last executing test programs: 17m48.087768955s ago: executing program 32 (id=776): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0xfffd, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 17m31.577228379s ago: executing program 33 (id=827): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x3ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0x110}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 17m7.7214702s ago: executing program 34 (id=906): socket$netlink(0x10, 0x3, 0x10) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$FUSE(r0, 0x0, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000040)="994b2d75", 0x4}, {&(0x7f00000000c0)="11cdb0a32ddc6aab1224f38998583eab56a8", 0x12}], 0x2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m44.230004479s ago: executing program 6 (id=982): socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 16m44.1960159s ago: executing program 6 (id=983): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x849}, 0x24042014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 16m42.333390054s ago: executing program 6 (id=987): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 16m42.147029375s ago: executing program 6 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x115090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 16m41.499533561s ago: executing program 6 (id=992): syz_open_dev$video(0x0, 0x89f, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x35c, 0x0) unshare(0x8000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x2) semtimedop(0x0, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) 16m40.580174476s ago: executing program 6 (id=995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x20000000) 16m40.045738021s ago: executing program 35 (id=995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x20000000) 3m19.246957183s ago: executing program 8 (id=3135): socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0x770e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f00008b6000/0x4000)=nil, &(0x7f0000a99000/0x4000)=nil, &(0x7f0000506000/0x2000)=nil, &(0x7f0000093000/0x1000)=nil, &(0x7f0000a49000/0x2000)=nil, &(0x7f000010f000/0x1000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000175000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000027a000/0x3000)=nil, &(0x7f0000350000/0x1000)=nil, &(0x7f0000000140)="662bf11fdb937593b6c878df5226e26595a090da8af74db3524c7070225342a8701e3fa0835f940504577d8e77af8b25f56785f4e4628e00c2dd7cf5573d4df125ecac581edcd85cb1a548fcd1978f6637e200b0b12fe94ce3d2f1de333e5c746f648107e9f1", 0x66}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000080)=0x9) 3m17.847114441s ago: executing program 8 (id=3137): socket$kcm(0x11, 0xa, 0x300) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)}, 0x2400c804) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x65, 0x1c7c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffbfffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x0, 0x82, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000004c0)={0x7, 0x0, 0x1, 0xec5d, 0xe, "6a6ee1587e5f8b51"}) read$FUSE(r5, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000480)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x280500) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r8 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%8', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001340)={r7, r7, r8}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000640)={r6, 0x0, r8}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f00000019c0)={&(0x7f0000001940)={'hmac(sha256-neon)\x00'}, &(0x7f0000001980)="25cbc718d00bcb3b46905a8a6e9d7edcdf7e5390491819b90db5eaff5123acfe21b1a3e99d8c5e2711fed8ee47", 0x2d}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400003, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1802e8ff6cffffff0000000000000000850000", @ANYRES16=r7, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3m15.999140005s ago: executing program 8 (id=3145): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x227f) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000780)=""/87, &(0x7f00000000c0)=""/103, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0xffffffff, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 3m15.694051396s ago: executing program 8 (id=3146): socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0x770e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f00008b6000/0x4000)=nil, &(0x7f0000a99000/0x4000)=nil, &(0x7f0000506000/0x2000)=nil, &(0x7f0000093000/0x1000)=nil, &(0x7f0000a49000/0x2000)=nil, &(0x7f000010f000/0x1000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000175000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000027a000/0x3000)=nil, &(0x7f0000350000/0x1000)=nil, &(0x7f0000000140)="662bf11fdb937593b6c878df5226e26595a090da8af74db3524c7070225342a8701e3fa0835f940504577d8e77af8b25f56785f4e4628e00c2dd7cf5573d4df125ecac581edcd85cb1a548fcd1978f6637e200b0b12fe94ce3d2f1de333e5c746f648107e9f1", 0x66}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)=0x9) 3m14.334608879s ago: executing program 8 (id=3148): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="050059e709"], 0x24}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4, 0x10000, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000000580)=""/90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001000000"], 0x0, 0x37}, 0x28) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r8 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005a40000425b97000fbdbdf250000000000000000040009000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m14.183554568s ago: executing program 0 (id=3149): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x275, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r3 = syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff8100", 0x18}], 0x1) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef}, 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x19, 0x8001, 0x0}) r7 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) 3m12.883281604s ago: executing program 0 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000008000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000005087c092e2f424447320dbb9ec33a14e0000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000100)=""/146, 0x92}], 0x2, 0x8, 0x5) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99eb}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r2, 0x2d, 0x0, @void}, 0x10) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) (async) setsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000380)=0x3, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async) write$P9_RGETATTR(r5, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0xc00, {0x1, 0x0, 0x5}, 0x58, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0xfffffffffffffffe, 0x2, 0x8c6, 0x540b, 0x8, 0x9, 0xc, 0xf, 0x1, 0x8, 0x1, 0x6, 0x8}}, 0xa0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0) (async, rerun: 32) write$yama_ptrace_scope(r5, &(0x7f0000000200)='1\x00', 0x2) (rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x2c93a000) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000580)={r8, 0x0, 0x4, 0x958, 0x10001}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000340)) 3m9.273657364s ago: executing program 8 (id=3156): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$kcm(r1, &(0x7f000001b200)={0x0, 0x0, &(0x7f000001b0c0)=[{&(0x7f0000001b80)="51d5cfcaa367e42b244d62147da5b87d90de92482760ea3ab15f392f27945038e3f12e298132ea67fc9288c12d38130176ca1f782263cffa31a2d4ca19c93157b9d8af1afa0580d06affca82951ea88d14cf28d7184142ab61e06d0e704325735efed45872a0d205889bbcc05fb8933129b55cfe4338358225155c5f37722444c01e462cc4d8856f3c28d561cf8613750edee2a2c9d975c8ded6944724a20aee5bee0dfaf33c", 0xa6}, {&(0x7f0000001c80)="c9740679e9e423e9797a2cb139e34f16d098161c28cfd085247518c98f5e924466753329b01efe10b9bbb20d41ebfff636f715493b7aa3a4664dabdd7d3e07602f", 0x41}, {&(0x7f0000001d00)="32d5c8d69e5958768e76", 0xa}, {&(0x7f0000001d40)="a5caf4996b13113f8756df435c1fb21b713f28eb7b810506857e2e1a1d31b551a4f7c963596b79bda5bdf5acf32536d25f930c567e65dc782acf783c89b24b3d4a6875eaac9644d69ba33b1d22eead85a19f2c5b9dff818d893a6f9def57c25d70e588b4a63d03b64f4f2f36093c883a22550bf7da72e348619bdb1cb0f3d58c71", 0x81}, {&(0x7f0000001e00)="f1cbc336801da20a156136a501ff4b4515f0f99ad2fdf8edf90540dcc007ee6e5c421de18270e218a2677e11781f8a2d062fc86be50c95350b5e0bd46536ed1ba3b1fcf7ddcfd71c142fe6387e4b7ffd575f0ac4dd92a5770f7c7019b7bb738bec8d82a37b", 0x65}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)}, {&(0x7f000001b000)}], 0x8, &(0x7f000001b180)=[{0x60, 0x108, 0x0, "2d0bf90474b8cd11b95f4f5e2036fc60455f743789cb089dfafd5f08c11943c043f81e2087158b22c8e01ffe43adfc27fe8246b19b9c47d0df07dbd09540c71548b8a9eb47cab935a6a8ca63"}], 0x60}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="f7", 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x4840) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x81, 0x20203843, 0x0, [0x2], [0x80ffdc], [0x7fffffbf, 0x0, 0x1, 0x77], [0x9]}) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0, &(0x7f0000000400)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 3m9.201994439s ago: executing program 0 (id=3157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0xc9) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r3, 0x0, 0x1000002, 0x37, 0x0, 0x0) 3m2.843382827s ago: executing program 0 (id=3160): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) (fail_nth: 2) 3m1.191917863s ago: executing program 7 (id=3161): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x20000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 3m0.731030613s ago: executing program 0 (id=3162): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_open_procfs(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 3m0.669153813s ago: executing program 7 (id=3163): socket$kcm(0x11, 0xa, 0x300) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)}, 0x2400c804) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x65, 0x1c7c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffbfffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x0, 0x82, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000004c0)={0x7, 0x0, 0x1, 0xec5d, 0xe, "6a6ee1587e5f8b51"}) read$FUSE(r5, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000480)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x280500) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r8 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%8', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001340)={r7, r7, r8}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000640)={r6, 0x0, r8}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f00000019c0)={&(0x7f0000001940)={'hmac(sha256-neon)\x00'}, &(0x7f0000001980)="25cbc718d00bcb3b46905a8a6e9d7edcdf7e5390491819b90db5eaff5123acfe21b1a3e99d8c5e2711fed8ee47", 0x2d}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400003, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1802e8ff6cffffff0000000000000000850000", @ANYRES16=r7, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3m0.089857051s ago: executing program 0 (id=3165): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16], 0x34}}, 0x0) io_submit(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 2m59.694032382s ago: executing program 7 (id=3166): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getsig(0x4202, r6, 0x10000, 0x0) 2m58.201443551s ago: executing program 7 (id=3167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x8, 0x0, r0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x0, @sdr={0x3231564e, 0x3}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a80140001800500010030000000050002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x89) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100) 2m58.048224956s ago: executing program 7 (id=3169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a06000000000000000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) 2m57.803166674s ago: executing program 7 (id=3171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600280012800b00010067656e65766500001800028014000700fe880000000000000000000080000001"], 0x48}}, 0x2000000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r6, 0x2000000) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x1f, 0x0, 0x1000000}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x98000, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r7 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x8000007) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101480, 0x0) 2m53.986987898s ago: executing program 36 (id=3156): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$kcm(r1, &(0x7f000001b200)={0x0, 0x0, &(0x7f000001b0c0)=[{&(0x7f0000001b80)="51d5cfcaa367e42b244d62147da5b87d90de92482760ea3ab15f392f27945038e3f12e298132ea67fc9288c12d38130176ca1f782263cffa31a2d4ca19c93157b9d8af1afa0580d06affca82951ea88d14cf28d7184142ab61e06d0e704325735efed45872a0d205889bbcc05fb8933129b55cfe4338358225155c5f37722444c01e462cc4d8856f3c28d561cf8613750edee2a2c9d975c8ded6944724a20aee5bee0dfaf33c", 0xa6}, {&(0x7f0000001c80)="c9740679e9e423e9797a2cb139e34f16d098161c28cfd085247518c98f5e924466753329b01efe10b9bbb20d41ebfff636f715493b7aa3a4664dabdd7d3e07602f", 0x41}, {&(0x7f0000001d00)="32d5c8d69e5958768e76", 0xa}, {&(0x7f0000001d40)="a5caf4996b13113f8756df435c1fb21b713f28eb7b810506857e2e1a1d31b551a4f7c963596b79bda5bdf5acf32536d25f930c567e65dc782acf783c89b24b3d4a6875eaac9644d69ba33b1d22eead85a19f2c5b9dff818d893a6f9def57c25d70e588b4a63d03b64f4f2f36093c883a22550bf7da72e348619bdb1cb0f3d58c71", 0x81}, {&(0x7f0000001e00)="f1cbc336801da20a156136a501ff4b4515f0f99ad2fdf8edf90540dcc007ee6e5c421de18270e218a2677e11781f8a2d062fc86be50c95350b5e0bd46536ed1ba3b1fcf7ddcfd71c142fe6387e4b7ffd575f0ac4dd92a5770f7c7019b7bb738bec8d82a37b", 0x65}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)}, {&(0x7f000001b000)}], 0x8, &(0x7f000001b180)=[{0x60, 0x108, 0x0, "2d0bf90474b8cd11b95f4f5e2036fc60455f743789cb089dfafd5f08c11943c043f81e2087158b22c8e01ffe43adfc27fe8246b19b9c47d0df07dbd09540c71548b8a9eb47cab935a6a8ca63"}], 0x60}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="f7", 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x4840) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x81, 0x20203843, 0x0, [0x2], [0x80ffdc], [0x7fffffbf, 0x0, 0x1, 0x77], [0x9]}) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0, &(0x7f0000000400)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 2m44.606709841s ago: executing program 37 (id=3165): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16], 0x34}}, 0x0) io_submit(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 2m42.441410174s ago: executing program 38 (id=3171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600280012800b00010067656e65766500001800028014000700fe880000000000000000000080000001"], 0x48}}, 0x2000000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r6, 0x2000000) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x1f, 0x0, 0x1000000}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x98000, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r7 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x8000007) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101480, 0x0) 1m53.08596454s ago: executing program 9 (id=3315): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x40009}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x5608, 0x407) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000000)="3f000000010040", 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r6, &(0x7f0000002480)={0x2020}, 0x2020) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) 1m52.541145191s ago: executing program 9 (id=3316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x58}, 0x20040044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_NAT={0xec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="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", 0x104) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="c3f83e"], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x28) r4 = fsopen(&(0x7f0000000200)='sysfs\x00', 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000140)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) acct(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 1m49.365186863s ago: executing program 9 (id=3326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m49.170792262s ago: executing program 9 (id=3327): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x16) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000300)={0x508c, 0x7fffffffffffffff, 0x0, 0x2}) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@multicast, @random="8a6274485194", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x3, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000058c0)={0x2020}, 0x2020) 1m48.96623998s ago: executing program 9 (id=3328): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072cbd7000fedbdf251f0000005f1a4d16fb761d171504969ede26935b27f2e772df90e29d03cd12b82cc1c8650933a8cd8b4d28ec00479b6212458fcd6de463"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) 1m47.261954209s ago: executing program 9 (id=3334): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) (async) syz_open_dev$mouse(&(0x7f0000000700), 0xc9e, 0x4440) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) close(0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) 1m46.954296019s ago: executing program 39 (id=3334): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) (async) syz_open_dev$mouse(&(0x7f0000000700), 0xc9e, 0x4440) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) close(0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) 21.907065388s ago: executing program 4 (id=3594): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x3862}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1ff, @remote, 0xdbe}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}], 0xa0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x53, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x200c8090) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) 17.358765261s ago: executing program 4 (id=3602): socket(0x28, 0xa, 0x0) r0 = socket(0x28, 0x5, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, 0x0, 0x0, 0x24008094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x101) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14.524331871s ago: executing program 1 (id=3609): file_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x2000, 0x9, 0x1, 0x80000001, 0x4}, 0x18, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mq_open(0x0, 0x800, 0x1be, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = openat(0xffffffffffffff9c, 0x0, 0x441c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000001e580)={0x39a8, 0xd, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3988, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "3a91a7d137d772f747fcb6e3099cb595f3a26d7b77299f792cc9b5f2fd02e7219cfa04dbbed863c3f9b2ebd83740e33cbaa6a818a644329c29687c9d15829e386d328c73e7e4089411df27e849488364e911dde14c414b99bf5cf22bb1012e59beb1f9e859b7e2faada9fe2c6ab9a2e2a4662e676a84fe"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x38a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4130}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}, @NFTA_DATA_VALUE={0x87, 0x1, "cb74721985a6c280be82b4e26361aae179cb9c7ccc089b29b6efdb436b77ecc3fb3063f3ffba6652d225cbc169b00c01eeec8b21af6be89c50addc4177f26cea5ba2da6b3109b4973ff14aef4c18a3c80faa54f317bc3da4d74786c26679db0c1f0ad499f16ee62b61e758500a7b9f37b0c7729704f5f540a4eb7a6d2cbfb8673c4724"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x2454, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}, {0x23bc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x23b0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1194, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "492c0af4868d998ce9c0524e048850192bcfd056edc2bcc4bb33ac14ef03bbdd484caf0aa6ccaadd474fbdad749f2e9030d52d7f08d52a70be0fc0faff88c0ad8635d9075552d9e9"}, @NFTA_DATA_VALUE={0x6a, 0x1, "f38f2a87e1ed977eac7d56a1a1aa8a334758f6e5555f319305fd17a61a51cf48fa9367c6b04f51633de350d3f0aef81fa07119c2c7c6320f7e1a959d0c4765a2333349ca3cf4d8b75b3fe3fa81ce117cd113a5abc9a531acdb17e3d6eadbb411cb2e36558065"}, @NFTA_DATA_VALUE={0xb7, 0x1, "01a41da5983bf91efa620bbcccf71e225d1e8783f228e3098467be10cc4b2c1d3e08ecbd28e981b647f9b7766840bb56fa5b092d07802e03f33ee7af8b32babaa0de02afcbe81199a5a2bc6557e5cb4d8ca1af5e995d3713a8f3ae693675d3c58f35e792fd3b56a8c941d316a914637d78f610f182207ba00e33d51b3ec462ed123d6cf75311f492800ff8d471a73cc7aae9b0ef630318fd219c0386b5cce92a3f38f18232b4f9db93e3dc840acd2dc2893efa"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_DATA={0x1210, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "3681bcf19f5d5056e1adae97da343de3eefd44c3d80611876106323dc38f40653cc99c31faa2927d853d95b1fac8eae3628a733e1e9ef69f699f3e9994b15f4871c981d7a6ef6cd24df5854c1f4c42d759bed45c9e34286c2cfab4d9942f68a5c83a0ee010361e6b570d6ab28ab4e953e7025e59cec9091d58e030497406ec7bf41ded1b67296bea8f2e92ea6f82bcb281c7f37a04d4dc9e16f9f393de0b709878952c1ad82cdf35d2d95dc5ea73406e7c67707dd90981b005346202c1f161fbffe7bc67c1ae0c70ce9e1a3e2b64b17f119aee6dac76dc20d6e68f13b7d466ec85b5940cc5719d97e74f116ff7bcc19a0bc30cbe2913b38bc7883d50206581d23bc8ef92872efc8f3de167d9526bb804ac0250c5d41e60f034b0dbc204b0394a0f0c662b3b4afa255ee8dc4d6b4eb9c71d4b4ac62e69a30754c0db29ef146c77ff736d85e1b7a206a52bb5cb89f41fa8e21182383e12832ccd19435bec5b233cd656f296a0a5025ee9033366b6a0a546140d828482d1590c4bc95d866eb9ba112d4f38ca703824bd30aaec1c96ccb13a02997a502f88f1f5fe69fcb200c645126ac41053fbf49f42667d79a590762edbcb0564a278b92e85c93a6b25c2f0943cf2d53826ed8b2040847a6f6ad06c41b6a68c5209299da45a04e67b0de62bc781b812acb649c95426069128cd92e79cf38b843294d1faff3df74cd27d703ecbcb3b89b56c57423d580d616153de71b2ed72972d458af5b00c128feb92e65d3bb5cc634a172276b011d0052d320ac53e5a2e9e675d93356fb8d9e10e618871ab537d08484c131ab0ec1f104bea8c1f8e83feee739039f6b838031d6acedf911e55299e0222968f6864da7cb11d90293f123a1a19cb9db22d64651b41f6f6f705e20fb13f7d26144fde49e17a584e589c1c9ca18e576866d88e5c6e4481cef5152204847020409b5b3eea84b61bff429d9ed03e21af872361cc3d1b570ed4f91bf716d9e674d99625859233ecf5daab437c3e512e07eff6a87821b5c3e470bce835d493a8ba339588338896d1eb90a2dd4948ab8db18a25676b20fa2507d902801488b89e0ac1b030d2165511bcf1b1ac4733ab068f75d9f3428d6f642245406db1d42fffeef397667eab2cce17f698dc4c50bad1f68dfe9686f85f18e50670b1c310c2ab2cce30cc5608ea51061e490bb6168ac77160c7a578745d606c4f0ef1ca4bed81fbbe3586f5196af7bd3a9795cb587964d640f67f9d14b53fb5cdca744f1ea045541597d88c4c4269ad45afbe232d5a786ee7c91ca39f250a6a6cbad09c900a27700f0b6c7eb9123ace75ee9ef73486bcae32c3c729572de0a277237f73f4c3d5c1558a824acf71820dae7a3f3004995d694633a3704ff0b95aae94bd71cb771b9e4014b3d9230ed259b022f6eacf4ee4d742248a879d8449d1b1d5b5480d59fe89a52a68cee8999fb57d07de4b1aec5b16c4f035f90c827bd3ad85ed9e1d6cd1f31a961a78bcfcda348f86f7133e2738288c98f16a65273ab443be19945ffc701ac0e2249d18212daacda3633d4742577c27cd6dc4a2da68c244e915473fccf61eb49d20b3d9d6b03fde01fc646179330cf16e42988505fddd1a754d622fa291864df00850a241e8497a0c24a2ee85fdd8898450b16d5ba3f11ef0033b2c75a68b8898b53bb3ea0f9689fb3dce8b039a6166c743709c23e11a5f9443c79636a8523d9b28a2a5094b70ccb635b98e0e8e727382eee76611687804b45c4ee14416847d9511ec51ca4908b24bb15a1359ce830518a21047688fa14fc545fa6f3f6f25739d63750b539f49144f7385862f0986ac07f6a5ea40a874af99fff425016134ade976c82df977557ff1012cf04c73c1eac30f3b2d80e04bf077bccba7e6e16cbe15cb79013612ca5720076240edaefb40274d44973e2906ad4db8ebf5e64d192c57a08419b4975973f13048f2465b6cf8a7e0ad233df9f57f4bb3d193606826a357ededc4531cf375f6c29d1c01991e84e47700afbb27eeb92cd0346499b1cb0956db589cbf61c13b2aa619c6f3e706532d102a9913575ea47bc589bc0cfe5997edbd5cdb93e11bb1f5609c41fa0de849bd383c57e4be183b41065359d363a4094b0e3a2acfbead28c3d78aa85ab2fe4d9a38b1125b34b6c382e841643acadd8e72965b228236048fedbd79812ceea1e93bc7baa3ecf6166c93c368495bf05f102f51c6166c4d57eeeeca038d836aa767505ac5b9e65426ea3d62cda30beab3d59e9c334900d9916de6628b1a8cbd2490489d69fe4a08c4a00c6815bc3f765426a8f636de37f4a60e8c99d3d851fd11096251ac06948844df61904db5c43a760212209da9fd71887c765ef1f8cc89f5be95c25214ff085fb28f8b219a8d1c5901a9819022dd65f4921d691876bb15d999761a7e320481a6aa5072e5e6bc129ba473e1ea0049523560a0df2603ef19f0c8d9854261d870fb90ff578f3ed2815ad9510ddb7e3f2e382560e3f4d857aced2959fd7c96cdc1dd9d2bff04ff4fe63a9603d5ec9c21f2beb101517345ff9c31a5d2e2327f039c9699d3b554b02a7f2b3c11dd6cc4ee5cc3cda14c5177d8cd64e1ff17b7d77fe5520b4b3dac47a407e83c793dab8f03ef06729c977627728ef0cc78aee49bd8a12957b3e1d1cb89b131c2f3bea9bc9d941c141492ef44c6c6235b1c4ee07687aba3400d81bed53985aafb7f2b7ea67eea0735e18d809a2886243a114e4e1d8a486200384206d8da39470a8a0fc38827ca5f80b9f2cc0e48895c814fee19ce4be313424a095ffec3d4423039fb3432ca5ef498db99652c42280a4384210428f93fd280137173876b15bc47b5c74a967ecbe6f2529c7490d7f1053e5151bd96a52ee765f594488d8a23b64304b2993bf88ffd084345c5f7e7563968a72e6f00f3809739778b0d804458331e622ebdc6601f4e8bf96ff74ebd13c8e8754d345182079805d3f4a625da7cd7b0f03a4187962c0d15e3d5e606faa25582752a4f07c4b9b2895addfbb1f14f1d6263d3d066d1dd3016142c63fdb92b9a6c89ae6195b3b400afd77ddb4b3525d752ace2644dc4de9a910b110f413fe1ecfb5544e565faa5d44598ae318b84dc5cc2d745984ef71bb64963c45d9296ffc98fa8f30d0e91eb6a6ce9cfae0b859caf047786cc50c2f2f2a0db1de1b0fbd5dda581e602c9ba0f3d5529294e2966b92b1d6322cb019a82bb48df056a401060d4520907dc499edd7e767d743601ac31f3afc0e1739afc9ac005cf0e0b04a364bc2c5e83e59ebd9e394d7a292b810982fbad49912eb85228e137199d8efc9934210da3a49095365baf4de389adc9cf17ec19f650cc747fbb2cf8e8c8cdfdd2c8a631ae6dd00f4873c93815e7d535ec3439585861c671f9836bb3dbcd23fb4d22f5f0449652d402677704cb68dd8d7ce468ab49f6724ff17781a2fc29f4b4199a06d66a63bae43217e9e6cfb859b449281e663901d4e854011771dc0ed6a31a75a9d471bbe071f02072692b348fe643c7c1bd4e51b0aaa2adff7efed91474d2a8f7cb5258fd53fc6632ff219af21b36a6d15dd0008d81b3c2441fe3a9c377b08bf43d6bb13f554afc83f48be6dd4579576b5f61cd900413fe5e376849837f8a09b2439dd9afbf7e0fdc0b0e2e0dcfd8e694f62892b5affcb13715e6df566eaa14c580ce4eb928f825a9f4a98c24f912567bd6d5ee3b0e611d4d02ea571985bbd5563e6bb3e772a36720228d31565820880cabe347a9c89e467b0d7ddadebc8c269de187c761b9f290bce23ee84e67538141571e025cb3f350f37173c2b79aa044cdddf97e47f5578a7c5597a24ecf31f14bf711abea50103f2dcdbcb5be53569eab9390890898a2068a724ed8bfc7f338d70da84122b24e203687968e324811de334b6cafe6645fa35dd7fbda244a99a9fba4aeb7a6c23196f73e1030db32fd23a226a2b66587268807ddce153548530c4ecb8203ff37710045e6b8e878734443e713526edb22f07d6b47071755081c390d2aca6a2a72b170afb728f0df09a5b68b16dc2a5c70be3a07603e3509bc27d53128a29a5053abb46e89f914cd345ae7a885deb237daebdf94cb762058c6b6af84171fde4ee30c636cef319935fabcddb56a2ec8e56667d893f637a95ce83f87d3e673b680b4e2d3c8d680cce5e79b758ee5fcaf97930ea39ed6fa218c87b28d5dc32ec5f3c6b08482651e64a02197d722f965e1bb33c4da7842b491ebab8790f704f557fb011b0eb9663f72d30ceae8281ca4fb16251ac62402f0731bae2d7a897d41dfffd8dbe0455a00f08e3ee5a07f6508699bd8d91b7dc6f669e4245b1b89db27769eb9883df9e3eba4b84fbdfde1bf876374f057e46a701b47cfbc3a0600356403197ed0f0fc69201b8b27b114056083c7bd26d8e470d1511b0c16af77145c166aac10320359eb0902acb9471b129ddae2f09a502ea8f96fd759468cc54609526fb64bd84a17fc15faa0e2cf69f222f0cf9ecdf2e86f7b1e3e690ee051d3defde378e2189eed7ad58d1707fc0407a2342dde79d98bc87263a5c6f83d174c64d337bdf9b15ca5882e13a6485c09cbc8771537962ed0a60f9674bdc1a9a38206410faa597940e8f51d934e77d224727ecb5610ed92d8f0f84e8dd9278e2b3f471e00ae09750e3798c5a80dbcf3fa5883fb88d456625836dcfc4fc0c02f30989111f2baac1806e8397cb5bc3bc306ae1a64300f41bf13af48bcab6cab88950a8901a915c3108e6c00fe4d90e19a6e516de54b6778212dc7f844456625d0adb8b4182989efbcd02280012d4e0939519db6127cf1d29839e027003f4affc696e794a1da19629b951561e2e84a9e8a73d999782e91a6c944911e146a02bc1cdd93bc8c1a424f3ea2a0976bfe470ec56b68b0095953361c20ff2cafdf4a3fdc2e2daa3d84818a2d4714c28630da20dfe59c2a160b11a9d945281ca986da5df7e120eba7c5f944fa9abfd7a9cc6f7a9e5f0eb0cf267511310d36209f7a7b8effa50be5344c0bf3c15aae71c53475759c1c113bf7b694bdac13e431b9522fc04a51be8748ee4f84dae5bd54419d705797522afe72cc267e8691499dcb676144ccba0aa4715f312a4f7979efba8fb85693b1b1ae8417ce2f8a35915d731afcbd5b24eb934ce42443596688c8e9d3834bc65013c01db302630b399719eae652a924c32dc52cb1357a10921dcbccb98f08fda7556ef715ca7046050630a8b1a485a58aa93e9c91ac6196c5aeb23aa092b4d0213e17844a411b33ae73f2b37714f785d9c87f1ab5698639760b082e5b98925befcb088c2d1fd1b8d5418499e07766e625eeef9acc56eaf3f0423d164969a9c6ea0311ba4593eb2c6916de1612da4fcc723d0b9447088eb01f870cadb78178930748401213c5e57f8acc11168b2cb28ce881e472b4af451a529b1245609b8cc9151a369c80857d5481f454c9fe5e1afb1a586b0d1d26a0be6e87663119de33693e38d6fa824dc3034072c87d94b64682d3f9cfaf3221443ec1ce570581d7f0b8b3a7e61b203b869b8f428517a993b37c5fe125b3d75f1a6af47313cea72215b0d3dd91f53bf2f58ebfdbd9773864179d073156180dd9dbffb305057e39923ff3f6f88e890409cd8f5dbef2f7a1c5626189d556400e39fdec562f751f01804d48238fdafb0c8702bf199d0c48795b5f2842846ce2a58fba66ce36236ce47f01d9bfbf661d2c721f2e850f56a7190685875aa78f2cfd95d18ecd0181dc5d219fbb34234665e87d25aeaf4b37ebf8f6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x12, 0x1, "1eb2b137fcf2095363940ef08544"}, @NFTA_DATA_VALUE={0x8b, 0x1, "a935412141763af0d56ba4156b59e4842288012b05a75d54f1da56e6acb3913e7b30ebeecfba774ef12766416f07af96692f8ff8c94eb6b56ee63d63119010781f7af6ed63de8a4472ad4863341725a7c67bec8cb37549f30a42714537836f195b71aba51076e9bb8b31869795dde569c5d78158067db17c82ac16d6bf6dfedfd41069248c83fe"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "92848a524d71c93db3e46456c86e18e634b95693318618ae63466d5279cd7f858e02c9847d71fbbc088e81f1e92ef26fb0fb88456fb715606f9b11df7735023cdd61253be521b53681e8ebf498ebc3c8c329a5953ce47881a535890a21f43537e744c10a375cacd7715be9f99760adae8380a2fd465e126a7117"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x42, 0x1, "c07d875b78ee08dff67d27145770b75da22aee1f5f37d4c9895b881689c4727c1967505c1b8411876002961d67a4cf2fecbc9d2f607d1cb23a136b041eae"}]}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xd5, 0x6, 0x1, 0x0, "439fcb24ff9284cab3ba3053f0ed35dad6669cd78924279e948851df250128b99d6010bfebb0cfccd19b437a93fd7a48edc0c08fc36cee35d4bfcbfc96a77bc91fdb1888e53e05b870353dbe4f7b680503bd154c8f39cf57a5d82ff4381fa86d36db010ef0fecee7fc7d1c071186a5eda070280ae359fa6fff373cca5075b478474d091b3319cd203473d9a5dab2a2aad85e839e1767914a3b18ac26dbfc9b1108c3a03dd7fbbec55285341048ea8cd72150098fcbe8126eac6c5616ef3df9075cbf961c0706218c3122b76d16ed43b0c6"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7d54}, @NFTA_SET_ELEM_KEY={0x1278, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd6, 0x1, "be279ae391274bead5bf44da6be3ca52c9a0755b5c6d181f5a74c358f18df83add56cb217aa8cd972f02e7c0b68e8346d9141e151910ce131bdcb7886bf5bb31f7b00db82a513b46833ac3c0e5ba4a3eee342fbd078d79a23c2ab0b38abe862f65c193cc9c441d43e5f1a03a7d1217192f602ffe9a6a2e1f6ff6665d312f000742edc61bb55efcbdeebed488b9d9801041541966e7a7e2c714feaf3aed8859c467d742b7d8b9ebb4731b03ecda003834dc5748b30bc8e6f117e420087d5ea98566dd85d0059acb8dba35b0b6c0af4da9c35e"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "6d9757960fcc5915a02077a2bcc9160b40aebc51e77874b88339afe10a7b4be95796d901141876fb0a9f3d04c34b7d64c659ed940b129ecfeed8447a33f80f62b5ffb624018025d57a61af758f7161c703a732c007d5d39690e7cdd8ef1cf23302afa05a64f2ce4cdfc8715838e3fb04126fb749841b5ae6b97dd813c47f905f3f6129ef5e28ea59b191043a5ec48049569d094704f80e340c4a3b4d8ea4e0fa267320b00d9cec33c44963cc8dbe1f058838b786517dbae8654603beb33e57f1cf87b0acbccd76165f5a83"}, @NFTA_DATA_VALUE={0x38, 0x1, "389c2189e7f79bd25324d352ff0b3be99c1522a10d0e9da80498225d17c38b4f6f5d82ba72ed2bef087be3e038fec4452e15becf"}]}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "4773f9c1f999dd891875a5974a61e363fa9c67faa727a6bc4e23670302aaabf1a645c5aff95b88db"}]}]}]}, 0x39a8}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0x228, 0x228, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'bridge_slave_1\x00', 'veth1\x00', {}, {}, 0xff, 0x2, 0x65}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x6}}, @common=@ah={{0x30}, {[0xa, 0xc], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x6, 0x2, 0xc, 0x4], 0x0, 0x4}, {0x2, [0x4, 0x2, 0x1, 0x0, 0x1], 0x0, 0x4}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xe6f9, 0x9]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0xf1a, 0x4, [0x23, 0x1e, 0x16, 0x31, 0x27, 0x0, 0x14, 0x1f, 0x2a, 0x19, 0x38, 0x1f, 0x3f, 0x26, 0x5, 0x12], 0x1, 0x2, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x9, 0x6, [0x16, 0x5, 0x27, 0x7, 0x4, 0x8, 0x1e, 0x2d, 0x23, 0x29, 0x29, 0x1e, 0x14, 0x24, 0x5, 0x1], 0x0, 0x0, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$kcm(r0, 0x0, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 13.386741838s ago: executing program 4 (id=3613): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r4, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6, 0x7f}, {}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {0x0, 0x9}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @connect={{0x7, 0x5f}, {0x2, 0x2}}}, {0x2, 0x0, 0x1, 0x0, @tick=0x8, {0x4, 0x1}, {0x7, 0x9}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000ff0f00004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) r8 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x5, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x6f26, 0xb528]}}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2345, @mcast1, 0x2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r1}}, 0x30) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fcntl$setpipe(r11, 0x407, 0xffffffff) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r12, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x4888, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYRES16=r12, @ANYRES16, @ANYBLOB="5a76fe0cb42c1ac392a7a6e6dee06fa04b0c322ab3f740152f3ce2eb6d1df64de8000455", @ANYBLOB="61c5e62ae73c2b8c28b67f9c94df73aaa4a549a2617a53d4b1ad96bf8d6ec2338a35dc9693a454eebb926dfaf560ab9d6bd88603bfab3a4c85a9d642d794ff375339c20567783c6355e2cca87dfe5a32765e45e6123d1790545b913a3016c39beb7cd61a11b2", @ANYRES32=r12], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 11.493980515s ago: executing program 5 (id=3618): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xfffffffe, 0x0, r1}) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = syz_io_uring_setup(0x47ab, &(0x7f0000000380)={0x0, 0xa287, 0x40, 0x3, 0x13b}, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000140)={0x39, 0x1, 0x0, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {0x4e1f, 0x4e20, 0x8}}}}}}, 0x0) 11.347659748s ago: executing program 1 (id=3619): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfdc000000010902b901010000003f0904"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffdf9, 0x0}, 0x0) r1 = io_uring_setup(0x57f1, &(0x7f0000000040)={0x0, 0xc1a2, 0x1c881, 0xffffffff, 0x16a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r1, 0x1268, 0x11000002, 0x27, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x1a2100) poll(&(0x7f00000000c0)=[{r2, 0x9746}], 0x1, 0x3) close(r2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000100)) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x62b1, [{0x6, 0x0, 0x9}, {0xb, 0x4, 0xfffffffe}, {0xc, 0x3, 0xb5}, {0x2, 0x5, 0x2}, {0xe, 0x3, 0x7f}, {0x2, 0x2}]}]}}, 0x0, 0x6e, 0x0, 0x1, 0x8001}, 0x28) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x36, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x12, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xdc, 0x41, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x2, 0x98, 0xff, 0xf}, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="850f052000"], 0x4, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x812}}, {0x43, &(0x7f0000000300)=@string={0x43, 0x3, "6078eea0852bd93efa78ed072cb4e3d59d44de6451207a6fc5e06cda2ffbc255f2abe2c673fb2cd534e8700513862b6b66a48579350352d08af5a46c04b214f284"}}, {0x22, &(0x7f0000000240)=@string={0x22, 0x3, "2812a6bfdb60557118aa57eac2ab3ceaa0a92fa14f828ba6b253688e68cf7eea"}}, {0x72, &(0x7f0000000380)=@string={0x72, 0x3, "5e0c4d5c2331da2e8a4e0685b52edd759a732886c46a9f4cfdda610dfde274a38f1018717846680e881b71e5843564595b51c192b2f9b8469558c55eed975be1a1bcfb295f13d221dcf1a95c9034764ee63cd2018e0b7011dd4cca24da4f487e4200"/112}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) 11.28521288s ago: executing program 3 (id=3620): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f4000000080007"], 0x58}}, 0x800) 10.979011428s ago: executing program 3 (id=3621): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xffff, 0x8000, 0x4, 0x7, 0x3, 0xf, 0xb, 0x200, 0x0, 0xaff5, 0xfffe, 0x3}}, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="d2", 0x1}], 0x1}}], 0x1, 0x40) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34000}], 0x1000000000000364) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x4}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 10.202045432s ago: executing program 4 (id=3623): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x1) r2 = syz_open_dev$loop(0x0, 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000400)) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x2, 0x1}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r9, r9, 0x2f}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @loopback, 0x4}, 0x1c) 9.214915765s ago: executing program 5 (id=3624): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, 0x0) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)={[{@grpquota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.125093219s ago: executing program 3 (id=3625): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df00", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.102481506s ago: executing program 5 (id=3626): sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0xd, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0xff, 0xfffffffa, 0x1ff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='virtiofs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14df2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0xe3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000100)) r3 = accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0xfffffffffffffe76) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000001c0)=0x7, 0x4) socket$unix(0x1, 0x1, 0x0) 8.095800525s ago: executing program 1 (id=3627): sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0xd, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0xff, 0xfffffffa, 0x1ff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='virtiofs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14df2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0xe3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000100)) r3 = accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0xfffffffffffffe76) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000001c0)=0x7, 0x4) socket$unix(0x1, 0x1, 0x0) 8.045714136s ago: executing program 4 (id=3628): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4000001, 0x40040) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) move_pages(0x0, 0x5f, &(0x7f0000000280), 0x0, &(0x7f0000000280), 0x4) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r2 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xb) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x102) lseek(r4, 0x101, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x9) getdents(r4, 0x0, 0x58) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x260680) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x6}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8dfd40fa7378d821, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1801440}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000206010100000000000000000a00000405000180070000000000020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000300)=ANY=[]) read$msr(r7, &(0x7f0000000340)=""/226, 0xe2) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000640)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 7.49691747s ago: executing program 1 (id=3629): r0 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x6, 0x20, 0xfffff801}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r3, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0f1cdb39454b7782165a2d29acbb6ff14201d769be88e74b041469b792c91ff9ca0d216f79462e55219537e680320df3770429e966b17a192f01bc2e0744", 0x3e}, {&(0x7f00000002c0)="30658e33f6fea85c709fc160f18ef7b0d1098fc3ab11dd9cc31dc0bbbe4eaf1c3b2e68c4954d1f931b87b8e48890040f890bce9e8bb1477f6fee1ba5c60fb4b080a038fe6fde7a864dd0284bdb9c3fa5203c18403c1c952e02422c94dee9278fc3d744b6bcf46b48ba8d77a6fd8205dc852775e2027f6d903203107fdd0ca8654e445461b7e6dcc2654166c714b53311398163ffc7924007c60497c2feb8c817872f0e4661cf8f97", 0xa8}, {&(0x7f0000000380)="f107a47cf3c1afd6f8904e", 0xb}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@loopback, 0xffff5536}, {@broadcast, 0xa}, {@local, 0x9af}]}, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0x1, [{@empty, 0x8000}, {@private=0xa010100, 0x1}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @rr={0x7, 0x23, 0xb5, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x128}, 0x4000014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x800) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 6.496314749s ago: executing program 5 (id=3631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x1, @meta={0x44564956, 0x35b09d18, 0x2093, 0x8761, 0x4d534547}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x7f, 0x1}, 0x1001) unshare(0x40020000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x923e, "ea3dd0", 0x80, 0x9}) 5.273077258s ago: executing program 1 (id=3632): socket(0x28, 0xa, 0x0) r0 = socket(0x28, 0x5, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, 0x0, 0x0, 0x24008094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x101) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x20000000000, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 4.778923727s ago: executing program 5 (id=3633): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r4, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6, 0x7f}, {}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {0x0, 0x9}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @connect={{0x7, 0x5f}, {0x2, 0x2}}}, {0x2, 0x0, 0x1, 0x0, @tick=0x8, {0x4, 0x1}, {0x7, 0x9}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000ff0f00004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) r8 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x5, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x6f26, 0xb528]}}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r1}}, 0x30) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fcntl$setpipe(r11, 0x407, 0xffffffff) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r12, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x4888, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYRES16=r12, @ANYRES16, @ANYBLOB="5a76fe0cb42c1ac392a7a6e6dee06fa04b0c322ab3f740152f3ce2eb6d1df64de8000455", @ANYBLOB="61c5e62ae73c2b8c28b67f9c94df73aaa4a549a2617a53d4b1ad96bf8d6ec2338a35dc9693a454eebb926dfaf560ab9d6bd88603bfab3a4c85a9d642d794ff375339c20567783c6355e2cca87dfe5a32765e45e6123d1790545b913a3016c39beb7cd61a11b2", @ANYRES32=r12], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 3.959727696s ago: executing program 3 (id=3634): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x22201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@bloom_filter={0x1e, 0x8, 0x1000, 0xadd0, 0x6000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) io_setup(0x7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$SHM_STAT(r7, 0xd, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.913720986s ago: executing program 4 (id=3635): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f0000000840)={0x30, 0x30, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80002) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 2.553016962s ago: executing program 3 (id=3637): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x3cc00, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e27, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$COMEDI_LOCK(r0, 0x6405) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8", 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x80d5) accept$alg(r5, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, 0x1c) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0xa}) 2.356773599s ago: executing program 2 (id=3638): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x101200, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x98d00, 0x0) memfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 2.153429794s ago: executing program 2 (id=3639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x40, {{@in=@remote, @in=@multicast1, 0x4e20, 0x7, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x67}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "aae76ca46f30ef8dca174278c457734ba05022c9"}}]}, 0x150}}, 0x4000804) 2.012102471s ago: executing program 1 (id=3640): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xfffffffffffffed3) request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18K\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00', 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x5000) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) accept$inet(r0, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000440)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3ba, 0x5, 0x1) 1.446576624s ago: executing program 2 (id=3641): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x3862}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1ff, @remote, 0xdbe}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}], 0xa0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000340)={0x0, 0x53, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x200c8090) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) 1.179745901s ago: executing program 2 (id=3642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x58}, 0x20040044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_NAT={0xec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="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", 0x104) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="c3f83e"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x28) r4 = fsopen(&(0x7f0000000200)='sysfs\x00', 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000140)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) acct(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 1.034209264s ago: executing program 2 (id=3643): bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000080)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(r0, 0x0, 0x0) 908.710261ms ago: executing program 3 (id=3644): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x14) syz_open_pts(0xffffffffffffffff, 0x729000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000002100)={{&(0x7f0000002080)=""/43, 0x2b}, &(0x7f00000020c0), 0x1}, 0x20) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x401, 0x3, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r3, 0x0) 904.35862ms ago: executing program 2 (id=3645): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001900080017"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x6) connect$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @remote, 0x8}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x21008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@fsname={'fsname', 0x3d, 'lowerdir'}}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '$'}}], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getdents64(r6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 0s ago: executing program 5 (id=3646): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = timerfd_create(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) kernel console output (not intermixed with test programs): cdDevice=2d.ea [ 1205.654186][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.662335][ T5806] usb 4-1: Product: syz [ 1205.689036][ T5806] usb 4-1: Manufacturer: syz [ 1205.701404][ T5806] usb 4-1: SerialNumber: syz [ 1205.706378][ T5752] usb 6-1: Using ep0 maxpacket: 8 [ 1205.723300][ T5752] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1205.737277][ T5806] usb 4-1: config 0 descriptor?? [ 1205.747813][ T5752] usb 6-1: config 0 has no interface number 0 [ 1205.762153][ T5752] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1205.779885][ T5752] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1205.803077][ T5752] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1205.824678][ T5752] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1205.853412][ T5752] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1205.872997][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.910806][ T5752] usb 6-1: config 0 descriptor?? [ 1205.931761][ T5752] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1205.964393][ T5806] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1206.332163][ T9] usb 6-1: USB disconnect, device number 70 [ 1206.332236][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1206.340620][T19391] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1206.415068][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1206.511542][ T29] audit: type=1400 audit(1778192588.034:863): avc: denied { write } for pid=19381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1206.706971][ T29] audit: type=1400 audit(1778192588.224:864): avc: denied { write } for pid=19398 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1207.156419][ T29] audit: type=1400 audit(1778192588.684:865): avc: denied { ioctl } for pid=19404 comm="syz.5.3292" path="socket:[64582]" dev="sockfs" ino=64582 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1207.195057][T19359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.214450][T19359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.530668][T19412] comedi comedi3: pcm3724: I/O base address or length out of range [ 1207.540665][ T5806] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1207.580196][ T5806] usb 4-1: USB disconnect, device number 13 [ 1207.730263][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3295'. [ 1207.742683][ T29] audit: type=1400 audit(1778192589.254:866): avc: denied { name_bind } for pid=19414 comm="syz.2.3294" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1207.891524][ T29] audit: type=1400 audit(1778192589.414:867): avc: denied { write } for pid=19400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.041031][ T29] audit: type=1400 audit(1778192589.524:868): avc: denied { ioctl } for pid=19417 comm="syz.9.3295" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1208.504787][ T13] Bluetooth: (null): Invalid header checksum [ 1208.758340][T19437] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1208.796807][T19437] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1209.858854][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1209.858871][ T29] audit: type=1400 audit(1778192591.384:871): avc: denied { ioctl } for pid=19441 comm="syz.9.3301" path="socket:[64642]" dev="sockfs" ino=64642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1210.072578][T19442] netlink: 'syz.9.3301': attribute type 10 has an invalid length. [ 1210.174465][T19442] team0 (unregistering): Port device team_slave_0 removed [ 1210.426398][T19442] team0 (unregistering): Port device team_slave_1 removed [ 1210.501078][ T29] audit: type=1804 audit(1778192591.974:872): pid=19462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3304" name="/newroot/23/file0" dev="tmpfs" ino=138 res=1 errno=0 [ 1213.347950][ T29] audit: type=1800 audit(1778192594.874:873): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3308" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1213.610774][ T29] audit: type=1400 audit(1778192595.134:874): avc: denied { write } for pid=19447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.711988][ T29] audit: type=1400 audit(1778192595.224:875): avc: denied { write } for pid=19488 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.758444][ T5733] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1213.924778][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 1213.947721][ T5733] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1213.969680][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.017158][ T5733] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1214.053402][ T5733] pvrusb2: ********** [ 1214.068573][ T5733] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1214.100215][ T5733] pvrusb2: Important functionality might not be entirely working. [ 1214.108034][ T5733] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1214.138278][ T5733] pvrusb2: ********** [ 1214.172263][T19484] tipc: Can't bind to reserved service type 1 [ 1214.178369][ T29] audit: type=1400 audit(1778192595.664:876): avc: denied { bind } for pid=19481 comm="syz.4.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1215.084436][ T2360] pvrusb2: Invalid write control endpoint [ 1215.282405][T19504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3314'. [ 1215.453720][ T29] audit: type=1400 audit(1778192596.974:877): avc: denied { map } for pid=19473 comm="syz.3.3308" path="socket:[64678]" dev="sockfs" ino=64678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1215.624310][ T5732] usb 4-1: USB disconnect, device number 14 [ 1215.856835][ T2360] pvrusb2: Invalid write control endpoint [ 1215.909034][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1215.961510][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1215.996508][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1216.037657][ T2360] pvrusb2: Device being rendered inoperable [ 1216.069474][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1216.106700][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1216.314393][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1216.474312][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1216.730356][ T10] usb 10-1: config 0 has an invalid interface number: 66 but max is 0 [ 1216.744087][ T10] usb 10-1: config 0 has no interface number 0 [ 1216.750802][ T10] usb 10-1: too many endpoints for config 0 interface 66 altsetting 130: 163, using maximum allowed: 30 [ 1216.768541][ T10] usb 10-1: config 0 interface 66 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1216.783681][ T10] usb 10-1: config 0 interface 66 has no altsetting 0 [ 1216.798616][ T2360] pvrusb2: Attached sub-driver cx25840 [ 1216.800969][ T10] usb 10-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1216.842130][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1216.876214][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.885274][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1217.084856][ T10] usb 10-1: Product: syz [ 1217.090004][ T10] usb 10-1: Manufacturer: syz [ 1217.104163][ T10] usb 10-1: SerialNumber: syz [ 1217.125625][ T10] usb 10-1: config 0 descriptor?? [ 1217.245166][ T29] audit: type=1800 audit(1778192598.774:878): pid=19536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3320" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1217.489950][ T29] audit: type=1400 audit(1778192599.004:879): avc: denied { write } for pid=19509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.601526][ T10] usb 10-1: selecting invalid altsetting 3 [ 1217.610678][ T29] audit: type=1400 audit(1778192599.124:880): avc: denied { shutdown } for pid=19544 comm="syz.5.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1217.615148][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 1217.632696][T19546] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3322'. [ 1217.699598][ T29] audit: type=1400 audit(1778192599.134:881): avc: denied { setopt } for pid=19544 comm="syz.5.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1217.699892][ T10] usbdux 10-1:0.66: driver 'usbdux' failed to auto-configure device. [ 1217.875797][ T29] audit: type=1400 audit(1778192599.394:882): avc: denied { write } for pid=19547 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.958222][ T10] usbdux 10-1:0.66: probe with driver usbdux failed with error -22 [ 1218.005069][ T10] usb 10-1: USB disconnect, device number 5 [ 1219.694881][T19574] Cannot find add_set index 3 as target [ 1219.981423][ T29] audit: type=1400 audit(1778192601.504:883): avc: denied { write } for pid=19557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.074275][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1220.191151][ T29] audit: type=1400 audit(1778192601.714:884): avc: denied { write } for pid=19584 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.264139][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1220.287804][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1220.332768][ T9] usb 6-1: config 0 has no interface number 0 [ 1220.338908][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1220.350070][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1220.361701][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1220.372646][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1220.387196][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1220.396245][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.415013][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1220.435780][ T9] usb 6-1: config 0 descriptor?? [ 1220.648454][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1220.696807][ T29] audit: type=1400 audit(1778192602.224:885): avc: denied { write } for pid=19586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.699765][T19597] FAULT_INJECTION: forcing a failure. [ 1220.699765][T19597] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.734524][T19597] CPU: 0 UID: 0 PID: 19597 Comm: syz.4.3333 Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.734552][T19597] Tainted: [L]=SOFTLOCKUP [ 1220.734559][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.734569][T19597] Call Trace: [ 1220.734575][T19597] [ 1220.734582][T19597] dump_stack_lvl+0x100/0x190 [ 1220.734610][T19597] should_fail_ex.cold+0x5/0xa [ 1220.734634][T19597] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1220.734660][T19597] should_failslab+0xc2/0x120 [ 1220.734680][T19597] __kmalloc_noprof+0xe0/0x850 [ 1220.734705][T19597] ? kfree+0x1dd/0x6c0 [ 1220.734733][T19597] tomoyo_realpath_from_path+0xb6/0x690 [ 1220.734762][T19597] tomoyo_path_number_perm+0x23c/0x580 [ 1220.734781][T19597] ? tomoyo_path_number_perm+0x22e/0x580 [ 1220.734804][T19597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1220.734850][T19597] ? find_held_lock+0x2b/0x80 [ 1220.734867][T19597] ? __fget_files+0x215/0x3d0 [ 1220.734889][T19597] ? hook_file_ioctl_common+0x149/0x410 [ 1220.734916][T19597] ? __fget_files+0x215/0x3d0 [ 1220.734942][T19597] ? __fget_files+0x21f/0x3d0 [ 1220.734968][T19597] security_file_ioctl+0xd3/0x230 [ 1220.734992][T19597] __x64_sys_ioctl+0xb7/0x210 [ 1220.735013][T19597] do_syscall_64+0x10b/0xf80 [ 1220.735034][T19597] ? clear_bhb_loop+0x40/0x90 [ 1220.735056][T19597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.735075][T19597] RIP: 0033:0x7fb2ac39cdd9 [ 1220.735090][T19597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.735107][T19597] RSP: 002b:00007fb2aa5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.735124][T19597] RAX: ffffffffffffffda RBX: 00007fb2ac615fa0 RCX: 00007fb2ac39cdd9 [ 1220.735134][T19597] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 0000000000000007 [ 1220.735145][T19597] RBP: 00007fb2aa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.735156][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.735166][T19597] R13: 00007fb2ac616038 R14: 00007fb2ac615fa0 R15: 00007ffc79b3fa08 [ 1220.735191][T19597] [ 1220.735198][T19597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1220.843694][ T5806] usb 6-1: USB disconnect, device number 71 [ 1220.843817][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1220.864519][ T5806] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1220.903987][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1221.017859][ T10] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1221.044078][ T10] usb 4-1: config 0 has no interface number 0 [ 1221.063703][ T10] usb 4-1: too many endpoints for config 0 interface 66 altsetting 130: 163, using maximum allowed: 30 [ 1221.118889][ T10] usb 4-1: config 0 interface 66 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1221.152963][ T29] audit: type=1400 audit(1778192602.674:886): avc: denied { write } for pid=19599 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.183596][ T10] usb 4-1: config 0 interface 66 has no altsetting 0 [ 1221.226725][ T10] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1221.388709][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.396736][ T10] usb 4-1: Product: syz [ 1221.400898][ T10] usb 4-1: Manufacturer: syz [ 1221.405544][ T10] usb 4-1: SerialNumber: syz [ 1221.416680][ T10] usb 4-1: config 0 descriptor?? [ 1222.106832][T17694] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.236022][T18673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1222.248914][ T10] usb 4-1: selecting invalid altsetting 3 [ 1222.252096][T18673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1222.262843][T18673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1222.276186][T18673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1222.286174][T18673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.298405][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 1222.367340][ T10] usbdux 4-1:0.66: driver 'usbdux' failed to auto-configure device. [ 1222.421062][ T29] audit: type=1400 audit(1778192603.944:887): avc: denied { mount } for pid=19617 comm="syz.4.3340" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1222.459002][ T10] usbdux 4-1:0.66: probe with driver usbdux failed with error -22 [ 1222.500158][ T10] usb 4-1: USB disconnect, device number 15 [ 1222.550798][ T29] audit: type=1400 audit(1778192604.014:888): avc: denied { search } for pid=19617 comm="syz.4.3340" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1222.573003][ T29] audit: type=1400 audit(1778192604.014:889): avc: denied { search } for pid=19617 comm="syz.4.3340" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1222.595168][ T29] audit: type=1400 audit(1778192604.014:890): avc: denied { read } for pid=19617 comm="syz.4.3340" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1222.774933][ T29] audit: type=1400 audit(1778192604.014:891): avc: denied { read open } for pid=19617 comm="syz.4.3340" path="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1222.914010][ T29] audit: type=1400 audit(1778192604.394:892): avc: denied { write } for pid=19616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.061425][ T29] audit: type=1400 audit(1778192604.564:893): avc: denied { write } for pid=19638 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.107375][T19640] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.3342'. [ 1224.114173][ T29] audit: type=1400 audit(1778192605.544:894): avc: denied { write } for pid=19643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.625855][T18673] Bluetooth: hci2: command tx timeout [ 1225.124735][T19678] overlayfs: failed to get inode (-116) [ 1225.132582][T17694] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.155510][T19678] overlayfs: failed to get inode (-116) [ 1225.360322][T19691] overlayfs: failed to get inode (-116) [ 1225.369704][T19691] overlayfs: failed to get inode (-116) [ 1225.536296][T17694] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.309100][T17694] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.674408][T18673] Bluetooth: hci2: command tx timeout [ 1227.061803][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1227.061834][ T29] audit: type=1400 audit(1778192608.584:898): avc: denied { write } for pid=19687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.433367][ T29] audit: type=1400 audit(1778192608.954:899): avc: denied { write } for pid=19723 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.487509][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1227.596618][T19730] cgroup: release_agent respecified [ 1227.744175][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1227.885190][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1227.904823][ T9] usb 4-1: config 0 has no interface number 0 [ 1228.614852][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1228.637407][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1228.650211][ T5732] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1228.659055][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1228.677680][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1228.695275][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1228.705202][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.727184][ T9] usb 4-1: config 0 descriptor?? [ 1228.775614][T18673] Bluetooth: hci2: command tx timeout [ 1228.824150][ T5732] usb 6-1: Using ep0 maxpacket: 8 [ 1228.832083][ T5732] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1228.869779][ T5732] usb 6-1: config 0 has no interface number 0 [ 1228.877495][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1228.886818][ T5732] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1228.901052][ T5732] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1228.913593][ T5732] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1228.924648][ T5732] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1228.938163][ T5732] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1229.222780][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.241725][ T5732] usb 6-1: config 0 descriptor?? [ 1229.292157][ T5732] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1229.393213][T17694] bridge_slave_1: left allmulticast mode [ 1229.423239][T17694] bridge_slave_1: left promiscuous mode [ 1229.442961][T17694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.487689][ T5752] usb 6-1: USB disconnect, device number 72 [ 1229.497316][T17694] bridge_slave_0: left allmulticast mode [ 1229.508203][T17694] bridge_slave_0: left promiscuous mode [ 1229.527535][T17694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.536483][ T5752] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 1229.591451][ T5806] usb 4-1: USB disconnect, device number 16 [ 1229.627541][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 1229.659258][T19754] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1229.674410][ T5806] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1229.789271][ T29] audit: type=1804 audit(1778192611.314:900): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3360" name="file0" dev="tmpfs" ino=377 res=1 errno=0 [ 1229.989120][ T29] audit: type=1400 audit(1778192611.514:901): avc: denied { write } for pid=19747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.021920][T17694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.056028][T17694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.090173][T17694] bond0 (unregistering): Released all slaves [ 1230.260512][ T29] audit: type=1400 audit(1778192611.754:902): avc: denied { write } for pid=19772 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.834477][T18673] Bluetooth: hci2: command tx timeout [ 1231.046498][T19788] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1231.069454][T19788] input: syz1 as /devices/virtual/input/input23 [ 1233.174599][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.286897][T17694] hsr_slave_0: left promiscuous mode [ 1233.308186][T17694] hsr_slave_1: left promiscuous mode [ 1233.336200][T17694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.354598][T17694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.377606][T17694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.391916][T17694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.479402][T17694] veth1_macvtap: left promiscuous mode [ 1233.496575][T17694] veth0_macvtap: left promiscuous mode [ 1233.520898][T17694] veth1_vlan: left promiscuous mode [ 1233.535188][T17694] veth0_vlan: left promiscuous mode [ 1233.668593][ T29] audit: type=1400 audit(1778192615.194:903): avc: denied { write } for pid=19792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.748600][ T29] audit: type=1400 audit(1778192615.274:904): avc: denied { write } for pid=19812 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.845333][ T5752] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1234.011676][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 1234.023151][ T5752] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1234.039836][ T5752] usb 4-1: config 0 has no interface number 0 [ 1234.055936][ T5752] usb 4-1: too many endpoints for config 0 interface 66 altsetting 130: 163, using maximum allowed: 30 [ 1234.094456][ T5752] usb 4-1: config 0 interface 66 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1234.122024][ T5752] usb 4-1: config 0 interface 66 has no altsetting 0 [ 1234.136012][ T5752] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1234.145543][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.153780][ T5752] usb 4-1: Product: syz [ 1234.174287][ T5752] usb 4-1: Manufacturer: syz [ 1234.186507][ T5752] usb 4-1: SerialNumber: syz [ 1234.199850][ T5752] usb 4-1: config 0 descriptor?? [ 1234.334319][T19614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.353525][T19614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.391764][ T29] audit: type=1400 audit(1778192615.914:905): avc: denied { write } for pid=19814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.410631][T19614] bridge_slave_0: entered allmulticast mode [ 1234.433124][T19614] bridge_slave_0: entered promiscuous mode [ 1234.493376][ T5752] usb 4-1: selecting invalid altsetting 3 [ 1234.497338][T19614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.515820][ T5752] comedi comedi5: could not set alternate setting 3 in high speed [ 1234.521295][T19614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.532603][T19614] bridge_slave_1: entered allmulticast mode [ 1234.534346][ T5752] usbdux 4-1:0.66: driver 'usbdux' failed to auto-configure device. [ 1235.453605][ T5752] usbdux 4-1:0.66: probe with driver usbdux failed with error -22 [ 1235.468259][ T5752] usb 4-1: USB disconnect, device number 17 [ 1235.520957][T19614] bridge_slave_1: entered promiscuous mode [ 1235.596570][ T29] audit: type=1400 audit(1778192617.124:906): avc: denied { write } for pid=19830 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.657820][T19614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.672799][T19614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.753087][T19614] team0: Port device team_slave_0 added [ 1235.768061][T19614] team0: Port device team_slave_1 added [ 1235.798457][ T29] audit: type=1400 audit(1778192617.324:907): avc: denied { load_policy } for pid=19838 comm="syz.5.3371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1235.824605][T19839] SELinux: ebitmap: empty map [ 1235.856307][T19839] SELinux: failed to load policy [ 1235.894386][T19614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.916376][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.954976][T19614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.973926][T19614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.986335][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.013214][T19614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.026208][T19842] FAULT_INJECTION: forcing a failure. [ 1236.026208][T19842] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.063852][T19842] CPU: 0 UID: 0 PID: 19842 Comm: syz.5.3372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.063872][T19842] Tainted: [L]=SOFTLOCKUP [ 1236.063876][T19842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1236.063882][T19842] Call Trace: [ 1236.063886][T19842] [ 1236.063891][T19842] dump_stack_lvl+0x100/0x190 [ 1236.063916][T19842] should_fail_ex.cold+0x5/0xa [ 1236.063940][T19842] should_failslab+0xc2/0x120 [ 1236.063959][T19842] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1236.063977][T19842] ? __get_vm_area_node+0x101/0x330 [ 1236.063995][T19842] ? __lock_acquire+0x4a5/0x2630 [ 1236.064022][T19842] __get_vm_area_node+0x101/0x330 [ 1236.064047][T19842] __vmalloc_node_range_noprof+0x228/0x1630 [ 1236.064068][T19842] ? sel_write_load+0x230/0x560 [ 1236.064099][T19842] ? sel_write_load+0x230/0x560 [ 1236.064111][T19842] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1236.064131][T19842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1236.064144][T19842] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1236.064165][T19842] ? __pfx_avc_has_perm+0x10/0x10 [ 1236.064183][T19842] ? sel_write_load+0x230/0x560 [ 1236.064194][T19842] __vmalloc_node_noprof+0xad/0xf0 [ 1236.064207][T19842] ? sel_write_load+0x230/0x560 [ 1236.064220][T19842] sel_write_load+0x230/0x560 [ 1236.064232][T19842] ? __pfx_sel_write_load+0x10/0x10 [ 1236.064248][T19842] vfs_write+0x2aa/0x1070 [ 1236.064261][T19842] ? __pfx_sel_write_load+0x10/0x10 [ 1236.064275][T19842] ? __pfx_vfs_write+0x10/0x10 [ 1236.064286][T19842] ? __fget_files+0x215/0x3d0 [ 1236.064302][T19842] ? __fget_files+0x21f/0x3d0 [ 1236.064320][T19842] ksys_write+0x12a/0x250 [ 1236.064332][T19842] ? __pfx_ksys_write+0x10/0x10 [ 1236.064346][T19842] ? rcu_is_watching+0x12/0xc0 [ 1236.064365][T19842] do_syscall_64+0x10b/0xf80 [ 1236.064378][T19842] ? clear_bhb_loop+0x40/0x90 [ 1236.064391][T19842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.064402][T19842] RIP: 0033:0x7f453959cdd9 [ 1236.064412][T19842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.064423][T19842] RSP: 002b:00007f453a52d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.064434][T19842] RAX: ffffffffffffffda RBX: 00007f4539815fa0 RCX: 00007f453959cdd9 [ 1236.064441][T19842] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 1236.064447][T19842] RBP: 00007f453a52d090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.064454][T19842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.064460][T19842] R13: 00007f4539816038 R14: 00007f4539815fa0 R15: 00007fff1ce25c18 [ 1236.064474][T19842] [ 1236.350199][T19614] hsr_slave_0: entered promiscuous mode [ 1236.356222][T19614] hsr_slave_1: entered promiscuous mode [ 1236.362059][T19614] debugfs: 'hsr0' already exists in 'hsr' [ 1236.367757][T19614] Cannot create hsr debugfs directory [ 1236.416695][T19842] syz.5.3372: vmalloc error: size 102636, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1236.443808][T19842] CPU: 0 UID: 0 PID: 19842 Comm: syz.5.3372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.443837][T19842] Tainted: [L]=SOFTLOCKUP [ 1236.443843][T19842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1236.443853][T19842] Call Trace: [ 1236.443859][T19842] [ 1236.443865][T19842] dump_stack_lvl+0x100/0x190 [ 1236.443892][T19842] warn_alloc.cold+0x95/0x1c1 [ 1236.443911][T19842] ? __pfx_warn_alloc+0x10/0x10 [ 1236.443936][T19842] ? trace_kmalloc+0xe3/0x110 [ 1236.443957][T19842] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1236.443979][T19842] ? __kasan_kmalloc+0x8a/0xb0 [ 1236.444007][T19842] ? __get_vm_area_node+0x208/0x330 [ 1236.444034][T19842] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1236.444066][T19842] ? sel_write_load+0x230/0x560 [ 1236.444087][T19842] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1236.444128][T19842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1236.444150][T19842] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1236.444184][T19842] ? __pfx_avc_has_perm+0x10/0x10 [ 1236.444212][T19842] ? sel_write_load+0x230/0x560 [ 1236.444230][T19842] __vmalloc_node_noprof+0xad/0xf0 [ 1236.444251][T19842] ? sel_write_load+0x230/0x560 [ 1236.444273][T19842] sel_write_load+0x230/0x560 [ 1236.444293][T19842] ? __pfx_sel_write_load+0x10/0x10 [ 1236.444320][T19842] vfs_write+0x2aa/0x1070 [ 1236.444341][T19842] ? __pfx_sel_write_load+0x10/0x10 [ 1236.444362][T19842] ? __pfx_vfs_write+0x10/0x10 [ 1236.444381][T19842] ? __fget_files+0x215/0x3d0 [ 1236.444409][T19842] ? __fget_files+0x21f/0x3d0 [ 1236.444437][T19842] ksys_write+0x12a/0x250 [ 1236.444455][T19842] ? __pfx_ksys_write+0x10/0x10 [ 1236.444475][T19842] ? rcu_is_watching+0x12/0xc0 [ 1236.444505][T19842] do_syscall_64+0x10b/0xf80 [ 1236.444526][T19842] ? clear_bhb_loop+0x40/0x90 [ 1236.444549][T19842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.444568][T19842] RIP: 0033:0x7f453959cdd9 [ 1236.444583][T19842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.444601][T19842] RSP: 002b:00007f453a52d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.444619][T19842] RAX: ffffffffffffffda RBX: 00007f4539815fa0 RCX: 00007f453959cdd9 [ 1236.444631][T19842] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 1236.444641][T19842] RBP: 00007f453a52d090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.444651][T19842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.444660][T19842] R13: 00007f4539816038 R14: 00007f4539815fa0 R15: 00007fff1ce25c18 [ 1236.444685][T19842] [ 1236.444692][T19842] Mem-Info: [ 1236.739825][T19842] active_anon:14997 inactive_anon:0 isolated_anon:0 [ 1236.739825][T19842] active_file:22392 inactive_file:41241 isolated_file:0 [ 1236.739825][T19842] unevictable:1792 dirty:618 writeback:0 [ 1236.739825][T19842] slab_reclaimable:9409 slab_unreclaimable:124826 [ 1236.739825][T19842] mapped:31113 shmem:8232 pagetables:1614 [ 1236.739825][T19842] sec_pagetables:0 bounce:0 [ 1236.739825][T19842] kernel_misc_reclaimable:0 [ 1236.739825][T19842] free:1255492 free_pcp:11428 free_cma:0 [ 1236.799234][T19842] Node 0 active_anon:59988kB inactive_anon:0kB active_file:89568kB inactive_file:164764kB unevictable:5632kB isolated(anon):0kB isolated(file):0kB mapped:124452kB dirty:2472kB writeback:0kB shmem:31392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14364kB pagetables:6420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1236.847341][T19842] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1236.938685][T19842] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.032655][T19842] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1237.058389][T19842] Node 0 DMA32 free:1062052kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60188kB inactive_anon:0kB active_file:89568kB inactive_file:164764kB unevictable:5632kB writepending:2472kB zspages:0kB present:3129332kB managed:2537112kB mlocked:0kB bounce:0kB free_pcp:46100kB local_pcp:26460kB free_cma:0kB [ 1237.219010][T19855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3375'. [ 1237.229695][ T29] audit: type=1400 audit(1778192618.734:908): avc: denied { write } for pid=19840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.267965][T19842] lowmem_reserve[]: 0 0 1 1 1 [ 1237.290370][T19842] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:12kB free_cma:0kB [ 1237.382224][T19842] lowmem_reserve[]: 0 0 0 0 0 [ 1237.406199][T19842] Node 1 Normal free:3944068kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 1237.449504][T19842] lowmem_reserve[]: 0 0 0 0 0 [ 1237.470201][T19842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1237.516718][T19842] Node 0 DMA32: 2010*4kB (UME) 3939*8kB (UME) 2088*16kB (UME) 901*32kB (UME) 698*64kB (UME) 513*128kB (UME) 233*256kB (UME) 125*512kB (UME) 66*1024kB (UME) 27*2048kB (UME) 148*4096kB (UM) = 1064864kB [ 1237.618065][ T29] audit: type=1400 audit(1778192619.144:909): avc: denied { write } for pid=19865 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.650523][T19842] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1237.681692][T19842] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 3*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944068kB [ 1237.711240][T19873] evm: overlay not supported [ 1237.729570][T19842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.744871][T19873] FAULT_INJECTION: forcing a failure. [ 1237.744871][T19873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.758787][T19842] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 1237.768589][T19873] CPU: 1 UID: 0 PID: 19873 Comm: syz.4.3378 Tainted: G L syzkaller #0 PREEMPT(full) [ 1237.768616][T19873] Tainted: [L]=SOFTLOCKUP [ 1237.768622][T19873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.768632][T19873] Call Trace: [ 1237.768638][T19873] [ 1237.768645][T19873] dump_stack_lvl+0x100/0x190 [ 1237.768672][T19873] should_fail_ex.cold+0x5/0xa [ 1237.768697][T19873] _copy_from_user+0x2e/0xd0 [ 1237.768725][T19873] __do_sys_copy_file_range+0x134/0x460 [ 1237.768750][T19873] ? fput+0x79/0x100 [ 1237.768771][T19873] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1237.768796][T19873] ? ksys_write+0x1ac/0x250 [ 1237.768815][T19873] ? __pfx_ksys_write+0x10/0x10 [ 1237.768835][T19873] ? rcu_is_watching+0x12/0xc0 [ 1237.768863][T19873] do_syscall_64+0x10b/0xf80 [ 1237.768883][T19873] ? clear_bhb_loop+0x40/0x90 [ 1237.768905][T19873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.768922][T19873] RIP: 0033:0x7fb2ac39cdd9 [ 1237.768937][T19873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.768953][T19873] RSP: 002b:00007fb2aa5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1237.768970][T19873] RAX: ffffffffffffffda RBX: 00007fb2ac615fa0 RCX: 00007fb2ac39cdd9 [ 1237.768981][T19873] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1237.768991][T19873] RBP: 00007fb2aa5f6090 R08: 0000000000000009 R09: 0000000000000000 [ 1237.769002][T19873] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1237.769013][T19873] R13: 00007fb2ac616038 R14: 00007fb2ac615fa0 R15: 00007ffc79b3fa08 [ 1237.769036][T19873] [ 1237.963154][T19842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.991381][T19842] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1238.016676][T19842] 72014 total pagecache pages [ 1238.025456][T19842] 0 pages in swap cache [ 1238.041993][T19842] Free swap = 124996kB [ 1238.099916][T19842] Total swap = 124996kB [ 1238.137291][T19842] 2097051 pages RAM [ 1238.172786][T19842] 0 pages HighMem/MovableOnly [ 1238.182539][ T29] audit: type=1400 audit(1778192619.704:910): avc: denied { write } for pid=19874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.210394][T19842] 430885 pages reserved [ 1238.226908][T19842] 0 pages cma reserved [ 1238.548549][ T29] audit: type=1400 audit(1778192620.074:911): avc: denied { write } for pid=19892 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.399494][ T29] audit: type=1400 audit(1778192620.824:912): avc: denied { sqpoll } for pid=19889 comm="syz.2.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1240.348856][T19893] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[19906] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[19893] [ 1240.471819][ T29] audit: type=1400 audit(1778192621.814:913): avc: denied { audit_write } for pid=19902 comm="syz.4.3384" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1240.654060][ T5806] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1240.759364][ T29] audit: type=1107 audit(1778192621.814:914): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' ^W¤¯“óÜ@RëJË' [ 1240.844512][ T5806] usb 6-1: Using ep0 maxpacket: 32 [ 1241.213402][ T5806] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 1241.221626][ T5806] usb 6-1: config 0 has no interface number 0 [ 1241.227973][ T5806] usb 6-1: too many endpoints for config 0 interface 66 altsetting 130: 163, using maximum allowed: 30 [ 1241.239741][ T5806] usb 6-1: config 0 interface 66 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1241.253218][ T5806] usb 6-1: config 0 interface 66 has no altsetting 0 [ 1241.262200][ T5806] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1241.273079][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.281180][ T5806] usb 6-1: Product: syz [ 1241.285548][ T5806] usb 6-1: Manufacturer: syz [ 1241.291133][ T5806] usb 6-1: SerialNumber: syz [ 1241.306489][ T5806] usb 6-1: config 0 descriptor?? [ 1241.563340][ T5806] usb 6-1: selecting invalid altsetting 3 [ 1241.586011][ T5806] comedi comedi5: could not set alternate setting 3 in high speed [ 1241.609128][ T5806] usbdux 6-1:0.66: driver 'usbdux' failed to auto-configure device. [ 1241.641374][ T5806] usbdux 6-1:0.66: probe with driver usbdux failed with error -22 [ 1241.678884][ T5806] usb 6-1: USB disconnect, device number 73 [ 1241.776516][ T29] audit: type=1400 audit(1778192623.304:915): avc: denied { write } for pid=19907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.850023][T19923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1241.933541][ T29] audit: type=1400 audit(1778192623.454:916): avc: denied { write } for pid=19926 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.979986][T19614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1242.004439][T19614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.012239][T19614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1242.024049][T19614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1242.032091][T19614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1242.043464][T19614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1242.051302][T19614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1242.161432][T19614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1242.204383][ T5732] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1242.288845][T19614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.904356][T19614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.934009][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.941169][T17694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.002907][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.010080][T17694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.133474][ T29] audit: type=1400 audit(1778192624.654:917): avc: denied { write } for pid=19928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1243.173630][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 1243.197249][ T5732] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1243.214457][ T5732] usb 4-1: config 0 has no interface number 0 [ 1243.226553][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1243.243188][ T29] audit: type=1400 audit(1778192624.754:918): avc: denied { read write } for pid=19958 comm="syz.5.3392" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1243.269936][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1243.304898][ T5732] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1243.439014][ T29] audit: type=1400 audit(1778192624.754:919): avc: denied { open } for pid=19958 comm="syz.5.3392" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1243.466132][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1243.483913][ T5732] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1243.519603][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.669150][T19964] vti0: entered promiscuous mode [ 1243.705270][ T5732] usb 4-1: config 0 descriptor?? [ 1243.754814][ T5732] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1243.786771][ T29] audit: type=1400 audit(1778192625.314:920): avc: denied { write } for pid=19963 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.187507][T19983] Cannot find del_set index 14804 as target [ 1244.210525][ T24] usb 4-1: USB disconnect, device number 18 [ 1244.233800][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1244.292121][ T29] audit: type=1400 audit(1778192625.814:921): avc: denied { read } for pid=19981 comm="syz.5.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1244.451074][T19993] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3396'. [ 1244.472075][T19993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3396'. [ 1244.503193][T19614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.865328][T19614] veth0_vlan: entered promiscuous mode [ 1244.905203][T19997] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1244.948997][ T29] audit: type=1400 audit(1778192626.474:922): avc: denied { write } for pid=19978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.982184][T19614] veth1_vlan: entered promiscuous mode [ 1245.149035][T19614] veth0_macvtap: entered promiscuous mode [ 1245.216081][T19614] veth1_macvtap: entered promiscuous mode [ 1245.277701][ T29] audit: type=1400 audit(1778192626.804:923): avc: denied { write } for pid=20015 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1246.117841][T19614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.171058][T19614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.718718][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.873555][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.032765][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1247.092471][ T6242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.134855][ T6242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.300427][T20033] syz.4.3403 (20033): drop_caches: 2 [ 1248.427911][T20052] serio: Serial port ttyS3 [ 1248.637389][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.680795][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.744654][ T5752] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 1248.776150][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.786998][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.928437][ T5752] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1248.955488][ T5752] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1249.005468][ T5752] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1249.056928][ T5752] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1249.096741][ T29] audit: type=1400 audit(1778192630.624:924): avc: denied { connect } for pid=20068 comm="syz.1.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1249.119667][ T5752] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1249.145618][ T5752] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1249.161839][ T5752] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1249.175344][ T5752] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1249.190971][ T5752] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1249.204004][ T5752] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1250.616464][ T29] audit: type=1400 audit(1778192631.994:925): avc: denied { write } for pid=20049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1250.931445][ T29] audit: type=1400 audit(1778192632.454:926): avc: denied { write } for pid=20085 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.621885][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1251.967548][ T29] audit: type=1400 audit(1778192633.484:927): avc: denied { map } for pid=20097 comm="syz.2.3419" path="socket:[67036]" dev="sockfs" ino=67036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1252.251457][ T29] audit: type=1400 audit(1778192633.494:928): avc: denied { read } for pid=20097 comm="syz.2.3419" path="socket:[67036]" dev="sockfs" ino=67036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1252.277067][T20106] libceph: secret too big 289 [ 1253.133949][ T5752] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 1253.245621][ T29] audit: type=1400 audit(1778192634.774:929): avc: denied { name_connect } for pid=20116 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1253.323808][ T5752] usb 6-1: can't read configurations, error -71 [ 1253.599505][T20122] overlayfs: failed to resolve 'fsname=lowerdir': -2 [ 1253.601852][ T29] audit: type=1400 audit(1778192635.104:930): avc: denied { mounton } for pid=20116 comm="syz.3.3415" path="/32/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1253.741698][ T29] audit: type=1400 audit(1778192635.264:931): avc: denied { write } for pid=20107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1254.453592][ T29] audit: type=1400 audit(1778192635.974:932): avc: denied { write } for pid=20137 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1254.794016][ T5752] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1254.848102][T20142] xt_TCPMSS: Only works on TCP SYN packets [ 1255.117408][ T5752] usb 6-1: Using ep0 maxpacket: 16 [ 1255.128301][ T5752] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.202401][ T5752] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1255.213953][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.223122][ T5752] usb 6-1: Product: syz [ 1255.227659][ T5752] usb 6-1: Manufacturer: syz [ 1255.239941][ T5752] usb 6-1: SerialNumber: syz [ 1255.280182][ T5752] usb 6-1: config 0 descriptor?? [ 1255.309356][ T5752] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1255.321922][ T5752] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1257.486454][ T29] audit: type=1800 audit(1778192639.004:933): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3429" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1258.121435][T20168] overlay: Unknown parameter 'fsuuid' [ 1258.441122][ T29] audit: type=1400 audit(1778192639.944:934): avc: denied { unmount } for pid=18671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1258.464422][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1258.547066][ T9] usb 6-1: USB disconnect, device number 76 [ 1258.964223][ T5806] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1258.997920][ T29] audit: type=1400 audit(1778192640.524:935): avc: denied { write } for pid=20177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.034077][ T9] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1259.098067][ T29] audit: type=1400 audit(1778192640.624:936): avc: denied { write } for pid=20193 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.158072][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 1259.169399][ T5806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1259.181704][ T5806] usb 4-1: config 0 has an invalid interface number: 228 but max is 2 [ 1259.192995][ T5806] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 1259.207530][ T5806] usb 4-1: config 0 has an invalid interface number: 181 but max is 2 [ 1259.216765][ T5806] usb 4-1: config 0 has no interface number 0 [ 1259.217580][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1259.222919][ T5806] usb 4-1: config 0 has no interface number 1 [ 1259.222939][ T5806] usb 4-1: config 0 has no interface number 2 [ 1259.222982][ T5806] usb 4-1: config 0 interface 228 has no altsetting 0 [ 1259.223001][ T5806] usb 4-1: config 0 interface 172 has no altsetting 0 [ 1259.223019][ T5806] usb 4-1: config 0 interface 181 has no altsetting 0 [ 1259.225325][ T5806] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 1259.257226][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1259.284283][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.291190][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1259.295034][ T5806] usb 4-1: Product: syz [ 1259.310005][ T5806] usb 4-1: Manufacturer: syz [ 1259.316008][ T5806] usb 4-1: SerialNumber: syz [ 1259.322649][ T9] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1259.328176][ T5806] usb 4-1: config 0 descriptor?? [ 1259.348036][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.384876][ T9] usb 6-1: config 0 descriptor?? [ 1259.547696][ T5806] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1259.581048][ T5806] usb 4-1: selecting invalid altsetting 0 [ 1259.592022][ T2360] pvrusb2: Invalid write control endpoint [ 1259.607430][ T5806] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1259.628782][ T5806] usb 4-1: selecting invalid altsetting 0 [ 1259.641881][ T5806] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1259.658722][ T5806] usb 4-1: selecting invalid altsetting 0 [ 1259.690407][ T5806] usb 4-1: USB disconnect, device number 19 [ 1259.733678][ T2360] pvrusb2: Invalid write control endpoint [ 1259.751333][ T2360] pvrusb2: Invalid write control endpoint [ 1259.765511][ T2360] pvrusb2: Invalid write control endpoint [ 1259.793236][ T2360] pvrusb2: Invalid write control endpoint [ 1259.810592][ T2360] pvrusb2: Invalid write control endpoint [ 1259.817213][ T2360] pvrusb2: Invalid write control endpoint [ 1259.822965][ T2360] pvrusb2: Invalid write control endpoint [ 1259.831654][ T2360] pvrusb2: Invalid write control endpoint [ 1259.840525][ T29] audit: type=1400 audit(1778192641.364:937): avc: denied { accept } for pid=20175 comm="syz.5.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1259.860245][ T2360] pvrusb2: Invalid write control endpoint [ 1259.866611][ T2360] pvrusb2: Invalid write control endpoint [ 1259.872522][ T2360] pvrusb2: Invalid write control endpoint [ 1259.879141][ T2360] pvrusb2: Invalid write control endpoint [ 1259.885705][ T2360] pvrusb2: Invalid write control endpoint [ 1259.908833][ T29] audit: type=1400 audit(1778192641.424:938): avc: denied { write } for pid=20197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.934047][ T2360] pvrusb2: Invalid write control endpoint [ 1259.940019][ T2360] pvrusb2: Invalid write control endpoint [ 1259.947425][ T2360] pvrusb2: Invalid write control endpoint [ 1259.953343][ T2360] pvrusb2: Invalid write control endpoint [ 1259.960666][ T2360] pvrusb2: Invalid write control endpoint [ 1259.967559][ T2360] pvrusb2: Invalid write control endpoint [ 1259.973762][ T2360] pvrusb2: Invalid write control endpoint [ 1259.980471][ T2360] pvrusb2: Invalid write control endpoint [ 1259.987358][ T2360] pvrusb2: Invalid write control endpoint [ 1259.993279][ T2360] pvrusb2: Invalid write control endpoint [ 1260.002317][ T2360] pvrusb2: Invalid write control endpoint [ 1260.012329][ T2360] pvrusb2: Invalid write control endpoint [ 1260.018692][ T2360] pvrusb2: Invalid write control endpoint [ 1260.025090][ T2360] pvrusb2: Invalid write control endpoint [ 1260.031031][ T2360] pvrusb2: Invalid write control endpoint [ 1260.039613][ T2360] pvrusb2: Invalid write control endpoint [ 1260.046343][ T2360] pvrusb2: Invalid write control endpoint [ 1260.055975][ T2360] pvrusb2: Invalid write control endpoint [ 1260.061906][ T2360] pvrusb2: Invalid write control endpoint [ 1260.097687][ T2360] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1260.172625][ T29] audit: type=1400 audit(1778192641.694:939): avc: denied { write } for pid=20217 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.256655][ T2360] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 1260.329017][ T2360] pvrusb2: Invalid write control endpoint [ 1260.360780][ T2360] pvrusb2: Invalid write control endpoint [ 1260.398346][ T2360] pvrusb2: Invalid write control endpoint [ 1260.411975][ T2360] pvrusb2: Invalid write control endpoint [ 1260.441335][ T2360] pvrusb2: Invalid write control endpoint [ 1260.466063][ T2360] pvrusb2: Invalid write control endpoint [ 1260.492410][ T2360] pvrusb2: Invalid write control endpoint [ 1260.537926][ T2360] pvrusb2: Invalid write control endpoint [ 1260.563999][ T2360] pvrusb2: Invalid write control endpoint [ 1260.573461][ T2360] pvrusb2: Invalid write control endpoint [ 1260.616332][ T2360] pvrusb2: Invalid write control endpoint [ 1260.646822][ T2360] pvrusb2: Invalid write control endpoint [ 1260.669334][ T2360] pvrusb2: Invalid write control endpoint [ 1260.688709][ T2360] pvrusb2: Invalid write control endpoint [ 1260.712075][ T2360] pvrusb2: Invalid write control endpoint [ 1260.734830][ T2360] pvrusb2: Invalid write control endpoint [ 1260.741955][ T2360] pvrusb2: Invalid write control endpoint [ 1260.750172][ T2360] pvrusb2: Invalid write control endpoint [ 1260.758619][ T2360] pvrusb2: Invalid write control endpoint [ 1260.765115][ T2360] pvrusb2: Invalid write control endpoint [ 1260.771336][ T2360] pvrusb2: Invalid write control endpoint [ 1260.785951][ T2360] pvrusb2: Attached sub-driver cs53l32a [ 1260.882292][ T2360] pvrusb2: Invalid write control endpoint [ 1260.888528][ T2360] pvrusb2: Invalid write control endpoint [ 1260.897875][ T2360] pvrusb2: Invalid write control endpoint [ 1260.905750][ T2360] pvrusb2: Invalid write control endpoint [ 1260.934924][ T2360] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1260.954745][ T2360] pvrusb2: Device being rendered inoperable [ 1260.960838][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1260.975397][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1261.014986][ T2360] pvrusb2: Invalid write control endpoint [ 1261.125574][ T2360] pvrusb2: Invalid write control endpoint [ 1261.133549][ T2360] pvrusb2: Invalid write control endpoint [ 1261.145906][ T2360] pvrusb2: Invalid write control endpoint [ 1261.152251][ T2360] pvrusb2: Invalid write control endpoint [ 1261.170183][ T2360] pvrusb2: Invalid write control endpoint [ 1261.177620][ T2360] pvrusb2: Invalid write control endpoint [ 1261.183492][ T2360] pvrusb2: Invalid write control endpoint [ 1261.190014][ T2360] pvrusb2: Invalid write control endpoint [ 1261.201848][ T2360] pvrusb2: Invalid write control endpoint [ 1261.207964][ T2360] pvrusb2: Invalid write control endpoint [ 1261.218233][ T2360] pvrusb2: Invalid write control endpoint [ 1261.224804][ T2360] pvrusb2: Invalid write control endpoint [ 1261.230751][ T2360] pvrusb2: Invalid write control endpoint [ 1261.302082][ T2360] pvrusb2: Invalid write control endpoint [ 1261.356540][ T2360] pvrusb2: Invalid write control endpoint [ 1261.392072][ T2360] pvrusb2: Invalid write control endpoint [ 1261.410341][ T29] audit: type=1400 audit(1778192642.934:940): avc: denied { write } for pid=20226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.447272][ T2360] pvrusb2: Invalid write control endpoint [ 1261.469227][ T2360] pvrusb2: Invalid write control endpoint [ 1261.493710][ T2360] pvrusb2: Invalid write control endpoint [ 1261.537953][ T2360] pvrusb2: Invalid write control endpoint [ 1261.584906][ T2360] pvrusb2: Invalid write control endpoint [ 1261.620267][ T2360] pvrusb2: Invalid write control endpoint [ 1261.674489][ T2360] pvrusb2: Invalid write control endpoint [ 1261.701322][ T2360] pvrusb2: Invalid write control endpoint [ 1261.722448][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1261.754888][ T2360] pvrusb2: Invalid write control endpoint [ 1261.768439][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1261.800833][ T2360] pvrusb2: Invalid write control endpoint [ 1261.980499][ T2360] pvrusb2: Invalid write control endpoint [ 1261.982829][T20247] overlayfs: failed to resolve 'fsname=lowerdir': -2 [ 1262.893223][ T2360] pvrusb2: Invalid write control endpoint [ 1262.919927][ T9] usb 6-1: USB disconnect, device number 77 [ 1262.930581][ T2360] pvrusb2: Invalid write control endpoint [ 1263.058874][ T2360] pvrusb2: Invalid write control endpoint [ 1263.079367][ T2360] pvrusb2: Invalid write control endpoint [ 1263.086650][ T2360] pvrusb2: Invalid write control endpoint [ 1263.121222][ T29] audit: type=1400 audit(1778192644.604:941): avc: denied { write } for pid=20260 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.145568][ T2360] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1263.395154][ T2360] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 1263.419070][ T2360] pvrusb2: Invalid write control endpoint [ 1263.459173][ T2360] pvrusb2: Invalid write control endpoint [ 1263.495324][ T2360] pvrusb2: Invalid write control endpoint [ 1263.514824][ T2360] pvrusb2: Invalid write control endpoint [ 1263.552745][ T2360] pvrusb2: Invalid write control endpoint [ 1263.572389][ T2360] pvrusb2: Invalid write control endpoint [ 1263.578411][ T2360] pvrusb2: Invalid write control endpoint [ 1263.591826][ T2360] pvrusb2: Invalid write control endpoint [ 1263.604045][ T2360] pvrusb2: Invalid write control endpoint [ 1263.618622][ T2360] pvrusb2: Invalid write control endpoint [ 1263.624680][ T2360] pvrusb2: Invalid write control endpoint [ 1263.630630][ T2360] pvrusb2: Invalid write control endpoint [ 1263.741628][ T2360] pvrusb2: Invalid write control endpoint [ 1263.828056][ T2360] pvrusb2: Invalid write control endpoint [ 1263.858072][ T2360] pvrusb2: Invalid write control endpoint [ 1263.887625][ T2360] pvrusb2: Invalid write control endpoint [ 1263.959237][ T2360] pvrusb2: Invalid write control endpoint [ 1264.011011][ T2360] pvrusb2: Invalid write control endpoint [ 1264.056922][ T2360] pvrusb2: Invalid write control endpoint [ 1264.066445][T20266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1264.130007][ T2360] pvrusb2: Invalid write control endpoint [ 1264.166891][ T2360] pvrusb2: Invalid write control endpoint [ 1264.200509][ T2360] pvrusb2: Attached sub-driver cs53l32a [ 1264.464199][ T2360] pvrusb2: Invalid write control endpoint [ 1264.526771][ T2360] pvrusb2: Invalid write control endpoint [ 1264.576305][ T2360] pvrusb2: Invalid write control endpoint [ 1264.612246][ T2360] pvrusb2: Invalid write control endpoint [ 1264.661310][ T2360] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1264.686605][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1264.763786][ T2360] pvrusb2: Device being rendered inoperable [ 1264.795711][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1264.865942][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1264.905326][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1264.933255][ T2360] pvrusb2: Invalid write control endpoint [ 1264.962388][ T9] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.974434][ T9] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1264.987904][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1264.994531][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1265.013974][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.042563][ T9] usb 2-1: config 0 descriptor?? [ 1265.058315][ T2360] pvrusb2: Invalid write control endpoint [ 1265.082947][ T2360] pvrusb2: Invalid write control endpoint [ 1265.102572][ T2360] pvrusb2: Invalid write control endpoint [ 1265.124062][ T2360] pvrusb2: Invalid write control endpoint [ 1265.186154][ T2360] pvrusb2: Invalid write control endpoint [ 1265.205613][ T29] audit: type=1400 audit(1778192646.734:942): avc: denied { write } for pid=20267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.210572][ T2360] pvrusb2: Invalid write control endpoint [ 1265.263285][ T2360] pvrusb2: Invalid write control endpoint [ 1265.278754][ T2360] pvrusb2: Invalid write control endpoint [ 1265.293998][ T2360] pvrusb2: Invalid write control endpoint [ 1265.304244][ T2360] pvrusb2: Invalid write control endpoint [ 1265.332900][ T2360] pvrusb2: Invalid write control endpoint [ 1265.337200][ T29] audit: type=1400 audit(1778192646.854:943): avc: denied { write } for pid=20300 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.351497][ T2360] pvrusb2: Invalid write control endpoint [ 1265.389867][ T2360] pvrusb2: Invalid write control endpoint [ 1265.404131][ T2360] pvrusb2: Invalid write control endpoint [ 1265.415967][ T2360] pvrusb2: Invalid write control endpoint [ 1265.432120][ T2360] pvrusb2: Invalid write control endpoint [ 1265.444064][ T2360] pvrusb2: Invalid write control endpoint [ 1265.462242][ T2360] pvrusb2: Invalid write control endpoint [ 1265.468222][ T2360] pvrusb2: Invalid write control endpoint [ 1265.484098][ T2360] pvrusb2: Invalid write control endpoint [ 1265.491340][ T2360] pvrusb2: Invalid write control endpoint [ 1265.514618][ T2360] pvrusb2: Invalid write control endpoint [ 1265.530948][ T2360] pvrusb2: Invalid write control endpoint [ 1265.545129][ T2360] pvrusb2: Invalid write control endpoint [ 1265.563401][ T2360] pvrusb2: Invalid write control endpoint [ 1265.581669][ T2360] pvrusb2: Invalid write control endpoint [ 1265.597707][ T2360] pvrusb2: Invalid write control endpoint [ 1266.057524][ T2360] pvrusb2: Invalid write control endpoint [ 1266.063391][ T2360] pvrusb2: Invalid write control endpoint [ 1266.069518][ T2360] pvrusb2: Invalid write control endpoint [ 1266.078498][ T2360] pvrusb2: Invalid write control endpoint [ 1266.094392][ T2360] pvrusb2: Invalid write control endpoint [ 1266.115138][ T2360] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1266.199260][ T2360] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c) [ 1266.218072][ T2360] pvrusb2: Invalid write control endpoint [ 1266.243723][ T2360] pvrusb2: Invalid write control endpoint [ 1266.262561][ T2360] pvrusb2: Invalid write control endpoint [ 1266.274053][ T2360] pvrusb2: Invalid write control endpoint [ 1266.294000][ T2360] pvrusb2: Invalid write control endpoint [ 1266.299758][ T2360] pvrusb2: Invalid write control endpoint [ 1266.312274][ T2360] pvrusb2: Invalid write control endpoint [ 1266.324106][ T2360] pvrusb2: Invalid write control endpoint [ 1266.333937][ T2360] pvrusb2: Invalid write control endpoint [ 1266.364842][ T2360] pvrusb2: Invalid write control endpoint [ 1266.388430][ T2360] pvrusb2: Invalid write control endpoint [ 1266.418887][ T2360] pvrusb2: Invalid write control endpoint [ 1266.442651][ T2360] pvrusb2: Invalid write control endpoint [ 1266.476329][ T2360] pvrusb2: Invalid write control endpoint [ 1266.502425][ T2360] pvrusb2: Invalid write control endpoint [ 1266.527702][ T2360] pvrusb2: Invalid write control endpoint [ 1266.549361][ T2360] pvrusb2: Invalid write control endpoint [ 1266.549379][ T2360] pvrusb2: Invalid write control endpoint [ 1266.549391][ T2360] pvrusb2: Invalid write control endpoint [ 1266.549402][ T2360] pvrusb2: Invalid write control endpoint [ 1266.549413][ T2360] pvrusb2: Invalid write control endpoint [ 1266.550396][ T2360] pvrusb2: Attached sub-driver cs53l32a [ 1266.580023][ T29] audit: type=1400 audit(1778192648.104:944): avc: denied { write } for pid=20305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.725521][ T2360] pvrusb2: Invalid write control endpoint [ 1266.738193][ T2360] pvrusb2: Invalid write control endpoint [ 1266.753406][ T2360] pvrusb2: Invalid write control endpoint [ 1266.893803][ T2360] pvrusb2: Invalid write control endpoint [ 1266.900188][ T2360] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1266.930461][ T2360] pvrusb2: Device being rendered inoperable [ 1266.944248][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1266.958380][ T29] audit: type=1400 audit(1778192648.484:945): avc: denied { write } for pid=20330 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.001990][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1267.906307][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1267.915777][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1267.927914][ T9] usb 2-1: USB disconnect, device number 11 [ 1267.943725][T20338] netlink: 'syz.2.3460': attribute type 4 has an invalid length. [ 1267.951543][T20338] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3460'. [ 1267.966625][T20338] .`: renamed from bond0 (while UP) [ 1268.561163][T20352] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3462'. [ 1268.664222][ T5806] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1268.833975][ T5806] usb 4-1: Using ep0 maxpacket: 32 [ 1268.860475][ T5806] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1268.906549][ T5806] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1268.925007][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.939272][ T5806] usb 4-1: Product: syz [ 1268.960736][ T5806] usb 4-1: Manufacturer: syz [ 1268.980005][ T5806] usb 4-1: SerialNumber: syz [ 1268.987122][ T29] audit: type=1400 audit(1778192650.514:946): avc: denied { write } for pid=20341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.025426][ T5806] usb 4-1: config 0 descriptor?? [ 1269.048638][ T5806] hub 4-1:0.0: bad descriptor, ignoring hub [ 1269.075479][ T5806] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1269.212959][ T29] audit: type=1800 audit(1778192650.734:947): pid=20347 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3464" name="bus" dev="ramfs" ino=67487 res=0 errno=0 [ 1269.497311][ T29] audit: type=1400 audit(1778192651.004:948): avc: denied { write } for pid=20368 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.736869][ T5806] usb 4-1: USB disconnect, device number 20 [ 1271.225674][T20400] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.3474'. [ 1271.343987][ T5806] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 1271.610332][ T5806] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1271.683597][ T29] audit: type=1400 audit(1778192653.194:949): avc: denied { write } for pid=20378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.712017][T20410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1271.727089][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1271.747317][ T5806] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1271.759582][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1271.774564][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1271.831727][ T5806] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1271.856026][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1271.878391][ T5806] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1271.907924][T20417] fuse: Unknown parameter 'ÿæ0x0000000000000003' [ 1271.914405][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1271.914451][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1271.917600][ T5806] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1271.951142][T20417] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 1271.973380][ T29] audit: type=1400 audit(1778192653.494:950): avc: denied { relabelto } for pid=20416 comm="syz.5.3477" name="file0" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 1272.011119][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1272.037843][ T5806] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.060308][ T29] audit: type=1400 audit(1778192653.494:951): avc: denied { associate } for pid=20416 comm="syz.5.3477" name="file0" dev="tmpfs" ino=2975 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_unit_file_t:s0" [ 1272.091979][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1272.117679][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1272.146913][ T29] audit: type=1400 audit(1778192653.584:952): avc: denied { write } for pid=20419 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1272.170019][T20423] FAULT_INJECTION: forcing a failure. [ 1272.170019][T20423] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.187299][ T5806] usb 4-1: string descriptor 0 read error: -22 [ 1272.202007][ T5806] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1272.213712][T20423] CPU: 1 UID: 0 PID: 20423 Comm: syz.5.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.213739][T20423] Tainted: [L]=SOFTLOCKUP [ 1272.213745][T20423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1272.213761][T20423] Call Trace: [ 1272.213767][T20423] [ 1272.213774][T20423] dump_stack_lvl+0x100/0x190 [ 1272.213801][T20423] should_fail_ex.cold+0x5/0xa [ 1272.213826][T20423] should_failslab+0xc2/0x120 [ 1272.213847][T20423] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1272.213874][T20423] ? mas_preallocate+0x1105/0x14a0 [ 1272.213908][T20423] mas_preallocate+0x1105/0x14a0 [ 1272.213937][T20423] ? __pfx_mas_preallocate+0x10/0x10 [ 1272.213968][T20423] ? anon_vma_name+0x5a/0x250 [ 1272.213993][T20423] __split_vma+0x33d/0xd90 [ 1272.214021][T20423] ? __pfx___split_vma+0x10/0x10 [ 1272.214043][T20423] ? is_bpf_text_address+0x8a/0x1a0 [ 1272.214071][T20423] ? kernel_text_address+0x8d/0x100 [ 1272.214095][T20423] ? __kernel_text_address+0xd/0x30 [ 1272.214118][T20423] ? unwind_get_return_address+0x59/0xa0 [ 1272.214148][T20423] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1272.214177][T20423] ? mtree_range_walk+0x72b/0xb70 [ 1272.214198][T20423] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1272.214232][T20423] ? mas_walk+0x6ef/0x9b0 [ 1272.214261][T20423] __mmap_region+0x4aa/0x2da0 [ 1272.214291][T20423] ? __pfx___mmap_region+0x10/0x10 [ 1272.214319][T20423] ? __pfx___might_resched+0x10/0x10 [ 1272.214345][T20423] ? find_held_lock+0x2b/0x80 [ 1272.214364][T20423] ? process_measurement+0x4c8/0x2350 [ 1272.214388][T20423] ? process_measurement+0x4c8/0x2350 [ 1272.214421][T20423] ? process_measurement+0x1f4/0x2350 [ 1272.214449][T20423] ? find_held_lock+0x2b/0x80 [ 1272.214479][T20423] ? __lock_acquire+0x4a5/0x2630 [ 1272.214509][T20423] ? __lock_acquire+0x4a5/0x2630 [ 1272.214535][T20423] ? find_held_lock+0x2b/0x80 [ 1272.214553][T20423] ? is_bpf_text_address+0x8a/0x1a0 [ 1272.214615][T20423] mmap_region+0x35d/0x620 [ 1272.214645][T20423] ? __pfx_mmap_region+0x10/0x10 [ 1272.214672][T20423] ? shmem_get_unmapped_area+0x141/0x960 [ 1272.214700][T20423] ? selinux_mmap_addr+0x2b/0x110 [ 1272.214720][T20423] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1272.214736][T20423] ? security_mmap_addr+0x71/0x1e0 [ 1272.214766][T20423] ? __get_unmapped_area+0x255/0x3e0 [ 1272.214790][T20423] do_mmap+0xc63/0x12f0 [ 1272.214814][T20423] ? __pfx_do_mmap+0x10/0x10 [ 1272.214842][T20423] ? __pfx_down_write_killable+0x10/0x10 [ 1272.214872][T20423] vm_mmap_pgoff+0x29e/0x470 [ 1272.214899][T20423] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1272.214919][T20423] ? __fget_files+0x215/0x3d0 [ 1272.214944][T20423] ? __fget_files+0x21f/0x3d0 [ 1272.214970][T20423] ksys_mmap_pgoff+0x3cb/0x610 [ 1272.214990][T20423] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1272.215008][T20423] ? fput+0x79/0x100 [ 1272.215031][T20423] ? ksys_write+0x1ac/0x250 [ 1272.215049][T20423] ? __pfx_ksys_write+0x10/0x10 [ 1272.215070][T20423] __x64_sys_mmap+0x125/0x190 [ 1272.215095][T20423] do_syscall_64+0x10b/0xf80 [ 1272.215114][T20423] ? clear_bhb_loop+0x40/0x90 [ 1272.215136][T20423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.215153][T20423] RIP: 0033:0x7f453959cdd9 [ 1272.215169][T20423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.215185][T20423] RSP: 002b:00007f453a52d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1272.215203][T20423] RAX: ffffffffffffffda RBX: 00007f4539815fa0 RCX: 00007f453959cdd9 [ 1272.215215][T20423] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 1272.215226][T20423] RBP: 00007f453a52d090 R08: 0000000000000003 R09: 0000000000000000 [ 1272.215237][T20423] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 1272.215248][T20423] R13: 00007f4539816038 R14: 00007f4539815fa0 R15: 00007fff1ce25c18 [ 1272.215272][T20423] [ 1272.274682][ T29] audit: type=1400 audit(1778192653.634:953): avc: denied { rmdir } for pid=8428 comm="syz-executor" name="file0" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 1272.302453][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.751794][T20427] dummy0: entered promiscuous mode [ 1272.781978][ T5806] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1272.839226][T20427] macvlan2: entered promiscuous mode [ 1272.839255][T20436] dlm: no locking on control device [ 1272.857824][T20427] dummy0: left promiscuous mode [ 1273.032113][T20393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.069457][T20393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.167502][ T5806] IPVS: starting estimator thread 0... [ 1273.264314][T20450] IPVS: using max 41 ests per chain, 98400 per kthread [ 1273.354011][ T5806] usb 4-1: USB disconnect, device number 21 [ 1273.555885][T19110] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1273.651692][T20457] libceph: secret too big 289 [ 1273.715743][T19110] usb 6-1: device descriptor read/64, error -71 [ 1273.877937][T20476] veth1_vlan: entered allmulticast mode [ 1274.552375][T20475] veth1_vlan: left allmulticast mode [ 1274.599485][T19110] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1274.728854][ T29] audit: type=1400 audit(1778192656.244:954): avc: denied { write } for pid=20438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.775876][T19110] usb 6-1: device descriptor read/64, error -71 [ 1274.914609][T19110] usb usb6-port1: attempt power cycle [ 1275.089998][ T29] audit: type=1400 audit(1778192656.614:955): avc: denied { write } for pid=20490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.873139][T19110] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1276.189463][T19110] usb 6-1: device descriptor read/8, error -71 [ 1276.578418][ T29] audit: type=1400 audit(1778192658.104:956): avc: denied { write } for pid=20502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.850723][ T29] audit: type=1400 audit(1778192659.374:957): avc: denied { write } for pid=20538 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.057456][ T29] audit: type=1800 audit(1778192659.584:958): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3500" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1278.345068][ T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 1278.432537][ T29] audit: type=1400 audit(1778192659.954:959): avc: denied { write } for pid=20548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.507139][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1278.517133][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1278.530742][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1278.566520][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1278.620296][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3502'. [ 1278.640936][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1278.660011][ T29] audit: type=1400 audit(1778192660.164:960): avc: denied { write } for pid=20566 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.700970][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1278.716706][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1278.737558][T20568] overlayfs: failed to resolve 'fsname=lowerdir': -2 [ 1278.763435][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1278.797213][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1278.813841][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1278.830114][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1278.841388][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1278.856865][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1278.869676][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1278.882125][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1278.925805][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1278.932681][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1278.947865][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.958238][T17856] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1279.001672][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1279.114030][T17856] usb 6-1: Using ep0 maxpacket: 8 [ 1279.122990][T17856] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1279.149485][T17856] usb 6-1: config 0 has no interface number 0 [ 1279.186473][T17856] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1279.220721][T17856] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1279.268177][T17856] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1279.285413][T20549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.324402][T20549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.346960][T17856] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1279.416339][T17856] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1279.455405][T17856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.469026][ T5752] IPVS: starting estimator thread 0... [ 1279.516310][T17856] usb 6-1: config 0 descriptor?? [ 1279.549436][T17856] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1279.574011][T20583] IPVS: using max 48 ests per chain, 115200 per kthread [ 1279.674265][T17856] usb 2-1: USB disconnect, device number 12 [ 1279.809686][ T5752] usb 6-1: USB disconnect, device number 82 [ 1279.836049][ T5752] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 1280.269993][ T29] audit: type=1400 audit(1778192661.794:961): avc: denied { write } for pid=20573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.735235][ T5752] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1281.853715][ T29] audit: type=1400 audit(1778192663.374:962): avc: denied { write } for pid=20613 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.903982][ T5752] usb 2-1: Using ep0 maxpacket: 8 [ 1281.932988][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1281.968175][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.010718][ T5752] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1282.049892][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1282.078046][ T5752] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1282.098092][ T5752] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1282.113402][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.133293][ T5752] usb 2-1: config 0 descriptor?? [ 1282.279769][T18673] Bluetooth: hci4: urb ffff888058ebe300 submission failed (90) [ 1282.569403][ T29] audit: type=1400 audit(1778192664.094:963): avc: denied { write } for pid=20622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.817134][ T29] audit: type=1400 audit(1778192664.344:964): avc: denied { write } for pid=20655 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.061701][T18673] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1284.164326][ T9] usb 2-1: USB disconnect, device number 13 [ 1284.620669][ T29] audit: type=1400 audit(1778192666.144:965): avc: denied { write } for pid=20660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1284.956382][ T29] audit: type=1400 audit(1778192666.484:966): avc: denied { write } for pid=20690 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.112664][T20692] Illegal XDP return value 4294967294 on prog (id 255) dev syz_tun, expect packet loss! [ 1285.160800][T20692] overlayfs: failed to clone upperpath [ 1286.164084][ T5752] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1286.420636][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1286.581738][ T5752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1286.767091][ T5752] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1286.792467][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.599943][T20695] syz.3.3523 (20695): drop_caches: 2 [ 1287.620224][ T5752] usb 2-1: config 0 descriptor?? [ 1288.037969][T20731] 9p: Bad value for 'rfdno' [ 1289.351090][T20736] syz.4.3535 (20736): drop_caches: 2 [ 1290.591797][ T5752] usbhid 2-1:0.0: can't add hid device: -71 [ 1290.624641][ T5752] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1290.740766][ T5752] usb 2-1: USB disconnect, device number 14 [ 1291.234416][ T29] audit: type=1800 audit(1778192672.754:967): pid=20759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3541" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1291.636133][T18675] Bluetooth: hci1: command 0x0406 tx timeout [ 1291.642667][T18673] Bluetooth: hci6: command 0x0406 tx timeout [ 1291.807848][ T29] audit: type=1400 audit(1778192673.324:968): avc: denied { getopt } for pid=20768 comm="syz.1.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1292.632038][ T29] audit: type=1400 audit(1778192673.334:969): avc: denied { setattr } for pid=20768 comm="syz.1.3545" name="file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1292.889711][T20787] fuse: fd is not a fuse device [ 1292.913252][ T29] audit: type=1400 audit(1778192674.434:970): avc: denied { getopt } for pid=20783 comm="syz.2.3549" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1292.917643][T20787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3549'. [ 1292.934323][ T5752] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1292.956729][T20787] nbd: must specify at least one socket [ 1293.084178][ T5752] usb 2-1: Using ep0 maxpacket: 32 [ 1293.091991][ T5752] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 1293.109410][ T5752] usb 2-1: config 0 has no interface number 0 [ 1293.120050][ T5752] usb 2-1: too many endpoints for config 0 interface 66 altsetting 130: 163, using maximum allowed: 30 [ 1293.132451][ T5752] usb 2-1: config 0 interface 66 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1293.146765][ T5752] usb 2-1: config 0 interface 66 has no altsetting 0 [ 1293.155439][ T5752] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1293.185426][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.204857][ T5752] usb 2-1: Product: syz [ 1293.235937][ T5752] usb 2-1: Manufacturer: syz [ 1293.240585][ T5752] usb 2-1: SerialNumber: syz [ 1293.250320][ T5752] usb 2-1: config 0 descriptor?? [ 1293.500943][ T5752] usb 2-1: selecting invalid altsetting 3 [ 1293.507735][ T5752] comedi comedi5: could not set alternate setting 3 in high speed [ 1293.515689][ T5752] usbdux 2-1:0.66: driver 'usbdux' failed to auto-configure device. [ 1293.527772][ T5752] usbdux 2-1:0.66: probe with driver usbdux failed with error -22 [ 1293.538928][ T5752] usb 2-1: USB disconnect, device number 15 [ 1294.316997][T19110] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1294.390124][T20808] tipc: Started in network mode [ 1294.401770][T20808] tipc: Node identity ac14140f, cluster identity 4711 [ 1294.494549][T19110] usb 6-1: Using ep0 maxpacket: 32 [ 1294.500681][T20808] tipc: New replicast peer: 255.255.255.255 [ 1294.555502][T19110] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 1294.579351][T20808] tipc: Enabled bearer , priority 10 [ 1294.583049][T19110] usb 6-1: config 0 has no interface number 0 [ 1294.597681][T19110] usb 6-1: too many endpoints for config 0 interface 66 altsetting 130: 163, using maximum allowed: 30 [ 1294.598763][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.608916][T19110] usb 6-1: config 0 interface 66 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1294.619099][T20814] serio: Serial port ttyS3 [ 1294.628388][T19110] usb 6-1: config 0 interface 66 has no altsetting 0 [ 1295.391213][T19110] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1295.406151][T19110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.425864][T19110] usb 6-1: Product: syz [ 1295.444908][T19110] usb 6-1: Manufacturer: syz [ 1295.465155][T19110] usb 6-1: SerialNumber: syz [ 1295.477683][T16665] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 1295.486224][T19110] usb 6-1: config 0 descriptor?? [ 1295.507043][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1295.694042][ T5621] tipc: Node number set to 2886997007 [ 1295.760045][T19110] usb 6-1: selecting invalid altsetting 3 [ 1295.766471][T19110] comedi comedi5: could not set alternate setting 3 in high speed [ 1295.774292][T19110] usbdux 6-1:0.66: driver 'usbdux' failed to auto-configure device. [ 1295.786721][T19110] usbdux 6-1:0.66: probe with driver usbdux failed with error -22 [ 1295.804956][T19110] usb 6-1: USB disconnect, device number 83 [ 1296.110661][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1296.519213][T16665] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.530357][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 1296.547126][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1296.560127][ T9] usb 4-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 1296.577769][ T9] usb 4-1: Product: syz [ 1296.582325][T16665] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.596734][ T9] usb 4-1: Manufacturer: syz [ 1296.604449][ T9] usb 4-1: SerialNumber: syz [ 1296.614793][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1296.634289][ T9] usb 4-1: config 0 descriptor?? [ 1296.650453][ T9] pwc: Logitech ViewPort AV 100 webcam detected. [ 1296.661588][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1296.682806][T16665] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.691618][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1296.704024][T16665] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.723777][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1296.736605][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1296.757073][T16665] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.770451][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1296.819274][T16665] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.838216][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1296.864276][T16665] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1296.913477][T16665] usb 2-1: string descriptor 0 read error: -22 [ 1296.925867][T16665] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1296.959692][T20847] overlayfs: missing 'lowerdir' [ 1296.965890][T16665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.340204][T16665] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1297.431145][ T9] pwc: Failed to set LED on/off time (-71) [ 1297.440714][ T9] pwc: send_video_command error -71 [ 1297.497471][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1297.508121][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1297.549826][ T9] usb 4-1: USB disconnect, device number 22 [ 1297.551806][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.568084][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.831751][ T29] audit: type=1400 audit(1778192680.354:971): avc: denied { name_bind } for pid=20869 comm="syz.2.3571" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1299.012909][T20876] random: crng reseeded on system resumption [ 1299.038177][ T29] audit: type=1400 audit(1778192680.534:972): avc: denied { read } for pid=20875 comm="syz.4.3572" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1299.090219][T20876] Restarting kernel threads ... [ 1299.096133][T20876] Done restarting kernel threads. [ 1299.145797][ T5621] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 1299.157938][T20876] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1299.170002][T20876] binder: 20875:20876 ioctl c0306201 0 returned -14 [ 1299.305831][ T5621] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1299.322280][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1299.363169][ T5621] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1299.392303][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1299.407199][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1299.432562][ T5621] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1299.440748][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1299.475064][ T5621] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1299.510274][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1299.552698][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1299.590701][ T5621] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1299.600056][T20867] serio: Serial port ttyS3 [ 1299.627678][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1299.652771][ T5752] usb 2-1: USB disconnect, device number 16 [ 1299.688689][ T5621] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1299.761244][ T29] audit: type=1400 audit(1778192681.284:973): avc: denied { write } for pid=20855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1299.791071][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1299.828715][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1300.124223][ T29] audit: type=1804 audit(1778192681.554:974): pid=20899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3576" name="/newroot/23/file0" dev="tmpfs" ino=139 res=1 errno=0 [ 1300.642659][ T5621] usb 6-1: string descriptor 0 read error: -22 [ 1301.867485][ T5621] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1302.259812][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.378739][ T29] audit: type=1400 audit(1778192683.904:975): avc: denied { write } for pid=20905 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.453862][ T5621] usb 6-1: can't set config #168, error -71 [ 1302.501106][ T5621] usb 6-1: USB disconnect, device number 84 [ 1302.895507][T20916] serio: Serial port ttyS3 [ 1304.946878][ T5621] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 1305.169525][ T5621] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1305.199758][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1305.234768][T20943] FAULT_INJECTION: forcing a failure. [ 1305.234768][T20943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.259165][ T5621] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1305.295621][T20943] CPU: 1 UID: 0 PID: 20943 Comm: syz.4.3586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.295650][T20943] Tainted: [L]=SOFTLOCKUP [ 1305.295656][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1305.295667][T20943] Call Trace: [ 1305.295673][T20943] [ 1305.295680][T20943] dump_stack_lvl+0x100/0x190 [ 1305.295712][T20943] should_fail_ex.cold+0x5/0xa [ 1305.295737][T20943] strncpy_from_user+0x3b/0x2d0 [ 1305.295768][T20943] do_getname+0x78/0x390 [ 1305.295796][T20943] __x64_sys_execve+0x76/0xd0 [ 1305.295816][T20943] do_syscall_64+0x10b/0xf80 [ 1305.295837][T20943] ? clear_bhb_loop+0x40/0x90 [ 1305.295859][T20943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.295876][T20943] RIP: 0033:0x7fb2ac39cdd9 [ 1305.295891][T20943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.295907][T20943] RSP: 002b:00007fb2aa5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1305.295925][T20943] RAX: ffffffffffffffda RBX: 00007fb2ac615fa0 RCX: 00007fb2ac39cdd9 [ 1305.295936][T20943] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000200000000000 [ 1305.295947][T20943] RBP: 00007fb2aa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.295957][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.295967][T20943] R13: 00007fb2ac616038 R14: 00007fb2ac615fa0 R15: 00007ffc79b3fa08 [ 1305.295990][T20943] [ 1305.297597][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1305.759418][ T29] audit: type=1400 audit(1778192687.244:976): avc: denied { write } for pid=20909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.073255][ T5621] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1306.095594][ T5621] usb 6-1: unable to read config index 1 descriptor/start: -71 [ 1306.191196][ T5621] usb 6-1: can't read configurations, error -71 [ 1306.888499][ T29] audit: type=1400 audit(1778192688.404:977): avc: denied { write } for pid=20966 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.793215][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1307.893628][T20995] Cannot find add_set index 0 as target [ 1308.055202][T20999] dlm: no locking on control device [ 1308.063080][T21001] blktrace: Concurrent blktraces are not allowed on loop2 [ 1308.073616][ T3278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.198090][T20993] .`: (slave bond_slave_0): Releasing backup interface [ 1309.362020][T20993] bond_slave_0: entered promiscuous mode [ 1309.413439][T20993] bond_slave_0: entered allmulticast mode [ 1309.453963][ T5621] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1309.644063][ T5621] usb 4-1: device descriptor read/64, error -71 [ 1309.903989][ T5621] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1310.021915][ T3278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.114045][ T5621] usb 4-1: device descriptor read/64, error -71 [ 1310.190640][T21026] overlayfs: failed to resolve 'fsname=lowerdir': -2 [ 1310.292854][ T5621] usb usb4-port1: attempt power cycle [ 1310.557764][ T29] audit: type=1400 audit(1778192692.084:978): avc: denied { write } for pid=21008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.664471][ T5621] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1310.707312][ T5621] usb 4-1: device descriptor read/8, error -71 [ 1310.939827][ T3278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.974066][ T5621] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1311.026133][ T5621] usb 4-1: device descriptor read/8, error -71 [ 1311.144672][ T29] audit: type=1400 audit(1778192692.644:979): avc: denied { write } for pid=21038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1311.200586][ T5621] usb usb4-port1: unable to enumerate USB device [ 1312.512907][T19110] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1312.874220][T19110] usb 6-1: Using ep0 maxpacket: 8 [ 1313.118740][T19110] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1313.160736][T19110] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1313.216047][T19110] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1313.531588][ T3278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.546338][T19110] usb 6-1: config 0 has no interface number 0 [ 1313.573345][T19110] usb 6-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1313.640358][T21075] fuse: fd is not a fuse device [ 1313.655480][T19110] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1313.682946][T19110] usb 6-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1313.746886][T19110] usb 6-1: Product: syz [ 1313.781985][T19110] usb 6-1: Manufacturer: syz [ 1313.839289][T19110] usb 6-1: config 0 descriptor?? [ 1314.772756][ T29] audit: type=1400 audit(1778192696.294:980): avc: denied { write } for pid=21062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.853232][ T3278] bridge_slave_1: left allmulticast mode [ 1314.864036][ T3278] bridge_slave_1: left promiscuous mode [ 1314.876896][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.909301][ T3278] bridge_slave_0: left allmulticast mode [ 1314.922713][ T3278] bridge_slave_0: left promiscuous mode [ 1314.947352][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.015711][ T29] audit: type=1400 audit(1778192696.544:981): avc: denied { write } for pid=21094 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.072563][T21097] dlm: no locking on control device [ 1315.391590][T17839] usb 6-1: USB disconnect, device number 87 [ 1316.596906][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.632346][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.646250][ T3278] bond0 (unregistering): Released all slaves [ 1316.660994][T21107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.669962][T21107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.692356][T21107] bridge0: entered allmulticast mode [ 1316.731358][T21107] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1316.907076][ T3278] tipc: Left network mode [ 1317.137786][T21135] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3618'. [ 1317.407845][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1317.416723][ T3278] hsr_slave_0: left promiscuous mode [ 1317.448666][ T3278] hsr_slave_1: left promiscuous mode [ 1317.480229][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.507859][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.538162][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.572090][ T29] audit: type=1400 audit(1778192699.084:982): avc: denied { append } for pid=21147 comm="syz.3.3621" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1317.603353][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.632127][T21148] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 1317.651342][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.676746][ T3278] veth1_macvtap: left promiscuous mode [ 1317.700930][ T3278] veth0_macvtap: left promiscuous mode [ 1317.711089][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 1317.737936][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.740492][ T3278] veth1_vlan: left promiscuous mode [ 1317.757059][ T10] usb 2-1: config 0 descriptor?? [ 1317.770299][T21156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1317.793556][ T3278] veth0_vlan: left promiscuous mode [ 1317.937902][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1317.987525][ T29] audit: type=1400 audit(1778192699.514:983): avc: denied { write } for pid=21128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.269411][T21172] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1318.276123][T21172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1318.359720][T21178] f2fs: Unknown parameter 'discardi#' [ 1318.383124][T21172] vhci_hcd vhci_hcd.0: Device attached [ 1318.502263][ T29] audit: type=1400 audit(1778192700.024:984): avc: denied { write } for pid=21179 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.594152][T17839] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1318.701297][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1318.738790][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1318.769812][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1318.770353][ T3278] team0 (unregistering): Port device team_slave_1 removed [ 1318.812598][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1318.825557][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1318.837444][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1318.849572][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1318.871514][ T3278] team0 (unregistering): Port device team_slave_0 removed [ 1318.932249][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 1318.944579][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 1318.955454][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 1318.963813][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1318.974105][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1318.989200][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1319.000209][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1319.010339][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1319.020302][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1319.035196][ T10] pwc: Registered as video103. [ 1319.041553][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 1319.057915][ T10] usb 2-1: USB disconnect, device number 17 [ 1319.141330][T21174] vhci_hcd: connection reset by peer [ 1319.194301][ T6242] vhci_hcd vhci_hcd.4: stop threads [ 1319.200878][ T6242] vhci_hcd vhci_hcd.4: release socket [ 1319.221335][ T6242] vhci_hcd vhci_hcd.4: disconnect device [ 1319.333062][T21148] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1320.561505][ T29] audit: type=1800 audit(1778192702.084:985): pid=21206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3626" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1320.632049][ T29] audit: type=1800 audit(1778192702.154:986): pid=21207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3627" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1320.665838][T17856] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1320.825129][T17856] usb 4-1: Using ep0 maxpacket: 8 [ 1320.839738][T17856] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1320.866861][T17856] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1320.900829][ T29] audit: type=1400 audit(1778192702.424:987): avc: denied { write } for pid=21191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.926826][T17856] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1320.946665][T17856] usb 4-1: config 0 has no interface number 0 [ 1320.963832][T17856] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1321.007325][T17856] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1321.026537][T17856] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1321.060292][T17856] usb 4-1: Product: syz [ 1321.061025][T21206] No source specified [ 1321.085021][T17856] usb 4-1: Manufacturer: syz [ 1321.125359][T17856] usb 4-1: config 0 descriptor?? [ 1321.176101][ T29] audit: type=1400 audit(1778192702.694:988): avc: denied { write } for pid=21216 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1321.182733][T21208] overlayfs: failed to resolve './file0:/': -2 [ 1322.411198][T21236] hfs: can't find a HFS filesystem on dev nullb0 [ 1323.829486][T17839] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1324.400227][ T10] usb 4-1: USB disconnect, device number 27 [ 1324.626667][T21252] dlm: no locking on control device [ 1325.346120][T21255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1325.546618][T21253] netlink: 'syz.3.3634': attribute type 4 has an invalid length. [ 1325.843983][T17856] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1325.872232][ T29] audit: type=1400 audit(1778192707.394:989): avc: denied { write } for pid=21229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.035711][T17856] usb 6-1: device descriptor read/64, error -71 [ 1326.175453][ T5806] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1326.183145][ T29] audit: type=1400 audit(1778192707.704:990): avc: denied { write } for pid=21275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.284415][T17856] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1326.365436][ T5806] usb 4-1: Using ep0 maxpacket: 32 [ 1326.372554][ T5806] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1326.392697][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.415130][T17856] usb 6-1: device descriptor read/64, error -71 [ 1326.450846][ T5806] usb 4-1: config 0 descriptor?? [ 1326.489416][ T5806] as10x_usb: device has been detected [ 1326.515429][ T5806] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1326.535876][T17856] usb usb6-port1: attempt power cycle [ 1326.560237][ T5806] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1326.664631][T17839] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1326.745616][ T5806] as10x_usb: error during firmware upload part1 [ 1326.756688][ T5806] Registered device nBox DVB-T Dongle [ 1326.762470][ T5806] usb 4-1: USB disconnect, device number 28 [ 1326.865850][T17839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1326.886289][T17856] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1326.911774][T17839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1326.941657][T17839] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1326.953387][T17856] usb 6-1: device descriptor read/8, error -71 [ 1326.971892][ T5806] Unregistered device nBox DVB-T Dongle [ 1326.978785][ T5806] as10x_usb: device has been disconnected [ 1326.998847][T17839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.021580][T17839] usb 2-1: config 0 descriptor?? [ 1327.204186][T17856] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1327.246173][T17856] usb 6-1: device descriptor read/8, error -71 [ 1327.356044][T17856] usb usb6-port1: unable to enumerate USB device [ 1327.388038][ T29] audit: type=1400 audit(1778192708.904:991): avc: denied { write } for pid=21300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.733281][ T29] audit: type=1804 audit(1778192709.214:992): pid=21335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3644" name="/newroot/72/file0" dev="tmpfs" ino=426 res=1 errno=0 [ 1328.628095][ T29] audit: type=1400 audit(1778192710.154:993): avc: denied { write } for pid=21337 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.275106][T17839] usbhid 2-1:0.0: can't add hid device: -32 [ 1433.953841][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1433.960821][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5596/1:b..l P15086/1:b..l P48/1:b..l P21341/3:b..l [ 1433.972656][ C1] rcu: (detected by 1, t=10502 jiffies, g=142733, q=601 ncpus=2) [ 1433.980446][ C1] task:dhcpcd-run-hook state:R running task stack:27688 pid:21341 tgid:21341 ppid:21300 task_flags:0x400040 flags:0x00080000 [ 1433.994529][ C1] Call Trace: [ 1433.997805][ C1] [ 1434.000732][ C1] __schedule+0x10e9/0x6820 [ 1434.005235][ C1] ? find_held_lock+0x2b/0x80 [ 1434.009909][ C1] ? page_table_check_set+0x486/0x920 [ 1434.015276][ C1] ? __pfx___schedule+0x10/0x10 [ 1434.020125][ C1] ? xas_find+0x32c/0x8e0 [ 1434.024447][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1434.029809][ C1] preempt_schedule_common+0x42/0xc0 [ 1434.035089][ C1] preempt_schedule_thunk+0x16/0x30 [ 1434.040296][ C1] _raw_spin_unlock+0x3e/0x50 [ 1434.044965][ C1] filemap_map_pages+0x15ac/0x2140 [ 1434.050084][ C1] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1434.055721][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1434.061193][ C1] ? finish_task_switch.isra.0+0x384/0x1010 [ 1434.067093][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1434.072566][ C1] do_fault+0x985/0x1750 [ 1434.076817][ C1] __handle_mm_fault+0x187d/0x2a00 [ 1434.081930][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 1434.087214][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1434.092670][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 1434.097878][ C1] handle_mm_fault+0x36d/0xa20 [ 1434.102645][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 1434.107760][ C1] exc_page_fault+0x6f/0xd0 [ 1434.112259][ C1] asm_exc_page_fault+0x26/0x30 [ 1434.117097][ C1] RIP: 0033:0x7fe2d6ac32a0 [ 1434.121499][ C1] RSP: 002b:00007ffe2c2909c8 EFLAGS: 00010246 [ 1434.127553][ C1] RAX: 0000000000000000 RBX: 00007ffe2c2909e8 RCX: 00007fe2d6b04670 [ 1434.135510][ C1] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 00007fe2d6c05b60 [ 1434.143468][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 3c00000040001201 [ 1434.151424][ C1] R10: 00007fe2d696af50 R11: 0000000000000246 R12: 000055c12a5834d0 [ 1434.159382][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1434.167351][ C1] [ 1434.170358][ C1] task:kworker/u8:3 state:R running task stack:23496 pid:48 tgid:48 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1434.183922][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1434.190163][ C1] Call Trace: [ 1434.193430][ C1] [ 1434.196351][ C1] __schedule+0x10e9/0x6820 [ 1434.200856][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1434.206053][ C1] ? __pfx___schedule+0x10/0x10 [ 1434.210900][ C1] preempt_schedule_irq+0x50/0x90 [ 1434.215914][ C1] irqentry_exit+0x1fe/0x790 [ 1434.220501][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1434.225950][ C1] RIP: 0010:lock_release+0x23/0x310 [ 1434.231138][ C1] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 55 53 48 89 fb 48 83 ec 18 65 48 8b 2d 3d 38 26 12 48 89 6c 24 10 48 89 f5 <0f> 1f 44 00 00 65 8b 05 55 38 26 12 83 f8 07 0f 87 63 02 00 00 48 [ 1434.250733][ C1] RSP: 0018:ffffc90000b972a0 EFLAGS: 00000286 [ 1434.256784][ C1] RAX: 0000000000000001 RBX: ffffffff8e7e54e0 RCX: ffffffff9177e601 [ 1434.264741][ C1] RDX: 0000000000000000 RSI: ffffffff81b7c1ae RDI: ffffffff8e7e54e0 [ 1434.272699][ C1] RBP: ffffffff81b7c1ae R08: 0000000000000001 R09: 0000000000000007 [ 1434.280658][ C1] R10: 0000000000000200 R11: 000000000000cec2 R12: ffffc90000b973a8 [ 1434.288617][ C1] R13: ffffc90000b97358 R14: ffffc90000b97db0 R15: ffffc90000b9738c [ 1434.296582][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1434.301782][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1434.306983][ C1] unwind_next_frame+0x3c3/0x2090 [ 1434.312004][ C1] ? process_one_work+0xa0e/0x1980 [ 1434.317109][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1434.323252][ C1] arch_stack_walk+0x94/0xf0 [ 1434.327843][ C1] ? worker_thread+0x5ef/0xe50 [ 1434.332603][ C1] ? ieee802_11_parse_elems_full+0x177/0x3720 [ 1434.338663][ C1] stack_trace_save+0x8e/0xc0 [ 1434.343327][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1434.348694][ C1] kasan_save_stack+0x30/0x50 [ 1434.353357][ C1] ? kasan_save_stack+0x30/0x50 [ 1434.358194][ C1] ? kasan_save_track+0x14/0x30 [ 1434.363032][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1434.367790][ C1] ? __kmalloc_noprof+0x301/0x850 [ 1434.372810][ C1] ? ieee802_11_parse_elems_full+0x177/0x3720 [ 1434.378864][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f80 [ 1434.385098][ C1] ? ieee80211_iface_work+0xbff/0x13e0 [ 1434.390542][ C1] ? cfg80211_wiphy_work+0x410/0x570 [ 1434.395828][ C1] ? process_one_work+0xa0e/0x1980 [ 1434.400964][ C1] kasan_save_track+0x14/0x30 [ 1434.405627][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1434.410220][ C1] __kmalloc_noprof+0x301/0x850 [ 1434.415071][ C1] ieee802_11_parse_elems_full+0x177/0x3720 [ 1434.420959][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1434.425982][ C1] ? find_held_lock+0x2b/0x80 [ 1434.430649][ C1] ? debug_object_activate+0x331/0x490 [ 1434.436102][ C1] ? debug_object_activate+0x331/0x490 [ 1434.441557][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1434.447871][ C1] ? trace_contention_end.constprop.0+0x141/0x1a0 [ 1434.454296][ C1] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f80 [ 1434.460359][ C1] ? rcu_is_watching+0x12/0xc0 [ 1434.465123][ C1] ? pick_eevdf+0x4a9/0x7d0 [ 1434.469624][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1434.476129][ C1] ? rcu_is_watching+0x12/0xc0 [ 1434.480886][ C1] ? trace_contention_end+0x122/0x170 [ 1434.486266][ C1] ? kcov_remote_start+0x374/0x660 [ 1434.491381][ C1] ieee80211_iface_work+0xbff/0x13e0 [ 1434.496662][ C1] cfg80211_wiphy_work+0x410/0x570 [ 1434.501774][ C1] process_one_work+0xa0e/0x1980 [ 1434.506717][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1434.512089][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1434.517720][ C1] worker_thread+0x5ef/0xe50 [ 1434.522311][ C1] ? kthread+0x13a/0x450 [ 1434.526542][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1434.531647][ C1] kthread+0x370/0x450 [ 1434.535709][ C1] ? __pfx_kthread+0x10/0x10 [ 1434.540294][ C1] ret_from_fork+0x72b/0xd50 [ 1434.544878][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1434.549982][ C1] ? __switch_to+0x800/0x1100 [ 1434.554656][ C1] ? __pfx_kthread+0x10/0x10 [ 1434.559240][ C1] ret_from_fork_asm+0x1a/0x30 [ 1434.564013][ C1] [ 1434.567020][ C1] task:kworker/u8:0 state:R running task stack:22344 pid:15086 tgid:15086 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1434.580580][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1434.586824][ C1] Call Trace: [ 1434.590089][ C1] [ 1434.593011][ C1] __schedule+0x10e9/0x6820 [ 1434.597503][ C1] ? debug_object_activate+0x331/0x490 [ 1434.602953][ C1] ? debug_object_activate+0x331/0x490 [ 1434.608419][ C1] ? __pfx___schedule+0x10/0x10 [ 1434.613262][ C1] ? mark_held_locks+0x40/0x70 [ 1434.618022][ C1] preempt_schedule_irq+0x50/0x90 [ 1434.623036][ C1] irqentry_exit+0x1fe/0x790 [ 1434.627620][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1434.633592][ C1] RIP: 0010:lock_release+0x19e/0x310 [ 1434.638877][ C1] Code: ff 65 0f c1 05 5b 7e 26 12 83 f8 01 0f 85 28 01 00 00 9c 58 f6 c4 02 0f 85 13 01 00 00 41 f7 c6 00 02 00 00 0f 85 c0 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 36 26 12 0f 85 4e 01 00 00 48 83 c4 [ 1434.658472][ C1] RSP: 0018:ffffc90006bef2a0 EFLAGS: 00000206 [ 1434.664526][ C1] RAX: 0000000000000046 RBX: ffffffff8e7e54e0 RCX: ffffc90006bef2ac [ 1434.672493][ C1] RDX: 0000000000000003 RSI: ffffffff8defabb7 RDI: ffffffff8c1c3780 [ 1434.680479][ C1] RBP: ffffffff81b7c1ae R08: 0000000000000001 R09: 0000000000000007 [ 1434.688454][ C1] R10: 0000000000000200 R11: 000000000001761c R12: ffff88803288ca00 [ 1434.696419][ C1] R13: ffffc90006bef358 R14: 0000000000000202 R15: 0000000000000004 [ 1434.704384][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1434.709595][ C1] unwind_next_frame+0x3c3/0x2090 [ 1434.714615][ C1] ? kasan_save_track+0x14/0x30 [ 1434.719457][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1434.725604][ C1] arch_stack_walk+0x94/0xf0 [ 1434.730194][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1434.734955][ C1] ? ieee802_11_parse_elems_full+0x177/0x3720 [ 1434.741011][ C1] stack_trace_save+0x8e/0xc0 [ 1434.745676][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1434.751034][ C1] ? __schedule+0x10fb/0x6820 [ 1434.755710][ C1] kasan_save_stack+0x30/0x50 [ 1434.760375][ C1] ? kasan_save_stack+0x30/0x50 [ 1434.765212][ C1] ? kasan_save_track+0x14/0x30 [ 1434.770172][ C1] kasan_save_track+0x14/0x30 [ 1434.774837][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1434.779424][ C1] __kmalloc_noprof+0x301/0x850 [ 1434.784276][ C1] ieee802_11_parse_elems_full+0x177/0x3720 [ 1434.790158][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1434.796312][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1434.802116][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1434.807142][ C1] ? tick_program_event+0xb0/0x140 [ 1434.812251][ C1] ? hrtimer_reprogram+0x165/0x6c0 [ 1434.817364][ C1] ? timerqueue_linked_add+0x260/0x430 [ 1434.822817][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1434.829135][ C1] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1434.834769][ C1] ? mark_held_locks+0x40/0x70 [ 1434.839526][ C1] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1434.845406][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1434.850595][ C1] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1434.856476][ C1] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f80 [ 1434.862540][ C1] ? __schedule+0x10fb/0x6820 [ 1434.867216][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1434.873718][ C1] ? __pfx___schedule+0x10/0x10 [ 1434.878571][ C1] ? kcov_remote_start+0x374/0x660 [ 1434.883680][ C1] ieee80211_iface_work+0xbff/0x13e0 [ 1434.888957][ C1] cfg80211_wiphy_work+0x410/0x570 [ 1434.894071][ C1] process_one_work+0xa0e/0x1980 [ 1434.899015][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1434.904388][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1434.910019][ C1] worker_thread+0x5ef/0xe50 [ 1434.914615][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1434.919722][ C1] ? kthread+0x13a/0x450 [ 1434.923955][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1434.929058][ C1] kthread+0x370/0x450 [ 1434.933120][ C1] ? __pfx_kthread+0x10/0x10 [ 1434.937705][ C1] ret_from_fork+0x72b/0xd50 [ 1434.942291][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1434.947400][ C1] ? __switch_to+0x800/0x1100 [ 1434.952075][ C1] ? __pfx_kthread+0x10/0x10 [ 1434.956667][ C1] ret_from_fork_asm+0x1a/0x30 [ 1434.961464][ C1] [ 1434.964481][ C1] task:syz-executor state:R running task stack:22640 pid:5596 tgid:5596 ppid:5595 task_flags:0x400100 flags:0x00080800 [ 1434.977964][ C1] Call Trace: [ 1434.981235][ C1] [ 1434.984159][ C1] __schedule+0x10e9/0x6820 [ 1434.988673][ C1] ? __pfx___schedule+0x10/0x10 [ 1434.993519][ C1] ? mark_held_locks+0x40/0x70 [ 1434.998279][ C1] preempt_schedule_irq+0x50/0x90 [ 1435.003294][ C1] irqentry_exit+0x1fe/0x790 [ 1435.007880][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1435.013853][ C1] RIP: 0010:pte_offset_map_lock+0x107/0x320 [ 1435.019738][ C1] Code: 4c 03 3d 0c 8e bb 0b 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 28 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 de 01 00 00 4d 8b 7f 28 <4c> 89 ff e8 f1 da 2b 09 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 [ 1435.039336][ C1] RSP: 0018:ffffc90003b3fa40 EFLAGS: 00000246 [ 1435.045394][ C1] RAX: dffffc0000000000 RBX: 0000000072f71067 RCX: ffffffff8261223e [ 1435.053351][ C1] RDX: 1ffffd4000397b8d RSI: ffffffff8261211e RDI: ffffea0001cbdc68 [ 1435.061311][ C1] RBP: ffff88807cc5a170 R08: 0000000000000007 R09: 0000000000000000 [ 1435.069270][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888072f71878 [ 1435.077228][ C1] R13: 1ffff92000767f4a R14: ffffc90003b3fdb8 R15: ffff88807cce1ea0 [ 1435.085194][ C1] ? pte_offset_map_lock+0x1de/0x320 [ 1435.090468][ C1] ? pte_offset_map_lock+0xbe/0x320 [ 1435.095660][ C1] ? __pfx_pte_offset_map_lock+0x10/0x10 [ 1435.101280][ C1] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1435.106730][ C1] ? vm_normal_page+0x1d5/0x390 [ 1435.111571][ C1] ? find_held_lock+0x2b/0x80 [ 1435.116242][ C1] finish_mkwrite_fault+0xe9/0x300 [ 1435.121342][ C1] ? do_page_mkwrite+0x263/0x440 [ 1435.126270][ C1] do_wp_page+0xabb/0x4350 [ 1435.130691][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1435.135534][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1435.140555][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1435.145929][ C1] __handle_mm_fault+0x1ab6/0x2a00 [ 1435.151040][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 1435.156319][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1435.161774][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 1435.166981][ C1] handle_mm_fault+0x36d/0xa20 [ 1435.171743][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 1435.176857][ C1] exc_page_fault+0x6f/0xd0 [ 1435.181353][ C1] asm_exc_page_fault+0x26/0x30 [ 1435.186190][ C1] RIP: 0033:0x7fa0c7c7b3e7 [ 1435.190592][ C1] RSP: 002b:00007fff28e89430 EFLAGS: 00010202 [ 1435.196651][ C1] RAX: 00007fa0c5d0c000 RBX: 000055555c555910 RCX: 0000000000000004 [ 1435.204610][ C1] RDX: 0000000000001c20 RSI: 000055555c54ff50 RDI: 0000000000000010 [ 1435.212569][ C1] RBP: 00007fff28e89930 R08: 000000000000009b R09: 000055555c54ff60 [ 1435.220531][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff28e89770 [ 1435.228487][ C1] R13: 00007fff28e89560 R14: 585858582e7a7973 R15: 00007fff28e894b0 [ 1435.236458][ C1] [ 1435.239462][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g142733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1435.250900][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1435.260852][ C1] rcu: RCU grace-period kthread stack dump: [ 1435.266722][ C1] task:rcu_preempt state:I stack:28704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1435.278629][ C1] Call Trace: [ 1435.281895][ C1] [ 1435.284816][ C1] __schedule+0x10e9/0x6820 [ 1435.289308][ C1] ? rcu_is_watching+0x12/0xc0 [ 1435.294071][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1435.299271][ C1] ? __pfx___schedule+0x10/0x10 [ 1435.304115][ C1] ? rcu_is_watching+0x12/0xc0 [ 1435.308876][ C1] preempt_schedule_irq+0x50/0x90 [ 1435.313891][ C1] irqentry_exit+0x1fe/0x790 [ 1435.318476][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1435.323922][ C1] RIP: 0010:add_timer+0x62/0x90 [ 1435.328768][ C1] Code: 7b 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 37 48 8b 73 10 48 89 df ba 04 00 00 00 e8 3e f2 ff ff b9 79 14 00 5b c3 cc cc cc cc e8 ae 79 14 00 90 0f 0b 90 e8 a5 [ 1435.348364][ C1] RSP: 0018:ffffc90000157ba0 EFLAGS: 00000282 [ 1435.354430][ C1] RAX: 0000000000000000 RBX: ffffc90000157bd0 RCX: fffff5200002af59 [ 1435.362387][ C1] RDX: ffff88801e2b8000 RSI: ffffffff81f40fae RDI: 0000000000000001 [ 1435.370344][ C1] RBP: 1ffff9200002af76 R08: 0000000000000001 R09: 0000000000000000 [ 1435.378300][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000157bd0 [ 1435.386257][ C1] R13: 1ffffffff1c81e50 R14: ffff88801e2b8000 R15: dffffc0000000000 [ 1435.394221][ C1] ? __mod_timer+0x40e/0xca0 [ 1435.398809][ C1] schedule_timeout+0x122/0x280 [ 1435.403646][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1435.409006][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1435.414284][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1435.420081][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1435.425539][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1435.430297][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1435.435576][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 1435.441033][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1435.445963][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1435.451150][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1435.456950][ C1] rcu_gp_kthread+0x179/0x230 [ 1435.461620][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1435.466807][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1435.472609][ C1] ? __kthread_parkme+0x18c/0x230 [ 1435.477624][ C1] ? kthread+0x13a/0x450 [ 1435.481856][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1435.487044][ C1] kthread+0x370/0x450 [ 1435.491102][ C1] ? __pfx_kthread+0x10/0x10 [ 1435.495684][ C1] ret_from_fork+0x72b/0xd50 [ 1435.500270][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.505375][ C1] ? __switch_to+0x800/0x1100 [ 1435.510046][ C1] ? __pfx_kthread+0x10/0x10 [ 1435.514628][ C1] ret_from_fork_asm+0x1a/0x30 [ 1435.519401][ C1] [ 1435.522406][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1435.528711][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1435.533900][ C0] NMI backtrace for cpu 0 [ 1435.533914][ C0] CPU: 0 UID: 0 PID: 21342 Comm: syz.5.3646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1435.533934][ C0] Tainted: [L]=SOFTLOCKUP [ 1435.533939][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1435.533947][ C0] RIP: 0010:__lock_acquire+0x31d/0x2630 [ 1435.533965][ C0] Code: 45 89 ce 49 89 c1 eb 42 48 8d 04 80 48 8d 04 80 48 8d 34 c5 60 7b 11 96 0f b6 86 c4 00 00 00 84 c0 74 12 41 38 c7 44 0f 47 f8 <80> be c6 00 00 00 02 44 0f 44 f8 41 83 c6 01 48 83 c3 28 44 3b b5 [ 1435.533978][ C0] RSP: 0018:ffffc90000007c40 EFLAGS: 00000046 [ 1435.533990][ C0] RAX: 0000000000000002 RBX: ffff888027f655b8 RCX: 0000000000000002 [ 1435.533999][ C0] RDX: 0000000000000002 RSI: ffffffff9611d2e0 RDI: 0000000000000040 [ 1435.534008][ C0] RBP: ffff888027f64a00 R08: 0000000000000001 R09: 0000000000000000 [ 1435.534018][ C0] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888027f655e0 [ 1435.534026][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000002 [ 1435.534036][ C0] FS: 00007f453a50c6c0(0000) GS:ffff888124375000(0000) knlGS:0000000000000000 [ 1435.534052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1435.534061][ C0] CR2: 00007f453a50bff8 CR3: 000000003cdce000 CR4: 00000000003526f0 [ 1435.534071][ C0] Call Trace: [ 1435.534076][ C0] [ 1435.534083][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1435.534103][ C0] lock_acquire+0x1b1/0x370 [ 1435.534120][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 1435.534139][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1435.534160][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1435.534174][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 1435.534192][ C0] debug_object_deactivate+0x135/0x3b0 [ 1435.534210][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1435.534230][ C0] ? timerqueue_linked_add+0x260/0x430 [ 1435.534250][ C0] __hrtimer_run_queues+0x2f0/0xa00 [ 1435.534273][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1435.534290][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1435.534309][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1435.534326][ C0] [ 1435.534330][ C0] [ 1435.534335][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1435.534355][ C0] RIP: 0010:write_comp_data+0x3a/0x90 [ 1435.534370][ C0] Code: 65 48 8b 3d f0 23 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 cc 16 00 00 85 c0 74 f1 <8b> 87 a8 16 00 00 83 f8 03 75 e6 48 8b 87 b0 16 00 00 8b bf ac 16 [ 1435.534383][ C0] RSP: 0018:ffffc90006effb08 EFLAGS: 00000246 [ 1435.534393][ C0] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffffffff81fbfea8 [ 1435.534402][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888027f64a00 [ 1435.534411][ C0] RBP: ffffffff81f49cab R08: 0000000000000001 R09: 0000000000000000 [ 1435.534420][ C0] R10: 0000000000000001 R11: 0000000000000324 R12: 0000000000000001 [ 1435.534428][ C0] R13: ffff8880b853c580 R14: ffff8880b853c501 R15: 0000000000000000 [ 1435.534437][ C0] ? clock_was_set+0x62b/0x870 [ 1435.534458][ C0] ? trace_ipi_send_cpu.constprop.0+0x68/0x230 [ 1435.534477][ C0] trace_ipi_send_cpu.constprop.0+0x68/0x230 [ 1435.534494][ C0] smp_call_function_many_cond+0x136f/0x1700 [ 1435.534511][ C0] ? __pfx_retrigger_next_event+0x10/0x10 [ 1435.534533][ C0] ? clock_was_set+0x1c3/0x870 [ 1435.534552][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1435.534570][ C0] ? mark_held_locks+0x40/0x70 [ 1435.534586][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1435.534602][ C0] clock_was_set+0x62b/0x870 [ 1435.534624][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1435.534644][ C0] ? rcu_is_watching+0x12/0xc0 [ 1435.534663][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1435.534679][ C0] do_settimeofday64+0x330/0x4d0 [ 1435.534695][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 1435.534710][ C0] ? security_capable+0x80/0x260 [ 1435.534724][ C0] ? hidinput_configure_usage+0x1f90/0x7df0 [ 1435.534743][ C0] ? capable+0xd3/0xf0 [ 1435.534762][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 1435.534780][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 1435.534794][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1435.534809][ C0] ? rcu_is_watching+0x12/0xc0 [ 1435.534829][ C0] do_syscall_64+0x10b/0xf80 [ 1435.534845][ C0] ? clear_bhb_loop+0x40/0x90 [ 1435.534860][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.534874][ C0] RIP: 0033:0x7f453959cdd9 [ 1435.534885][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.534898][ C0] RSP: 002b:00007f453a50c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1435.534911][ C0] RAX: ffffffffffffffda RBX: 00007f4539816090 RCX: 00007f453959cdd9 [ 1435.534920][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 1435.534928][ C0] RBP: 00007f4539632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1435.534937][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.534945][ C0] R13: 00007f4539816128 R14: 00007f4539816090 R15: 00007fff1ce25c18 [ 1435.534959][ C0]