L]=SOFTLOCKUP [ 1257.477096][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1257.477105][T18358] Call Trace: [ 1257.477111][T18358] [ 1257.477117][T18358] dump_stack_lvl+0x16c/0x1f0 [ 1257.477142][T18358] should_fail_ex+0x512/0x640 [ 1257.477169][T18358] _copy_from_user+0x2e/0xd0 [ 1257.477197][T18358] copy_msghdr_from_user+0x98/0x160 [ 1257.477213][T18358] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1257.477232][T18358] ? __schedule+0x114c/0x6150 [ 1257.477256][T18358] ___sys_sendmsg+0xfe/0x1d0 [ 1257.477273][T18358] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.477317][T18358] __sys_sendmsg+0x16d/0x220 [ 1257.477335][T18358] ? __pfx___sys_sendmsg+0x10/0x10 [ 1257.477368][T18358] do_syscall_64+0xcd/0xf80 [ 1257.477391][T18358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.477407][T18358] RIP: 0033:0x7f566e78f749 [ 1257.477420][T18358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.477435][T18358] RSP: 002b:00007f566f588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1257.477451][T18358] RAX: ffffffffffffffda RBX: 00007f566e9e6090 RCX: 00007f566e78f749 [ 1257.477462][T18358] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1257.477472][T18358] RBP: 00007f566f588090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.477481][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.477491][T18358] R13: 00007f566e9e6128 R14: 00007f566e9e6090 R15: 00007ffc28669188 [ 1257.477514][T18358] [ 1257.959755][T15220] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1257.968915][T18363] ip6tnl1: entered promiscuous mode [ 1258.098752][T15220] usb 2-1: device descriptor read/64, error -71 [ 1258.148738][T16377] cp2112 0003:10C4:EA90.003F: error reading lock byte: -71 [ 1258.271470][T16377] usb 6-1: USB disconnect, device number 57 [ 1258.369161][T18372] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1258.379958][T18372] SELinux: failed to load policy [ 1258.382563][T18375] netlink: 'syz.0.2988': attribute type 9 has an invalid length. [ 1258.483606][T15220] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1258.622701][T15220] usb 2-1: device descriptor read/64, error -71 [ 1258.817523][T15220] usb usb2-port1: attempt power cycle [ 1258.975527][T12454] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1259.167861][T12454] usb 1-1: Using ep0 maxpacket: 8 [ 1259.176173][T12454] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1259.193693][T12454] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1259.208325][T15220] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1259.222297][ T34] bond0: (slave bond_slave_0): interface is now down [ 1259.229253][ T34] bond0: (slave bond_slave_1): interface is now down [ 1259.231622][T12454] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1259.244014][T18387] netlink: 'syz.5.2992': attribute type 10 has an invalid length. [ 1259.246544][T15220] usb 2-1: device descriptor read/8, error -71 [ 1259.267808][ T34] bond0: now running without any active interface! [ 1259.273797][T12454] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1259.285108][T12454] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.304313][T12454] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1259.304342][T12454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.304441][T18387] syz_tun: entered promiscuous mode [ 1259.312422][T18387] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1259.329058][ T6735] bond0: (slave syz_tun): interface is now down [ 1259.329285][ T6735] bond0: now running without any active interface! [ 1259.537991][T15220] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1259.538318][T12454] usb 1-1: GET_CAPABILITIES returned 7c [ 1259.538354][T12454] usbtmc 1-1:16.0: can't read capabilities [ 1259.571546][T15220] usb 2-1: device descriptor read/8, error -71 [ 1259.691992][T15220] usb usb2-port1: unable to enumerate USB device [ 1260.030111][T16377] usb 1-1: USB disconnect, device number 87 [ 1260.333430][ T5966] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1260.489648][ T30] audit: type=1400 audit(2000000125.809:3436): avc: denied { write } for pid=18403 comm="syz.5.2997" lport=54672 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1260.517514][T18404] IPVS: length: 241 != 24 [ 1260.534563][ T30] audit: type=1400 audit(2000000125.837:3437): avc: denied { getopt } for pid=18403 comm="syz.5.2997" lport=54672 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1260.572364][ T5966] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1260.593970][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.625526][ T5966] usb 4-1: Product: syz [ 1260.636588][ T5966] usb 4-1: Manufacturer: syz [ 1260.645707][ T30] audit: type=1400 audit(2000000125.958:3438): avc: denied { read } for pid=18405 comm="syz.1.2998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1260.675230][ T5966] usb 4-1: SerialNumber: syz [ 1260.689611][ T5966] usb 4-1: config 0 descriptor?? [ 1260.953228][ T5966] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1261.030760][T18415] netlink: 'syz.3.2994': attribute type 1 has an invalid length. [ 1261.084609][T18415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1261.102899][ T5966] usb 2-1: device descriptor read/64, error -71 [ 1261.129626][T18417] bond1: (slave ip6erspan0): making interface the new active one [ 1261.145397][T18417] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1261.402324][ T5966] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1261.597942][ T5966] usb 2-1: device descriptor read/64, error -71 [ 1261.799794][ T5966] usb usb2-port1: attempt power cycle [ 1262.097297][T14727] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1262.193274][ T5966] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1262.226083][ T5966] usb 2-1: device descriptor read/8, error -71 [ 1262.322867][T14727] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1262.332723][T14727] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.364513][T14727] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1262.381631][T14727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.492600][ T5966] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1262.514546][ T5966] usb 2-1: device descriptor read/8, error -71 [ 1262.616126][T14727] usb 6-1: usb_control_msg returned -32 [ 1262.629625][T14727] usbtmc 6-1:16.0: can't read capabilities [ 1262.642424][ T5966] usb usb2-port1: unable to enumerate USB device [ 1262.993185][T16086] usb 4-1: USB disconnect, device number 73 [ 1263.008118][T18427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.027701][T18427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.957226][ T30] audit: type=1400 audit(2000000128.512:3439): avc: denied { ioctl } for pid=18443 comm="syz.7.3011" path="socket:[71626]" dev="sockfs" ino=71626 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1264.925007][T16086] usb 6-1: USB disconnect, device number 58 [ 1265.378913][T15220] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1265.560791][T15220] usb 1-1: Using ep0 maxpacket: 8 [ 1265.572930][T15220] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1265.589287][T15220] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.608913][T15220] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1265.628664][T15220] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1265.650100][T15220] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.686532][T15220] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1265.721125][T15220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.849508][T16086] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1265.982243][T15220] usb 1-1: GET_CAPABILITIES returned 7c [ 1265.997397][T15220] usbtmc 1-1:16.0: can't read capabilities [ 1266.031722][T16086] usb 6-1: Using ep0 maxpacket: 32 [ 1266.038529][T16086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.062432][T16086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.083984][T16086] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1266.116398][T16086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.130726][T16086] usb 6-1: config 0 descriptor?? [ 1266.447825][T15220] usb 1-1: USB disconnect, device number 88 [ 1266.757212][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.793580][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.816096][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.836583][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.945752][T18494] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1267.009143][T16086] usbhid 6-1:0.0: can't add hid device: -71 [ 1267.015292][T16086] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1267.116402][T16086] usb 6-1: USB disconnect, device number 59 [ 1267.797793][ T30] audit: type=1400 audit(2000000132.637:3440): avc: denied { ioctl } for pid=18509 comm="syz.1.3029" path="socket:[72752]" dev="sockfs" ino=72752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1268.215829][T18516] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1268.336015][T18516] SELinux: failed to load policy [ 1268.500014][T18533] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3033'. [ 1268.834907][ T30] audit: type=1400 audit(2000000133.619:3441): avc: denied { accept } for pid=18509 comm="syz.1.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1269.093203][T18540] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1269.613429][ T30] audit: type=1400 audit(2000000134.340:3442): avc: denied { map } for pid=18543 comm="syz.5.3037" path="/dev/vcsa1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1269.691202][ T6735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1269.893836][T18556] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3040'. [ 1269.948531][T18549] syzkaller0: entered promiscuous mode [ 1269.972993][T18549] syzkaller0: entered allmulticast mode [ 1270.136404][T15220] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1270.296016][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3042'. [ 1270.318191][T15220] usb 4-1: Using ep0 maxpacket: 8 [ 1270.328076][T15220] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1270.367520][T15220] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1270.386424][T18560] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1270.395981][T18560] block (null): Could not allocate knbd recv work queue. [ 1270.423617][T15220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1270.465312][T15220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1270.490523][T18560] nbd: failed to add new device [ 1270.519444][T15220] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.654681][T15220] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1271.083030][T15220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.328249][T15220] usb 4-1: GET_CAPABILITIES returned 7c [ 1271.350505][T15220] usbtmc 4-1:16.0: can't read capabilities [ 1271.575023][T18572] SELinux: failed to load policy [ 1271.825037][T15220] usb 4-1: USB disconnect, device number 74 [ 1272.311731][ T30] audit: type=1400 audit(2000000136.865:3443): avc: denied { setattr } for pid=18578 comm="syz.0.3047" name="SCTP" dev="sockfs" ino=73039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1272.383198][ T30] audit: type=1400 audit(2000000136.921:3444): avc: denied { ioctl } for pid=18578 comm="syz.0.3047" path="socket:[73039]" dev="sockfs" ino=73039 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1272.417263][ T30] audit: type=1400 audit(2000000136.940:3445): avc: denied { ioctl } for pid=18578 comm="syz.0.3047" path="socket:[73044]" dev="sockfs" ino=73044 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1272.487731][ T30] audit: type=1800 audit(2000000137.034:3446): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.3047" name="/" dev="sockfs" ino=73039 res=0 errno=0 [ 1272.545635][T18591] netlink: 'syz.0.3050': attribute type 11 has an invalid length. [ 1272.617804][T18593] netlink: 'syz.0.3050': attribute type 11 has an invalid length. [ 1273.627086][ T5966] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1273.821720][ T5966] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1273.831974][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.847712][ T5966] usb 2-1: Product: syz [ 1273.861244][ T5966] usb 2-1: Manufacturer: syz [ 1273.875368][T16377] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1273.884844][ T5966] usb 2-1: SerialNumber: syz [ 1273.901646][ T5966] hub 2-1:24.0: bad descriptor, ignoring hub [ 1273.907676][ T5966] hub 2-1:24.0: probe with driver hub failed with error -5 [ 1274.053790][T16377] usb 4-1: Using ep0 maxpacket: 32 [ 1274.065790][T16377] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1274.082283][T16377] usb 4-1: config 0 has no interface number 0 [ 1274.117642][T16377] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1274.126999][T16377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.137413][ T5966] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1274.146921][T16377] usb 4-1: Product: syz [ 1274.151095][T16377] usb 4-1: Manufacturer: syz [ 1274.156534][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1274.166212][T16377] usb 4-1: SerialNumber: syz [ 1274.172222][ T5966] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1274.184700][ T5966] usb 2-1: media controller created [ 1274.199937][T16377] usb 4-1: config 0 descriptor?? [ 1274.208480][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.219420][T16377] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1274.232257][T16377] usb 4-1: selecting invalid altsetting 1 [ 1274.237994][T16377] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1274.263381][T16377] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1274.284738][T16377] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1274.300255][ T5966] DVB: Unable to find symbol dib7000p_attach() [ 1274.307226][T16377] usb 4-1: media controller created [ 1274.314353][ T5966] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1274.331107][T16377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.406305][ T5966] rc_core: IR keymap rc-dib0700-rc5 not found [ 1274.414913][ T5966] Registered IR keymap rc-empty [ 1274.420023][ T5966] dvb-usb: could not initialize remote control. [ 1274.441166][ T5966] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1274.502584][ T5966] usb 2-1: USB disconnect, device number 69 [ 1274.613217][ T30] audit: type=1400 audit(2000000138.998:3447): avc: denied { connect } for pid=18602 comm="syz.3.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1275.149110][T18612] SELinux: failed to load policy [ 1275.164620][T18615] tipc: Enabling of bearer rejected, failed to enable media [ 1275.175397][T18615] syzkaller0: entered promiscuous mode [ 1275.181808][T18615] syzkaller0: entered allmulticast mode [ 1275.299739][T18619] tipc: Enabling of bearer rejected, failed to enable media [ 1275.316732][T18619] syzkaller0: entered promiscuous mode [ 1275.338118][T18619] syzkaller0: entered allmulticast mode [ 1275.378287][T18622] fuse: Bad value for 'group_id' [ 1275.399202][T18622] fuse: Bad value for 'group_id' [ 1275.547197][T16377] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1275.554743][T16377] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1276.829486][ T5966] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1276.873346][T16377] usb 4-1: USB disconnect, device number 75 [ 1277.504072][T18634] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1278.144576][T16377] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1278.314717][T16377] usb 4-1: Using ep0 maxpacket: 8 [ 1278.340993][T16377] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1278.389933][T16377] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1278.399710][T16377] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1278.443111][T16377] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1278.464366][T16377] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.498062][T16377] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1278.528841][T16377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.579921][T18645] SELinux: failed to load policy [ 1278.730095][T18647] tipc: Enabling of bearer rejected, failed to enable media [ 1278.766708][T18647] syzkaller0: entered promiscuous mode [ 1278.779697][T16377] usb 4-1: GET_CAPABILITIES returned 7c [ 1278.785053][T18647] syzkaller0: entered allmulticast mode [ 1278.785617][T16377] usbtmc 4-1:16.0: can't read capabilities [ 1279.683285][T16377] usb 4-1: USB disconnect, device number 76 [ 1279.912797][ T30] audit: type=1400 audit(2000000143.984:3448): avc: denied { bind } for pid=18665 comm="syz.5.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1279.979545][T18666] lo speed is unknown, defaulting to 1000 [ 1280.347853][T12454] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1280.582067][T12454] usb 6-1: config 0 has no interfaces? [ 1280.720299][T16377] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1280.757383][T12454] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1280.766753][T12454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.788326][T12454] usb 6-1: Product: syz [ 1280.838261][T12454] usb 6-1: Manufacturer: syz [ 1280.852012][T12454] usb 6-1: SerialNumber: syz [ 1280.911992][T12454] usb 6-1: config 0 descriptor?? [ 1280.985694][T16377] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.103049][T16377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.115647][T16377] usb 1-1: Product: syz [ 1281.125558][T16377] usb 1-1: Manufacturer: syz [ 1281.136620][T16377] usb 1-1: SerialNumber: syz [ 1281.168211][T16377] usb 1-1: config 0 descriptor?? [ 1282.528300][T18678] netlink: 'syz.0.3073': attribute type 21 has an invalid length. [ 1282.569577][T18678] IPv6: NLM_F_CREATE should be specified when creating new route [ 1282.645596][T18666] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.098777][T18710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3082'. [ 1283.136659][ T5966] usb 6-1: USB disconnect, device number 60 [ 1283.246247][T18711] tipc: Enabling of bearer rejected, failed to enable media [ 1283.483983][T18713] syzkaller0: entered promiscuous mode [ 1283.513261][T18713] syzkaller0: entered allmulticast mode [ 1283.926042][T18722] futex_wake_op: syz.5.3085 tries to shift op by -1; fix this program [ 1284.122482][T18726] FAULT_INJECTION: forcing a failure. [ 1284.122482][T18726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1284.145271][T16377] usb 1-1: USB disconnect, device number 89 [ 1284.163554][ T5859] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1284.202070][T18726] CPU: 0 UID: 0 PID: 18726 Comm: syz.5.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.202089][T18726] Tainted: [L]=SOFTLOCKUP [ 1284.202094][T18726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.202101][T18726] Call Trace: [ 1284.202104][T18726] [ 1284.202109][T18726] dump_stack_lvl+0x16c/0x1f0 [ 1284.202127][T18726] should_fail_ex+0x512/0x640 [ 1284.202145][T18726] should_fail_alloc_page+0xe7/0x130 [ 1284.202161][T18726] prepare_alloc_pages+0x401/0x670 [ 1284.202178][T18726] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1284.202190][T18726] ? stack_trace_save+0x8e/0xc0 [ 1284.202202][T18726] ? __pfx_stack_trace_save+0x10/0x10 [ 1284.202214][T18726] ? stack_depot_save_flags+0x29/0x9b0 [ 1284.202232][T18726] ? kasan_save_stack+0x42/0x60 [ 1284.202244][T18726] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1284.202254][T18726] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1284.202265][T18726] ? inode_init_always_gfp+0xced/0x1040 [ 1284.202280][T18726] ? new_inode+0x22/0x1c0 [ 1284.202290][T18726] ? __debugfs_create_file+0x105/0x530 [ 1284.202300][T18726] ? debugfs_create_file_full+0x41/0x60 [ 1284.202309][T18726] ? ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1284.202325][T18726] ? alloc_netdev_mqs+0x314/0x1550 [ 1284.202336][T18726] ? __tun_chr_ioctl+0x193e/0x4880 [ 1284.202350][T18726] ? look_up_lock_class+0x6b/0x130 [ 1284.202368][T18726] ? __lock_acquire+0x436/0x2890 [ 1284.202380][T18726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1284.202393][T18726] ? policy_nodemask+0xea/0x4e0 [ 1284.202408][T18726] alloc_pages_mpol+0x1fb/0x550 [ 1284.202422][T18726] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1284.202438][T18726] ? find_held_lock+0x2b/0x80 [ 1284.202456][T18726] alloc_pages_noprof+0x131/0x390 [ 1284.202476][T18726] get_free_pages_noprof+0x10/0xb0 [ 1284.202489][T18726] inode_doinit_with_dentry+0x8d5/0x12e0 [ 1284.202507][T18726] ? inode_set_ctime_current+0x29a/0x7f0 [ 1284.202523][T18726] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 1284.202538][T18726] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1284.202555][T18726] ? new_inode+0x15a/0x1c0 [ 1284.202567][T18726] selinux_d_instantiate+0x26/0x30 [ 1284.202581][T18726] security_d_instantiate+0x142/0x1a0 [ 1284.202596][T18726] d_make_persistent+0x6a/0x190 [ 1284.202607][T18726] __debugfs_create_file+0x26b/0x530 [ 1284.202620][T18726] debugfs_create_file_full+0x41/0x60 [ 1284.202632][T18726] ? __pfx_tun_setup+0x10/0x10 [ 1284.202644][T18726] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1284.202660][T18726] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1284.202687][T18726] ? avc_has_perm+0x144/0x1f0 [ 1284.202701][T18726] ? alloc_netdev_mqs+0xd7/0x1550 [ 1284.202712][T18726] ? lockdep_init_map_type+0x5c/0x270 [ 1284.202727][T18726] alloc_netdev_mqs+0x314/0x1550 [ 1284.202745][T18726] __tun_chr_ioctl+0x193e/0x4880 [ 1284.202759][T18726] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1284.202773][T18726] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1284.202789][T18726] ? hook_file_ioctl_common+0x144/0x410 [ 1284.202809][T18726] ? selinux_file_ioctl+0x180/0x270 [ 1284.202822][T18726] ? selinux_file_ioctl+0xb4/0x270 [ 1284.202835][T18726] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1284.202851][T18726] __x64_sys_ioctl+0x18e/0x210 [ 1284.202864][T18726] do_syscall_64+0xcd/0xf80 [ 1284.202878][T18726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.202889][T18726] RIP: 0033:0x7f171fb8f749 [ 1284.202898][T18726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.202908][T18726] RSP: 002b:00007f1720978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.202919][T18726] RAX: ffffffffffffffda RBX: 00007f171fde5fa0 RCX: 00007f171fb8f749 [ 1284.202926][T18726] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 1284.202932][T18726] RBP: 00007f1720978090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.202938][T18726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.202944][T18726] R13: 00007f171fde6038 R14: 00007f171fde5fa0 R15: 00007ffca8707d78 [ 1284.202958][T18726] [ 1284.620531][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 1284.680185][ T30] audit: type=1400 audit(2000000148.436:3449): avc: denied { append } for pid=18731 comm="syz.3.3089" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1284.724266][ T30] audit: type=1400 audit(2000000148.474:3450): avc: denied { execute } for pid=18731 comm="syz.3.3089" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1285.167397][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 1285.167414][ T30] audit: type=1400 audit(2000000148.876:3451): avc: denied { mount } for pid=18734 comm="syz.3.3091" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1285.174128][ T5859] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1285.297866][ T5859] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.304871][ T30] audit: type=1400 audit(2000000149.016:3452): avc: denied { setopt } for pid=18734 comm="syz.3.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1285.365586][T18740] input: syz0 as /devices/virtual/input/input67 [ 1285.392470][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1285.396053][T16519] block nbd0: Receive control failed (result -32) [ 1285.416016][T18743] fuse: Bad value for 'group_id' [ 1285.421186][T18743] fuse: Bad value for 'group_id' [ 1285.460879][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1285.735500][ T5859] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.749391][ T5859] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1285.759344][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.328008][ T30] audit: type=1400 audit(2000000149.587:3453): avc: denied { listen } for pid=18744 comm="syz.0.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1286.464078][ T5859] usb 2-1: GET_CAPABILITIES returned 7c [ 1286.534178][ T5859] usbtmc 2-1:16.0: can't read capabilities [ 1286.956467][ T30] audit: type=1400 audit(2000000150.559:3454): avc: denied { getopt } for pid=18760 comm="syz.5.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1287.016871][ T30] audit: type=1400 audit(2000000150.559:3455): avc: denied { write } for pid=18760 comm="syz.5.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1287.076470][ T30] audit: type=1400 audit(2000000150.681:3456): avc: denied { ioctl } for pid=18760 comm="syz.5.3098" path="socket:[72545]" dev="sockfs" ino=72545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1287.081480][T18767] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3098'. [ 1287.218908][T18768] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 1287.415819][ T5859] usb 2-1: USB disconnect, device number 70 [ 1287.679858][T18768] macsec1: entered allmulticast mode [ 1287.713336][ T30] audit: type=1400 audit(2000000151.270:3457): avc: denied { map } for pid=18760 comm="syz.5.3098" path="socket:[72545]" dev="sockfs" ino=72545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1287.740846][T18768] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 1287.897907][ T30] audit: type=1400 audit(2000000151.270:3458): avc: denied { read accept } for pid=18760 comm="syz.5.3098" path="socket:[72545]" dev="sockfs" ino=72545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1287.945715][T18768] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 1287.981023][T18768] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 1288.479567][T18779] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff' [ 1288.563589][T18781] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1288.585498][T18781] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3102'. [ 1288.978249][T18791] vcan0: entered allmulticast mode [ 1289.005937][T18790] vcan0: left allmulticast mode [ 1289.496141][T18796] ptrace attach of "./syz-executor exec"[14275] was attempted by "./syz-executor exec"[18796] [ 1291.252873][T18819] No control pipe specified [ 1291.539269][T14727] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1291.624713][T16377] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1291.727733][T14727] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.737958][T14727] usb 1-1: config 0 has no interface number 0 [ 1291.772344][T14727] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1291.795558][T16377] usb 6-1: Using ep0 maxpacket: 32 [ 1291.807633][T16377] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1291.824957][T14727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.846496][T16377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.856835][T14727] usb 1-1: config 0 descriptor?? [ 1291.882774][T14727] usb 1-1: selecting invalid altsetting 1 [ 1291.889789][T14727] dvb_ttusb_budget: ttusb_init_controller: error [ 1291.900069][T16377] usb 6-1: config 0 descriptor?? [ 1291.935456][T14727] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1292.017333][T14727] DVB: Unable to find symbol cx22700_attach() [ 1292.067267][T14727] DVB: Unable to find symbol tda10046_attach() [ 1292.077188][T14727] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1292.151405][T16377] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1292.173257][T12454] usb 1-1: USB disconnect, device number 90 [ 1292.173728][T16377] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1292.208150][T16377] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1292.219287][T16377] usb 6-1: media controller created [ 1292.233622][T16377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1292.255849][ T5859] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1292.325434][T16377] DVB: Unable to find symbol dib7000p_attach() [ 1292.331875][T16377] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1292.407843][T18845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3120'. [ 1292.426452][T16377] rc_core: IR keymap rc-dib0700-rc5 not found [ 1292.429984][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1292.433357][T16377] Registered IR keymap rc-empty [ 1292.469218][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.471204][T16377] dvb-usb: could not initialize remote control. [ 1292.504975][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1292.522012][T16377] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1292.536894][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.617940][T16377] usb 6-1: USB disconnect, device number 61 [ 1292.664177][T16377] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1292.683546][T14727] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1292.795329][ T5859] usb 4-1: usb_control_msg returned -32 [ 1292.804147][ T5859] usbtmc 4-1:16.0: can't read capabilities [ 1292.854088][T14727] usb 2-1: Using ep0 maxpacket: 8 [ 1292.871540][T14727] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1292.883249][T14727] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1292.903037][T14727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1292.916896][T14727] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1292.956199][T14727] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1292.966192][T14727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.978991][T14727] usb 2-1: Product: syz [ 1292.984611][T14727] usb 2-1: Manufacturer: syz [ 1292.989966][T14727] usb 2-1: SerialNumber: syz [ 1293.020509][T14727] usb 2-1: config 0 descriptor?? [ 1293.055820][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1293.168271][T14727] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input70 [ 1293.339614][T14727] rc_core: IR keymap rc-imon-pad not found [ 1293.345599][T14727] Registered IR keymap rc-empty [ 1293.351759][T14727] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1293.362985][T14727] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1294.360843][T14727] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1294.405550][T14727] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input71 [ 1294.445354][ T30] audit: type=1400 audit(2000000157.566:3459): avc: denied { call } for pid=18858 comm="syz.5.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1294.447450][T18864] binder_alloc: 18858: binder_alloc_buf, no vma [ 1294.495190][T14727] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:71> initialized [ 1294.672794][ T30] audit: type=1400 audit(2000000157.566:3460): avc: denied { transfer } for pid=18858 comm="syz.5.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1294.719618][ T5859] usb 4-1: USB disconnect, device number 77 [ 1296.126108][T14727] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1296.669739][T16086] usb 2-1: USB disconnect, device number 71 [ 1296.873611][T14727] usb 1-1: Using ep0 maxpacket: 8 [ 1296.888651][T14727] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1296.918355][T14727] usb 1-1: config 0 has no interface number 0 [ 1296.926838][T14727] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1297.208225][T14727] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1297.262260][T14727] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1297.324359][T16086] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1297.527812][T16086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1297.535825][T14727] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1297.548971][T16086] usb 2-1: not running at top speed; connect to a high speed hub [ 1297.557575][T16086] usb 2-1: config 2 has an invalid interface number: 254 but max is 0 [ 1297.574289][ T30] audit: type=1400 audit(2000000160.503:3461): avc: denied { ioctl } for pid=18892 comm="syz.5.3130" path="socket:[73666]" dev="sockfs" ino=73666 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1297.574816][T14727] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1297.612661][T14727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.615176][T16086] usb 2-1: config 2 has no interface number 0 [ 1297.626096][T14727] usb 1-1: config 0 descriptor?? [ 1297.663031][T16086] usb 2-1: config 2 interface 254 has no altsetting 0 [ 1297.764791][T16086] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52 [ 1297.830645][ T30] audit: type=1400 audit(2000000160.550:3462): avc: denied { watch_reads } for pid=18894 comm="syz.7.3133" path="/142" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1297.898591][T16086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.037959][T16086] usb 2-1: Product: syz [ 1298.060733][T16086] usb 2-1: Manufacturer: syz [ 1298.083224][T16086] usb 2-1: SerialNumber: syz [ 1298.618559][T16086] ims_pcu 2-1:2.254: Zero length descriptor [ 1298.659102][T16086] ims_pcu 2-1:2.254: probe with driver ims_pcu failed with error -22 [ 1298.773877][T16086] usb 2-1: USB disconnect, device number 72 [ 1298.933410][T18903] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3135'. [ 1299.285801][T14727] usb 1-1: can't set config #0, error -71 [ 1299.299651][T14727] usb 1-1: USB disconnect, device number 91 [ 1299.873937][T18918] fuse: Unknown parameter 'grou00000000000000000000' [ 1300.779924][T14727] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1301.010855][T14727] usb 2-1: Using ep0 maxpacket: 32 [ 1301.017407][T14727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.072633][T14727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.094677][T14727] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1301.105382][T14727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.145173][T14727] usb 2-1: config 0 descriptor?? [ 1301.227145][ T30] audit: type=1400 audit(2000000163.917:3463): avc: denied { block_suspend } for pid=18929 comm="syz.7.3143" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1301.502604][T18938] bridge_slave_0: left allmulticast mode [ 1301.521045][T18938] bridge_slave_0: left promiscuous mode [ 1301.546462][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.581034][T18938] bridge_slave_1: left allmulticast mode [ 1301.587691][T18938] bridge_slave_1: left promiscuous mode [ 1301.596461][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.605318][T18921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.614953][T18921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.626303][T16519] Bluetooth: hci6: unknown advertising packet type: 0x17 [ 1301.626328][T16519] Bluetooth: hci6: Dropping invalid advertising data [ 1301.627181][T18921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.633892][T16519] Bluetooth: hci6: Malformed LE Event: 0x02 [ 1301.641041][T18921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.687381][T18938] bond0: (slave bond_slave_0): Releasing backup interface [ 1301.710532][T18938] bond0: (slave bond_slave_1): Releasing backup interface [ 1301.750290][T18938] team0: Port device team_slave_0 removed [ 1301.769190][T14727] usbhid 2-1:0.0: can't add hid device: -32 [ 1301.794303][T14727] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1301.813573][T18938] team0: Port device team_slave_1 removed [ 1301.819749][T18938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.855949][ T30] audit: type=1326 audit(2000000164.506:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.3.3145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc27398f749 code=0x0 [ 1301.887466][T18938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.910588][T18938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.917961][T18938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.971506][T18938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1302.008765][T14727] usb 2-1: USB disconnect, device number 73 [ 1302.938724][T18950] : entered promiscuous mode [ 1302.986243][T14816] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1303.158155][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1303.411360][ T30] audit: type=1326 audit(2000000165.956:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.462723][ T30] audit: type=1326 audit(2000000166.012:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.513392][ T30] audit: type=1326 audit(2000000166.012:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.564485][ T30] audit: type=1326 audit(2000000166.012:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.642100][ T30] audit: type=1326 audit(2000000166.012:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.693574][ T30] audit: type=1326 audit(2000000166.031:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.809788][ T30] audit: type=1326 audit(2000000166.068:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1303.929467][T16530] Bluetooth: hci4: command 0x1003 tx timeout [ 1303.936958][T16519] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1304.104324][ T30] audit: type=1326 audit(2000000166.068:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1305.525561][T18979] autofs: Bad value for 'fd' [ 1306.244061][T18991] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139632632 (8558530528 ns) > initial count (4400489236 ns). Using initial count to start timer. [ 1308.711203][T19024] Bluetooth: hci0: unsupported parameter 4354 [ 1308.725796][T19024] Bluetooth: hci0: unsupported parameter 32 [ 1308.740307][T19024] Bluetooth: hci0: unsupported parameter 4354 [ 1308.750251][T19024] Bluetooth: hci0: unsupported parameter 32 [ 1308.767723][T19026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56888 sclass=netlink_route_socket pid=19026 comm=syz.0.3165 [ 1309.189194][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1309.189224][ T30] audit: type=1400 audit(2000000171.260:3476): avc: denied { mount } for pid=19025 comm="syz.0.3165" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1310.036711][T19030] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3172'. [ 1310.322382][T16086] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1310.334847][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1311.145545][T16086] usb 1-1: Using ep0 maxpacket: 16 [ 1311.197258][T16086] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1311.290838][T16086] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.317769][T16086] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1311.339081][T16086] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1311.357017][T16086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.372930][T16086] usb 1-1: Product: syz [ 1311.414733][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3179'. [ 1311.424148][T16086] usb 1-1: Manufacturer: syz [ 1311.429670][T16086] usb 1-1: SerialNumber: syz [ 1311.457677][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3179'. [ 1311.511286][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3179'. [ 1311.557319][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3179'. [ 1311.568779][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.964011][T16086] usb 1-1: 0:2 : does not exist [ 1312.008574][T19064] lo speed is unknown, defaulting to 1000 [ 1312.154399][T19068] netlink: 'syz.1.3182': attribute type 12 has an invalid length. [ 1312.781254][ T30] audit: type=1326 audit(2000000174.730:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1312.826782][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1312.829033][ T30] audit: type=1326 audit(2000000174.749:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1312.865768][ T30] audit: type=1326 audit(2000000174.749:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1312.891898][ T30] audit: type=1326 audit(2000000174.749:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1312.916223][ T30] audit: type=1326 audit(2000000174.758:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f566e78df90 code=0x7ffc0000 [ 1312.947776][T19032] netlink: 'syz.0.3173': attribute type 3 has an invalid length. [ 1313.304633][ T30] audit: type=1326 audit(2000000174.768:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f566e790f77 code=0x7ffc0000 [ 1313.384937][ T30] audit: type=1326 audit(2000000174.768:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f566e78f749 code=0x7ffc0000 [ 1313.637972][T19087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19087 comm=syz.7.3187 [ 1313.671893][ T30] audit: type=1326 audit(2000000174.768:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f566e790f77 code=0x7ffc0000 [ 1313.729265][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3189'. [ 1313.895765][ T30] audit: type=1326 audit(2000000174.768:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f566e78e3aa code=0x7ffc0000 [ 1314.447897][T16086] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1314.547913][T16086] usb 1-1: USB disconnect, device number 92 [ 1314.869912][T19115] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1317.110919][T16086] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1317.271922][T16086] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 1317.288013][T16086] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1317.299910][T16086] usb 4-1: can't read configurations, error -22 [ 1317.451216][T19137] hub 1-0:1.0: USB hub found [ 1317.464139][T16086] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1317.505046][T19137] hub 1-0:1.0: 1 port detected [ 1317.667386][T16086] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 1317.697771][T16086] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1317.727876][T16086] usb 4-1: can't read configurations, error -22 [ 1317.757882][T16086] usb usb4-port1: attempt power cycle [ 1317.944804][T15853] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1318.162432][T16086] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1318.219132][T16086] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 1318.259343][T16086] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1318.285040][T16086] usb 4-1: can't read configurations, error -22 [ 1318.447451][T16086] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1318.494917][T16086] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 1318.571841][T16086] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1318.622185][T16086] usb 4-1: can't read configurations, error -22 [ 1318.685483][T16086] usb usb4-port1: unable to enumerate USB device [ 1318.971065][T15853] usb 2-1: Using ep0 maxpacket: 32 [ 1318.983421][T15853] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1318.991625][T15853] usb 2-1: config 0 has no interface number 0 [ 1319.013910][T15853] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1319.037250][T15853] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1319.059866][T15853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.085262][T15853] usb 2-1: Product: syz [ 1319.094368][T15853] usb 2-1: Manufacturer: syz [ 1319.109810][T15853] usb 2-1: SerialNumber: syz [ 1319.127727][T15853] usb 2-1: config 0 descriptor?? [ 1319.142263][ T5920] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1319.166671][T15853] smsc75xx v1.0.0 [ 1319.314718][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.344601][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.366702][ T5920] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1319.386556][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.411395][ T5920] usb 1-1: config 0 descriptor?? [ 1319.591193][T16086] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1319.601115][T15853] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1319.623195][T15853] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1319.633281][T15853] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1319.655581][T15853] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1319.677096][T15853] usb 2-1: USB disconnect, device number 74 [ 1319.765402][T16086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1319.805055][T16086] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1319.826058][T16086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1319.841702][T16086] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1319.854877][T16086] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1319.867720][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.874938][T16086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.883609][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.890895][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.899782][T16086] usb 6-1: config 0 descriptor?? [ 1319.905225][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.912917][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.920463][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.939878][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.947169][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.955291][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.962265][ T5920] ortek 0003:1223:3F07.0040: unknown main item tag 0x0 [ 1319.973829][ T5920] ortek 0003:1223:3F07.0040: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.0-1/input0 [ 1320.063644][T19170] futex_wake_op: syz.7.3212 tries to shift op by 144; fix this program [ 1320.115618][T19151] tmpfs: Bad value for 'mpol' [ 1320.134127][T15853] usb 1-1: USB disconnect, device number 93 [ 1320.147914][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.168188][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.198223][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.219623][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.239636][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.259548][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.299295][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.326361][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.343960][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.369125][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.420481][T16086] hdpvr 6-1:0.0: firmware version 0xfb dated ûZáöźQ‹r$¢ÿñAàá l¸$°°:-5ƒië¯2ÅÕÎ$ŸÓF@ [ 1320.471698][T16086] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1320.527925][T19180] fuse: Unknown parameter 'd' [ 1320.630399][T16086] hdpvr 6-1:0.0: device init failed [ 1320.646548][T16086] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1320.697322][T16086] usb 6-1: USB disconnect, device number 62 [ 1320.796920][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'. [ 1322.268478][T19203] fuse: Invalid rootmode [ 1322.965652][T19213] comedi comedi0: pcl818: I/O port conflict (0x8,16) [ 1323.619507][T16086] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1324.391226][T16086] usb 2-1: device descriptor read/64, error -71 [ 1324.471258][T19233] fuse: Bad value for 'fd' [ 1324.915052][T16086] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1325.090716][T19239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.099841][T16086] usb 2-1: device descriptor read/64, error -71 [ 1325.389951][T16086] usb usb2-port1: attempt power cycle [ 1325.791878][T16086] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1325.813606][T16086] usb 2-1: device descriptor read/8, error -71 [ 1326.036413][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1326.069686][T16086] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1326.106054][T16086] usb 2-1: device descriptor read/8, error -71 [ 1326.219953][T16086] usb usb2-port1: unable to enumerate USB device [ 1327.857103][T19267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1328.018955][T19270] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1328.101518][T19270] SELinux: failed to load policy [ 1328.107270][T19272] tmpfs: Bad value for 'mpol' [ 1328.197109][ T5890] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1328.404310][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 1328.411067][T15853] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1328.430863][ T5890] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 1328.457815][ T5890] usb 6-1: config 0 has no interface number 0 [ 1328.477890][ T5890] usb 6-1: config 0 interface 185 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1328.552319][ T5890] usb 6-1: config 0 interface 185 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1328.558314][T19286] tipc: Started in network mode [ 1328.567781][T19286] tipc: Node identity 32e0d9646561, cluster identity 4711 [ 1328.578614][T19286] tipc: Enabled bearer , priority 0 [ 1328.597938][T19286] syzkaller0: entered promiscuous mode [ 1328.603636][T19286] syzkaller0: entered allmulticast mode [ 1328.635870][ T5919] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1328.657743][ T5890] usb 6-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=e0.f6 [ 1328.745845][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.788825][T15853] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1328.850629][ T5919] usb 1-1: device descriptor read/64, error -71 [ 1328.862854][ T5890] usb 6-1: Product: syz [ 1328.902646][ T5890] usb 6-1: Manufacturer: syz [ 1328.918478][T15853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1328.947056][ T5890] usb 6-1: SerialNumber: syz [ 1328.968122][ T5890] usb 6-1: config 0 descriptor?? [ 1328.981929][T15853] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1329.018033][T19269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1329.048635][T19269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1329.065338][T15853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1329.116573][T15853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1329.148890][T15853] usb 2-1: SerialNumber: syz [ 1329.159860][ T5919] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1329.204029][T19272] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1329.340981][ T5919] usb 1-1: device descriptor read/64, error -71 [ 1329.347316][T19286] tipc: Resetting bearer [ 1329.401475][T19286] tipc: Disabling bearer [ 1329.438332][T15853] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1329.453071][T15853] usb 2-1: USB disconnect, device number 79 [ 1329.480358][ T5919] usb usb1-port1: attempt power cycle [ 1329.492935][T16086] usb 6-1: USB disconnect, device number 63 [ 1329.865007][ T5919] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1329.910161][ T5919] usb 1-1: device descriptor read/8, error -71 [ 1330.196249][ T5919] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1330.229899][ T5919] usb 1-1: device descriptor read/8, error -71 [ 1330.368555][ T5919] usb usb1-port1: unable to enumerate USB device [ 1330.581667][ T5919] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1330.795020][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1330.813902][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.858442][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1330.883602][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.920087][ T5919] usb 2-1: Product: syz [ 1330.936176][ T5919] usb 2-1: Manufacturer: syz [ 1330.954629][ T5919] usb 2-1: SerialNumber: syz [ 1331.026537][ T5919] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1331.049200][ T5919] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1331.282033][ T5919] usb 2-1: USB disconnect, device number 80 [ 1331.419806][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1331.419821][ T30] audit: type=1400 audit(2000000192.157:3501): avc: denied { getopt } for pid=19309 comm="syz.3.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1331.746695][T19318] netlink: 'syz.0.3256': attribute type 16 has an invalid length. [ 1331.754657][T19318] netlink: 'syz.0.3256': attribute type 17 has an invalid length. [ 1331.874879][T19317] netlink: 'syz.0.3256': attribute type 16 has an invalid length. [ 1331.882811][T19317] netlink: 'syz.0.3256': attribute type 17 has an invalid length. [ 1331.932612][T19318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1332.020190][T19317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1332.067330][ T5919] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1332.243200][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1332.308444][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1332.843542][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1332.888525][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1332.890286][ T30] audit: type=1400 audit(2000000193.532:3502): avc: denied { bind } for pid=19320 comm="syz.1.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1332.918513][T19327] siw: device registration error -23 [ 1332.944309][ T5919] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 1332.978825][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.088435][ T5919] usb 4-1: Product: syz [ 1333.106517][ T5919] usb 4-1: Manufacturer: syz [ 1333.111172][ T5919] usb 4-1: SerialNumber: syz [ 1333.136455][ T5919] usb 4-1: config 0 descriptor?? [ 1333.166876][ T5919] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected [ 1333.222751][T19332] input: syz0 as /devices/virtual/input/input72 [ 1333.243194][ T5919] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1333.380894][ T5919] usb 4-1: USB disconnect, device number 82 [ 1333.415383][ T5919] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1333.476175][ T5919] ti_usb_3410_5052 4-1:0.0: device disconnected [ 1336.621451][ T5919] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1336.666658][T19365] kvm: pic: non byte read [ 1336.781641][ T30] audit: type=1326 audit(2000000197.170:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1336.844766][ T30] audit: type=1326 audit(2000000197.199:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1336.848771][ T5919] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1336.907573][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1336.950311][ T30] audit: type=1326 audit(2000000197.199:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1336.971519][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.246077][ T30] audit: type=1326 audit(2000000197.199:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.262739][ T5919] usb 2-1: Product: syz [ 1337.271069][ T30] audit: type=1326 audit(2000000197.199:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.299806][ T30] audit: type=1326 audit(2000000197.199:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.325818][ T30] audit: type=1326 audit(2000000197.199:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.358541][ T30] audit: type=1326 audit(2000000197.199:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.380315][ T5919] usb 2-1: Manufacturer: syz [ 1337.400119][ T5919] usb 2-1: SerialNumber: syz [ 1337.428603][ T30] audit: type=1326 audit(2000000197.199:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.445172][ T5919] hub 2-1:24.0: bad descriptor, ignoring hub [ 1337.475896][ T5919] hub 2-1:24.0: probe with driver hub failed with error -5 [ 1337.494498][ T30] audit: type=1326 audit(2000000197.208:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffe78f749 code=0x7ffc0000 [ 1337.652307][ T5919] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1337.675480][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1337.710876][ T5919] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1337.734021][ T5919] usb 2-1: media controller created [ 1337.767660][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.883256][ T5919] DVB: Unable to find symbol dib7000p_attach() [ 1337.889466][ T5919] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1338.054490][T15853] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1338.064852][ T5919] rc_core: IR keymap rc-dib0700-rc5 not found [ 1338.070952][ T5919] Registered IR keymap rc-empty [ 1338.083614][ T5919] dvb-usb: could not initialize remote control. [ 1338.129377][ T5919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1338.178783][ T5919] usb 2-1: USB disconnect, device number 81 [ 1338.192806][T15853] usb 4-1: device descriptor read/64, error -71 [ 1338.250934][ T5919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1339.128883][T15853] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1339.274246][T15853] usb 4-1: device descriptor read/64, error -71 [ 1339.391447][T15853] usb usb4-port1: attempt power cycle [ 1339.753763][T15853] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1339.786120][T15853] usb 4-1: device descriptor read/8, error -71 [ 1340.074385][T15853] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1340.128261][T15853] usb 4-1: device descriptor read/8, error -71 [ 1340.239121][T19420] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1340.255465][T19420] SELinux: failed to load policy [ 1340.259000][T15853] usb usb4-port1: unable to enumerate USB device [ 1340.427206][ T5919] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1340.495660][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3284'. [ 1340.993869][ T31] INFO: task syz.4.2697:17323 blocked for more than 143 seconds. [ 1341.001748][ T31] Tainted: G L syzkaller #0 [ 1341.016177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1341.034710][ T31] task:syz.4.2697 state:D stack:24184 pid:17323 tgid:17316 ppid:14312 task_flags:0x400140 flags:0x00080002 [ 1341.065680][ T31] Call Trace: [ 1341.074195][ T31] [ 1341.081071][ T31] ? __schedule+0x10b9/0x6150 [ 1341.092444][ T31] __schedule+0x1139/0x6150 [ 1341.104695][ T31] ? __lock_acquire+0x436/0x2890 [ 1341.115191][ T31] ? __pfx___schedule+0x10/0x10 [ 1341.154086][ T31] ? find_held_lock+0x2b/0x80 [ 1341.158804][ T31] ? schedule+0x2d7/0x3a0 [ 1341.163128][ T31] schedule+0xe7/0x3a0 [ 1341.186188][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1341.209125][ T5919] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1341.219021][ T5919] usb 1-1: config 0 has no interface number 0 [ 1341.513896][ T5919] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1341.524587][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.528472][ T31] schedule_timeout+0x257/0x290 [ 1341.533729][ T5919] usb 1-1: Product: syz [ 1341.542254][ T5919] usb 1-1: Manufacturer: syz [ 1341.546899][ T5919] usb 1-1: SerialNumber: syz [ 1341.554220][ T5919] usb 1-1: config 0 descriptor?? [ 1341.558385][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1341.562495][ T5919] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1341.584161][ T31] ? mark_held_locks+0x49/0x80 [ 1341.613318][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1341.622549][ T31] __wait_for_common+0x2fc/0x4e0 [ 1341.636459][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1341.650945][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1341.667262][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 1341.672593][ T31] disable_device+0x16f/0x280 [ 1341.683066][ T31] ? __pfx_disable_device+0x10/0x10 [ 1341.694030][ T31] ? bpf_trace_run2+0x26b/0x5c0 [ 1341.703528][ T31] __ib_unregister_device+0x2b4/0x480 [ 1341.714695][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1341.727505][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 1341.739227][ T31] nldev_dellink+0x21f/0x320 [ 1341.752173][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1341.763365][ T31] ? rcu_is_watching+0x12/0xc0 [ 1341.772964][ T31] ? cap_capable+0x10d/0x3f0 [ 1341.783363][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1341.792693][ T31] ? security_capable+0x7e/0x260 [ 1341.803448][ T31] ? ns_capable+0xd7/0x110 [ 1341.812489][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1341.823284][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1341.832740][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1341.845023][ T31] ? __lock_acquire+0x436/0x2890 [ 1341.855155][ T5919] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1341.856033][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1341.889161][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1341.903159][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1341.903998][ T5919] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1341.921322][ T31] netlink_unicast+0x5aa/0x870 [ 1341.949456][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1341.966621][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1341.984988][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.998635][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1342.004284][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1342.020051][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1342.027726][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 1342.041381][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1342.046068][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1342.063311][ T31] __sys_sendmsg+0x16d/0x220 [ 1342.082936][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1342.094839][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 1342.101427][ T31] ? rcu_is_watching+0x12/0xc0 [ 1342.111858][ T31] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1342.127007][ T31] do_syscall_64+0xcd/0xf80 [ 1342.132219][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.141878][ T31] RIP: 0033:0x7fd118d8f749 [ 1342.155388][ T31] RSP: 002b:00007fd119b9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1342.169737][ T31] RAX: ffffffffffffffda RBX: 00007fd118fe6090 RCX: 00007fd118d8f749 [ 1342.187027][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1342.201766][ T31] RBP: 00007fd118e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1342.209756][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.234433][ T31] R13: 00007fd118fe6128 R14: 00007fd118fe6090 R15: 00007ffe92866ed8 [ 1342.255431][ T31] [ 1342.258520][ T31] [ 1342.258520][ T31] Showing all locks held in the system: [ 1342.363226][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1342.363241][ T30] audit: type=1400 audit(2000000202.399:3520): avc: denied { ioctl } for pid=19417 comm="syz.0.3283" path="socket:[76027]" dev="sockfs" ino=76027 ioctlcmd=0x8926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1342.364249][T16086] usb 1-1: USB disconnect, device number 98 [ 1342.369453][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1342.416098][ T31] 1 lock held by khungtaskd/31: [ 1342.432334][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1342.458403][ T31] 1 lock held by getty/7300: [ 1342.463056][ T31] 4 locks held by kworker/u8:13/14745: [ 1342.473435][T16086] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1342.484771][ T31] #0: ffff88801badc948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1342.511779][ T31] #1: ffffc90004c4fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1342.527706][T16086] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1342.543838][ T31] #2: ffffffff9012b690 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 1342.553631][ T31] #3: ffff888020694700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1342.575039][T16086] quatech2 1-1:0.51: device disconnected [ 1342.585525][ T31] 1 lock held by syz-executor/16027: [ 1342.596790][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1342.617124][ T31] 3 locks held by kworker/0:13/16086: [ 1342.630348][ T31] #0: ffff8880206c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1342.652563][ T31] #1: ffffc9000b617c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1342.667640][ T31] #2: ffff888029daf198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 1342.676572][ T31] 2 locks held by syz.4.2697/17323: [ 1342.681762][ T31] #0: ffffffff9af7abd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 1342.693375][ T31] #1: ffff888020694700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 1342.705555][ T31] 3 locks held by syz.7.3285/19428: [ 1342.711340][ T31] #0: ffff8880373a91c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup.part.0+0xda/0x8c0 [ 1342.721791][ T31] #1: ffff8880373a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x65/0xb0 [ 1342.731454][ T31] #2: ffffffff8e3d4cc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1342.742582][ T31] [ 1342.744970][ T31] ============================================= [ 1342.744970][ T31] [ 1342.754070][ T31] NMI backtrace for cpu 0 [ 1342.754086][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.754109][ T31] Tainted: [L]=SOFTLOCKUP [ 1342.754114][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.754124][ T31] Call Trace: [ 1342.754130][ T31] [ 1342.754137][ T31] dump_stack_lvl+0x116/0x1f0 [ 1342.754168][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1342.754195][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1342.754214][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1342.754242][ T31] sys_info+0x133/0x180 [ 1342.754264][ T31] watchdog+0xe66/0x1180 [ 1342.754288][ T31] ? rcu_is_watching+0x12/0xc0 [ 1342.754304][ T31] ? __pfx_watchdog+0x10/0x10 [ 1342.754321][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1342.754343][ T31] ? __kthread_parkme+0x19e/0x250 [ 1342.754361][ T31] ? __pfx_watchdog+0x10/0x10 [ 1342.754379][ T31] kthread+0x3c5/0x780 [ 1342.754399][ T31] ? __pfx_kthread+0x10/0x10 [ 1342.754418][ T31] ? rcu_is_watching+0x12/0xc0 [ 1342.754434][ T31] ? __pfx_kthread+0x10/0x10 [ 1342.754454][ T31] ret_from_fork+0x983/0xb10 [ 1342.754473][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.754493][ T31] ? __switch_to+0x7af/0x10d0 [ 1342.754514][ T31] ? __pfx_kthread+0x10/0x10 [ 1342.754534][ T31] ret_from_fork_asm+0x1a/0x30 [ 1342.754569][ T31] [ 1342.754576][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1342.896401][ C1] NMI backtrace for cpu 1 [ 1342.896424][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.896442][ C1] Tainted: [L]=SOFTLOCKUP [ 1342.896447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.896455][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1342.896475][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1342.896487][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1342.896498][ C1] RAX: 00000000059e6e61 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 1342.896506][ C1] RDX: 0000000000000000 RSI: ffffffff8dace0b2 RDI: ffffffff8bf2b400 [ 1342.896514][ C1] RBP: ffffed1003b5a498 R08: 0000000000000001 R09: ffffed10170a673d [ 1342.896522][ C1] R10: ffff8880b85339eb R11: ffff88801dad2ff0 R12: 0000000000000001 [ 1342.896530][ C1] R13: ffff88801dad24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 1342.896538][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1342.896551][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1342.896559][ C1] CR2: 00007f171fdb7198 CR3: 0000000044d47000 CR4: 00000000003526f0 [ 1342.896567][ C1] Call Trace: [ 1342.896571][ C1] [ 1342.896576][ C1] default_idle+0x13/0x20 [ 1342.896595][ C1] default_idle_call+0x6c/0xb0 [ 1342.896612][ C1] do_idle+0x38d/0x510 [ 1342.896635][ C1] ? __pfx_do_idle+0x10/0x10 [ 1342.896658][ C1] cpu_startup_entry+0x4f/0x60 [ 1342.896677][ C1] start_secondary+0x21d/0x2d0 [ 1342.896691][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1342.896704][ C1] common_startup_64+0x13e/0x148 [ 1342.896724][ C1] [ 1343.079650][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1343.086534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.097207][ T31] Tainted: [L]=SOFTLOCKUP [ 1343.101523][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1343.111586][ T31] Call Trace: [ 1343.114856][ T31] [ 1343.117781][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1343.122393][ T31] vpanic+0x640/0x6f0 [ 1343.126385][ T31] panic+0xca/0xd0 [ 1343.130103][ T31] ? __pfx_panic+0x10/0x10 [ 1343.134511][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1343.140487][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1343.146645][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1343.152805][ T31] ? watchdog+0xe83/0x1180 [ 1343.157219][ T31] ? watchdog+0xe76/0x1180 [ 1343.161633][ T31] watchdog+0xe94/0x1180 [ 1343.165875][ T31] ? rcu_is_watching+0x12/0xc0 [ 1343.170629][ T31] ? __pfx_watchdog+0x10/0x10 [ 1343.175297][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1343.180504][ T31] ? __kthread_parkme+0x19e/0x250 [ 1343.185526][ T31] ? __pfx_watchdog+0x10/0x10 [ 1343.190205][ T31] kthread+0x3c5/0x780 [ 1343.194264][ T31] ? __pfx_kthread+0x10/0x10 [ 1343.198863][ T31] ? rcu_is_watching+0x12/0xc0 [ 1343.203609][ T31] ? __pfx_kthread+0x10/0x10 [ 1343.208180][ T31] ret_from_fork+0x983/0xb10 [ 1343.212753][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.217846][ T31] ? __switch_to+0x7af/0x10d0 [ 1343.222507][ T31] ? __pfx_kthread+0x10/0x10 [ 1343.227079][ T31] ret_from_fork_asm+0x1a/0x30 [ 1343.231849][ T31] [ 1343.235117][ T31] Kernel Offset: disabled [ 1343.239417][ T31] Rebooting in 86400 seconds..