last executing test programs: 4m47.881919642s ago: executing program 32 (id=437): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r4, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r6, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000004c0)={'multiq3\x00', [0x4f27, 0x5, 0x4010000, 0x2f, 0x66, 0xcc7, 0x1, 0x80007, 0x2, 0x100, 0x9, 0x2, 0xeffeffff, 0x5, 0x0, 0x80000101, 0x7, 0x1a449, 0x3, 0x40020003, 0x100208d, 0xf, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x8, 0x0, 0xe9]}) ppoll(&(0x7f0000000140)=[{r7, 0x8000}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) unshare(0x40400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) 2m28.28183515s ago: executing program 33 (id=976): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x1, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x26455f14adc0284b}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)="7bde898718a6c6c9237cb3183110240767593c40c38b46f5aaeb010661a7f3a802772dbeacbb719d97936097c7800c3d28a0234a87eba4fc532c7a3e1d96bc18a74bc61cf414ee3274f2ad278b47c77c0e45053d47029eb9ef0b3ac4a709f6dd73fdf65e6cc009bb98827b4d1716e42b0498dad14ebb339fe30c9128e7661135a70a36cc3a0198de1ee50ac13750797f4ea33fabeecb09d217918384bb28ef8d0367ab68e1ed5e3d832450b228c8c1feb0f8ec2d26694be70a3d212c9a304aa07e798a47ba95b016f13bfb0c94e2f325c1a8fc53ec4e06f0c27f07ed17b85387eb107c2ae94bc026472c78b61bc85fbb101d4c3a6ee4", 0xf6}, {&(0x7f00000000c0)="92309e6d23dd22b738dccfb217c3fe033ba644e321e9f54a1e7ec77550f2e0272b4806d914c9f23c3732ebae91b667771f0d5abb4436b0d81cb607cc7cfa30391ec6bbfdf6b477eeae64afd922c6b7aab5", 0x51}], 0x2}}], 0x1, 0x20048814) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x7, 0x1000000, 0x1000000068ff, 0x5, 0x9, 0x3], 0xffffffffffffffff, 0x202}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x7, 0x1, 0x2, 0x4, 0x2, 0x4, 0x8, 0x1, 0x7, 0x2, 0x4, 0x3, 0x4}, {0x80, 0x4963, 0xff, 0x0, 0x8, 0x8, 0x40, 0xd6, 0x4, 0x6, 0x2, 0x5, 0x5}, {0x94b5, 0x4, 0x8, 0xc, 0x9, 0x7, 0x1, 0x0, 0x4, 0x5, 0x2, 0x0, 0xa}], 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m17.334450993s ago: executing program 34 (id=964): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) preadv(r0, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1, 0x0, 0x7f) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) 2m13.848909559s ago: executing program 35 (id=973): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x101, 0x0, 0x7f, 0x2f, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 1m32.498414671s ago: executing program 6 (id=1115): socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) bind$ax25(r2, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @default, @default, @default, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 1m29.513888043s ago: executing program 6 (id=1125): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1]) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x22) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m28.116216502s ago: executing program 6 (id=1131): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x80242, 0xf0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001b000)={'team0\x00'}) close(0xffffffffffffffff) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 1m28.062336982s ago: executing program 7 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x20000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1610c1, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1610c1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x3, 0x0, 'queue0\x00', 0xffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x0, 0xfc1ec622713b9c07, {0x3, 0x1, 0x1, 0x3, 0xa}, 0xffffffff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x0, 0xfc1ec622713b9c07, {0x3, 0x1, 0x1, 0x3, 0xa}, 0xffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) 1m27.81528768s ago: executing program 6 (id=1135): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1]) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m27.718340654s ago: executing program 7 (id=1136): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000400), 0x90200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0048a3401c0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r5}}, {{0x6, 0x0, 0xb}, {0x65}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000029bd7000ffdbdf25020000000800020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x2, &(0x7f00000001c0)="74f2"}], 0x1}) 1m26.815351523s ago: executing program 6 (id=1139): syz_open_dev$sndctrl(&(0x7f0000000040), 0x20002, 0x0) r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000300)=ANY=[@ANYBLOB="000f05000000050f05000074e0e3d00ebf43e9b378510793c29054a64017c192a84c60bb531e19e6e50e5d9044adec05028907405d6de15ef40bcd8573fe5900d48306"], &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0x0, 0x8, "94deb4f1", "c1bd2546"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5a, 0x80, 0x9, 0x1, 0x8, 0x8000, 0x9}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x4f, 0x4}}], 0x10547e4c5d63eddf}, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x1000009, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$VT_DISALLOCATE(r3, 0x5608) 1m26.159543757s ago: executing program 6 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) (fail_nth: 1) 1m25.715779984s ago: executing program 36 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) (fail_nth: 1) 1m24.326455072s ago: executing program 7 (id=1150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000ac0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1ffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002de6c33c31b845b1da8fc404898a5f2e1fcfad8a8af91374562e5c3a702fb1ea2d0f9abb8d92041a08b8a5191e3e2aead25eecac419e4c9bdf273df106bfbc46715633b6a3149e1d2c7a1c2b29f1c23efc95e8b3cc41d7c3e1d38f4939249fc4b8a2d63d2c1611937a267779d495108eb5daf5721551268881cee15d6afcbe78191781b4ab21754da1538720aad28415109e83eea6c0c4536c3c962b7cc62856b560f5d5cfc25946af48b0b436cee4b7620e566ba7726d38a85175be7baa1986153eef6969e3e048eb51e00a3db50f9acb968f537aa59f62279236c38120ce4cf1af", @ANYRES16, @ANYBLOB="0100000000000000000018000000"], 0x14}}, 0x0) r5 = getpid() ptrace(0x4208, r5) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) close(0x4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$isdn(0x22, 0x2, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) kcmp(r6, 0xffffffffffffffff, 0x4, r0, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m21.117262086s ago: executing program 7 (id=1158): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1]) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m20.567645806s ago: executing program 7 (id=1162): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15000000ffffffff09000000010000", @ANYBLOB="01"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m16.444738195s ago: executing program 7 (id=1171): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x893, 0x2, 0x2340, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x7, 0xff, 0x3, {{0x3c, 0x4, 0x3, 0x21, 0xf0, 0x67, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local, {[@cipso={0x86, 0x11, 0x3, [{0x2, 0x4, "5dce"}, {0x2, 0x7, "f50a6caf05"}]}, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x7, 0xb, "54148857ce2ec049d4"}, {0x1, 0x9, "64137573ee06e7"}, {0x2, 0x2}, {0x7, 0xc, "b753d8c396c0f1c64055"}, {0x5, 0x9, "2117ecee79a624"}, {0x7, 0x7, "e90b17f4ad"}, {0x2, 0xa, "553f15d005296d0a"}, {0x2, 0x4, "08b4"}]}, @timestamp={0x44, 0xc, 0x71, 0x0, 0x2, [0x6, 0x10]}, @end, @lsrr={0x83, 0x17, 0xc1, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @rr={0x7, 0xb, 0xe2, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}, @generic={0x83, 0xd, "98cb36698858e9df23f5d7"}, @timestamp_prespec={0x44, 0x24, 0xaf, 0x3, 0x8, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x7fff}, {@multicast2, 0xfffffff8}]}, @lsrr={0x83, 0x23, 0xe8, [@empty, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @multicast1, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) ioctl$FICLONE(r0, 0x40049409, r1) signalfd4(r1, &(0x7f00000000c0)={[0x7f]}, 0x8, 0x80800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r3, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xd}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffff, 0xa, 0x400, 0x0, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xa}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r6}, 0x38) 1m16.019210852s ago: executing program 37 (id=1171): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x893, 0x2, 0x2340, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x7, 0xff, 0x3, {{0x3c, 0x4, 0x3, 0x21, 0xf0, 0x67, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local, {[@cipso={0x86, 0x11, 0x3, [{0x2, 0x4, "5dce"}, {0x2, 0x7, "f50a6caf05"}]}, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x7, 0xb, "54148857ce2ec049d4"}, {0x1, 0x9, "64137573ee06e7"}, {0x2, 0x2}, {0x7, 0xc, "b753d8c396c0f1c64055"}, {0x5, 0x9, "2117ecee79a624"}, {0x7, 0x7, "e90b17f4ad"}, {0x2, 0xa, "553f15d005296d0a"}, {0x2, 0x4, "08b4"}]}, @timestamp={0x44, 0xc, 0x71, 0x0, 0x2, [0x6, 0x10]}, @end, @lsrr={0x83, 0x17, 0xc1, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @rr={0x7, 0xb, 0xe2, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}, @generic={0x83, 0xd, "98cb36698858e9df23f5d7"}, @timestamp_prespec={0x44, 0x24, 0xaf, 0x3, 0x8, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x7fff}, {@multicast2, 0xfffffff8}]}, @lsrr={0x83, 0x23, 0xe8, [@empty, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @multicast1, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) ioctl$FICLONE(r0, 0x40049409, r1) signalfd4(r1, &(0x7f00000000c0)={[0x7f]}, 0x8, 0x80800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r3, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xd}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffff, 0xa, 0x400, 0x0, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xa}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r6}, 0x38) 1m7.563920199s ago: executing program 3 (id=1191): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) 1m5.850570903s ago: executing program 3 (id=1194): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) syz_io_uring_setup(0x73d3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x1, 0x80, 0xffffffff, 0x6e1, 0x10, 0x0, 0xffffffff, 0x3, 0x0, 0x3, 0x0, 0xe, &(0x7f0000000000)=[0x20000000], 0x1, 0x0}) 1m3.557365665s ago: executing program 3 (id=1198): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000000500000004000000ffffffff80000400", @ANYRES32, @ANYBLOB="c40500100000000000000000001c801700200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000700000000000000080000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x41, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x7, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r2, r3], 0x0, 0x10, 0xc}, 0x94) 1m3.146648876s ago: executing program 3 (id=1199): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1]) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x22) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m2.518677456s ago: executing program 3 (id=1200): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000200000000000000070000009500000000000000f85bb3a8809518e9cb9e24aefd79e493ed673e59dd25b39a04c1d5f27b7deee1eb3bedf5259afc74855c48c4bcbb5cd4aaa56f4ab2f2259cbe33d6c06f1a28b3b01890a5a5cb116569d9d5dac14755c45cb52f5453a3a67f961f1c0f1de6a33ae17eff8504425ecc2c68aad04b34b9ebd48846ac042cb3c7dfa153924a6bb0763ae728abb776d00bee15bda74b35dec551701a63993ac0ade664fa"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x47, 0x70, 0xe0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xae, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x991}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x0, 0xd}}}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x110, 0xff, 0x1, 0xd, 0x20, 0x4}, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000c40)=@string={0x6, 0x3, "98016974"}}]}) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) 1m2.195216334s ago: executing program 3 (id=1201): pipe2$watch_queue(&(0x7f0000001180), 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x73, 0x8, 0x34325258, 0x700, 0x3, [{0xe7, 0xc}, {0x8, 0x74}, {0x9, 0x6}, {0xd}, {0x686, 0x3}, {0xe}, {0xd784, 0x3}, {0x9, 0x8}], 0x60, 0x10, 0x8, 0x1, 0x4}}) 1m1.792894895s ago: executing program 38 (id=1201): pipe2$watch_queue(&(0x7f0000001180), 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x73, 0x8, 0x34325258, 0x700, 0x3, [{0xe7, 0xc}, {0x8, 0x74}, {0x9, 0x6}, {0xd}, {0x686, 0x3}, {0xe}, {0xd784, 0x3}, {0x9, 0x8}], 0x60, 0x10, 0x8, 0x1, 0x4}}) 1m1.456308611s ago: executing program 2 (id=1205): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() msgrcv(0x0, &(0x7f0000000400)={0x0, ""/239}, 0xf7, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x62001) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="ea0000000344", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) process_mrelease(0xffffffffffffffff, 0x0) 58.550527469s ago: executing program 2 (id=1209): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001b000)={'team0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 57.256737945s ago: executing program 2 (id=1212): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts-aes-aesni,blake2s-128-arm)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601040000000000000000000000090500050000000000050005000200080005000400000000000500050002000000050001000700000005000100070000000900020073797a30000000000c00077b0500140009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000017c0)=@nl=@unspec, 0x80, &(0x7f0000001740)=[{&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x6}, 0x9}], 0x1, 0x40000022, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x34}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r8, 0x1, 0x0, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7}}]}, 0x60}}, 0xd0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="9544c5ba55dc5675"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 55.886522994s ago: executing program 2 (id=1218): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x22) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 55.513188597s ago: executing program 2 (id=1220): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001b000)={'team0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 55.03466193s ago: executing program 2 (id=1221): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) syz_io_uring_setup(0x73d3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x1, 0x80, 0xffffffff, 0x6e1, 0x10, 0x0, 0xffffffff, 0x3, 0x0, 0x3, 0x0, 0xe, &(0x7f0000000000)=[0x20000000], 0x1, 0x0}) 54.592421612s ago: executing program 39 (id=1221): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) syz_io_uring_setup(0x73d3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x1, 0x80, 0xffffffff, 0x6e1, 0x10, 0x0, 0xffffffff, 0x3, 0x0, 0x3, 0x0, 0xe, &(0x7f0000000000)=[0x20000000], 0x1, 0x0}) 50.575817241s ago: executing program 9 (id=1230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0xffffffffffffff27, &(0x7f00000002c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0x2}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x66}) msgget(0x0, 0x200) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) mq_timedreceive(r7, &(0x7f0000000500)=""/194, 0xc2, 0x8e1f, &(0x7f0000000400)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) close_range(r4, r8, 0x0) capget(&(0x7f0000000240)={0x19980330}, &(0x7f0000000340)={0x7, 0x80000001, 0x2, 0x3, 0x6, 0x7b33572b}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12017330e89fa00000feffffff5f0530c2acb60102030109c49a7d2a4e2a55c44bfe9eef021200010000000009040000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007101240000000000851000008b19b8f50e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x200005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 47.180467607s ago: executing program 9 (id=1234): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000ac0)={0xfb, "58cf24090f402f26bca8eb1982f0f96370d3b439824025d93140c01d38fb7da0bb78fc2fe406f0a7b424d3e05f4c76f71d0be92de43b09849d969d944d329658b3a1ae19a16a5a080acf66fc4aea24b762e8ce3d65ac49284f8e124bfbeeaa748df517e357a40ec794ba231e83607c6d658e5361d5286dec6c04aef29f00edc3747b0784ddcb486691a3addf3f08b5d14c9afba928c78fe2a9205091302141705277ee88105aa5f07fc29f6bc246e7706cd8d4eaf95de10d5dc677d7085cc9c012477ca2465a1eec3fcf9fcbeda4bc90fa4d678536c3e034af4f03da25f43a3ad1564cd9c1c6e36759c599bbe3bcf6c302e28cbac76c8c0488e75baa6246b25bc775486a73461153be7720001062d7635896ab651493ea3aaba4bca1f9565593949f45d5a2bbc45ee008bfddb832049a629fc7154d2b32d23210cd534bfac9de1bb46ea14a690a25b15e7e838800a7a689ea8eb18c0cc4d4912ca13420fe147f9bc9a63a577caf05ce5217103ce22c67d1fc51821145a6f22a237ca589cda1e6c5672346eaf2bbc69b63d704aa76933ec7cc73e938f57e722260858663f72e6a29fc4443e6129de6a25253d1d43e8f31cbab8936487e6012bdc7b9ed355e72d15890f0ba281d351525335f361dc4451e3ca79580a41f23f4bd94b58f4da086678ef245ac477d07e8c8751c45d4974b57ecc0b972e9c549c0dbeccb5ce2b9a5d6"}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="17003300"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r10 = socket$inet6(0xa, 0x80000, 0x2245) r11 = socket$inet6(0xa, 0x1, 0x84) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) setsockopt$inet6_int(r11, 0x29, 0x18, 0x0, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x1c, 0x0, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) bind$inet6(r12, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 46.852194965s ago: executing program 9 (id=1236): pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x76d6dd6aeaa76b2d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc287}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x0, 0x10001}, 0x0) timerfd_create(0x9, 0x800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 45.251928416s ago: executing program 9 (id=1238): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1]) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x22) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 44.665373428s ago: executing program 9 (id=1240): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x924a, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000000ffe7400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_setup(0x4562, &(0x7f0000000000)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x14, 0x18, {0x1}}], 0x18}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x80044dfb, 0xffffffffffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r11, 0x6) 43.266440832s ago: executing program 9 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, r1, 0x2f, 0x2028, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000200)=0x48, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x2) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000006c0)={{0x5, 0x0, 0x1, 0x6, 'syz1\x00', 0x10001}, 0x1, [0x7, 0x800, 0x800000000, 0xd, 0xd18, 0x6, 0x9, 0x3, 0xfffffffffffff000, 0x9, 0x2, 0xffffffffffffffff, 0x1, 0x400, 0x2, 0x1, 0x9, 0x9, 0x2, 0x146bf227, 0x7, 0x5, 0xa, 0x1, 0xfffffffffffffffb, 0x9, 0x7, 0x5, 0x6903fcd9, 0x7ff, 0x6, 0x7, 0x8, 0xf, 0x2, 0x7fff, 0x6, 0x7e, 0x37, 0x0, 0x100000001, 0x4, 0x7, 0x401, 0x6, 0x2, 0x0, 0x9, 0x400, 0x7f6aaa55, 0x5, 0x2, 0x7, 0x6, 0x5, 0x7fffffffffffffff, 0x0, 0x9, 0x0, 0x8000000000fff, 0x6, 0x2, 0x7, 0x2, 0x0, 0x9, 0x1695b04f, 0xc, 0x98f, 0x800, 0x7, 0x4, 0x1, 0x6, 0x1, 0x0, 0x100000002, 0x7, 0x6, 0x45a, 0x2, 0xb, 0x4, 0x2, 0x3, 0x10001, 0x40, 0x0, 0xfffffffffffffff8, 0x9, 0x1000, 0x48, 0xb687, 0x1, 0xe1, 0xaf31, 0x6, 0xffff, 0x615, 0xe8, 0xffffffff, 0x3ab0, 0x7, 0xd904, 0x8000000000000000, 0x3, 0x600, 0x4, 0x5, 0x8001, 0x7f, 0xfffffffffffffff8, 0x10001, 0xf, 0x0, 0x1, 0xb, 0x9, 0x78, 0x9, 0x5, 0xfffffffffffffffc, 0x80, 0x0, 0x8000, 0x2, 0x7ff, 0x800001]}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @loopback}, {0x2, 0x4e22, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "45cc07", 0x8, 0x2b, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@fragment={0x29, 0x0, 0xa, 0x1, 0x0, 0xf, 0x68}]}}}}}, 0x0) 42.524794648s ago: executing program 40 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, r1, 0x2f, 0x2028, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000200)=0x48, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x2) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000006c0)={{0x5, 0x0, 0x1, 0x6, 'syz1\x00', 0x10001}, 0x1, [0x7, 0x800, 0x800000000, 0xd, 0xd18, 0x6, 0x9, 0x3, 0xfffffffffffff000, 0x9, 0x2, 0xffffffffffffffff, 0x1, 0x400, 0x2, 0x1, 0x9, 0x9, 0x2, 0x146bf227, 0x7, 0x5, 0xa, 0x1, 0xfffffffffffffffb, 0x9, 0x7, 0x5, 0x6903fcd9, 0x7ff, 0x6, 0x7, 0x8, 0xf, 0x2, 0x7fff, 0x6, 0x7e, 0x37, 0x0, 0x100000001, 0x4, 0x7, 0x401, 0x6, 0x2, 0x0, 0x9, 0x400, 0x7f6aaa55, 0x5, 0x2, 0x7, 0x6, 0x5, 0x7fffffffffffffff, 0x0, 0x9, 0x0, 0x8000000000fff, 0x6, 0x2, 0x7, 0x2, 0x0, 0x9, 0x1695b04f, 0xc, 0x98f, 0x800, 0x7, 0x4, 0x1, 0x6, 0x1, 0x0, 0x100000002, 0x7, 0x6, 0x45a, 0x2, 0xb, 0x4, 0x2, 0x3, 0x10001, 0x40, 0x0, 0xfffffffffffffff8, 0x9, 0x1000, 0x48, 0xb687, 0x1, 0xe1, 0xaf31, 0x6, 0xffff, 0x615, 0xe8, 0xffffffff, 0x3ab0, 0x7, 0xd904, 0x8000000000000000, 0x3, 0x600, 0x4, 0x5, 0x8001, 0x7f, 0xfffffffffffffff8, 0x10001, 0xf, 0x0, 0x1, 0xb, 0x9, 0x78, 0x9, 0x5, 0xfffffffffffffffc, 0x80, 0x0, 0x8000, 0x2, 0x7ff, 0x800001]}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @loopback}, {0x2, 0x4e22, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "45cc07", 0x8, 0x2b, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@fragment={0x29, 0x0, 0xa, 0x1, 0x0, 0xf, 0x68}]}}}}}, 0x0) 13.329564288s ago: executing program 5 (id=1310): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x9, 0x80010, 0xffffffffffffffff, 0x3000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r2}, 0x10) r3 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39b5eaee25558f362e700"}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000080)={0x10000, 0x2, 0x0, 0x0, 0x3}) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x67, 0xdb, 0x8b, 0x10, 0x52b, 0x1803, 0x3e75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x3d, 0x4, 0x0, 0xea, 0x61, 0x1b}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.549745883s ago: executing program 0 (id=1322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b040000000000000000020073ce26fff07eb82301800a0001006d61746368000000300c02800800024000000001180003000aec3ae6579d978966587abb37b8a6fa071d1f820a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140400001100010000000000000000000000000ad578e12e286ea34cd6bd57a4947a6f08afda1bdc27e25140904e199e27e82a651fe721a71f37a183045275cc1d87859aea32fa537b908868ba8c9be292b1ecdb47fd3fd6eb9f9fc41b3013000000000000"], 0x98}}, 0x4048010) 8.531269567s ago: executing program 1 (id=1323): pipe(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="4100020001001f", 0x7) (fail_nth: 3) 8.4178405s ago: executing program 0 (id=1324): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x4b0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x1000000003, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) ioctl(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) socket(0x10, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 8.370568409s ago: executing program 4 (id=1325): socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x700000000000000, &(0x7f0000000040)={0x10000d4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x0, 0x2, 0x8, 0x3, 0xfffffffd, 0x0, 0x0, 0x3}) 8.079810277s ago: executing program 5 (id=1326): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/233, 0xe9}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/37, 0x25}], 0x9, &(0x7f0000000a80)=""/119, 0x77}, 0x100}], 0x1, 0x40012020, &(0x7f0000000600)={r2, r3+10000000}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r4, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 8.067491277s ago: executing program 1 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x7f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 6.966978457s ago: executing program 1 (id=1328): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000300)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x0, 0xb, 0xcc, {0xcc, 0x10, "85899360c811248a261d7d01c2fabba9dfb039a94ff6659c76105c99d8005abb2f6b92e6f7b6ba3189572d77b6e56433cc17a88872a5f87e5169298e98c0b36e9627c77673dc67e577134725171cbda8c072cb394c49af6714f3b682df74ac8d5100cf234dbdcdd1f665070eadc9078c45aedd06d51b35636514f839aa261e8db2a19acff81ba1aff7b2f9d792030e40c57916c0913459c212d8ae8f1fc488ce3ee93bae1146ad4d63454d4fe867c2fff167f2c6175dc3bf64dd22e6124936cc752db6470a1696c49858"}}, &(0x7f0000000180)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "cb01d7f5c762f7f14fe507846a400640ee84c67c99a3a45902e6cdb183bc24efc787cc8a20c85d34e87d537701b22189b50005f092cf6a9885f2661c0a101bd877a84bf31696dde09d635efb277566340e253906924e99339c793f77f555274e5fbc7a8c2b3fe4fe36a923f88c7017b40a4180476ad72300889a076b91670dc6aaa13d338ebb55fe488002d0f151f1afd9d5968d23f9752d53a8056f9294d2ee0c9399c967"}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000340)={0x20, 0x10, 0xfc, "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"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)={0x21, 0x0, 0x4, "cd40f351"}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400000a0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) 6.896990124s ago: executing program 8 (id=1329): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x40000003}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x80000000008, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20042845}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x8) 6.854039854s ago: executing program 4 (id=1330): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) timer_create(0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x1, @remote, 0xa}, 0x1c) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x3c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) 6.809645208s ago: executing program 5 (id=1331): syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 6.641790005s ago: executing program 5 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x80242, 0xf0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001b000)={'team0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 6.632109225s ago: executing program 0 (id=1333): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) eventfd2(0x9, 0x80800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$inet(0x2, 0x3, 0x2) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x5e) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 6.053920498s ago: executing program 0 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) 5.93681283s ago: executing program 4 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b040000000000000000020073ce26fff07eb82301800a0001006d61746368000000300c02800800024000000001180003000aec3ae6579d978966587abb37b8a6fa071d1f820a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140400001100010000000000000000000000000ad578e12e286ea34cd6bd57a4947a6f08afda1bdc27e25140904e199e27e82a651fe721a71f37a183045275cc1d87859aea32fa537b908868ba8c9be292b1ecdb47fd3fd6eb9f9fc41b3013000000000000"], 0x98}}, 0x4048010) 5.894007524s ago: executing program 8 (id=1336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) userfaultfd(0x80000) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000001200)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRES32=r0], 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0"], 0x1c}}, 0x0) 3.807416641s ago: executing program 1 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000180)='./file0\x00', 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2000000000000116}}, 0x40) 3.767589894s ago: executing program 5 (id=1338): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r0, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x76d6dd6aeaa76b2d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc287}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x0, 0x10001}, 0x0) timerfd_create(0x9, 0x800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.770546975s ago: executing program 1 (id=1339): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000200000000000000070000009500000000000000f85bb3a8809518e9cb9e24aefd79e493ed673e59dd25b39a04c1d5f27b7deee1eb3bedf5259afc74855c48c4bcbb5cd4aaa56f4ab2f2259cbe33d6c06f1a28b3b01890a5a5cb116569d9d5dac14755c45cb52f5453a3a67f961f1c0f1de6a33ae17eff8504425ecc2c68aad04b34b9ebd48846ac042cb3c7dfa153924a6bb0763ae728abb776d00bee15bda74b35dec551701a63993ac0ade664fa"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r4, 0x0, 0x0) 2.432465081s ago: executing program 8 (id=1340): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1f00}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) close(r0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001000000000000000000140003002001"], 0x114}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000004040)=0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r12, r11, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004080)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r15 = getgid() write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004500)={0x8, {"e8787b41ff612fb5154022348fab2705086818bc356422b5b7d213dcb6a93a551ea2307977437d02bb916cf77447fbc6e507253a0a1329eaf3aca3add885588bd751a7ce5ebc268276af3122bb77e9b4df02ae9076d893b32c20de63e14b8949bdaea6d78e767292353f544f4e6993d4831c32c6138fff1dc8f7e0b8515050de8556c7551299f00c530df515714123346fd23dbb9c0caf8d2bc16a82e1553fb8cb613c47d8b223a21a76331e61e2d1938b1ecf11d07d275f4ad3c5d80b2d6ef7d9011c96335479179e471cb48ecaa6319986626396c557405e36bc491542cd3b7c1daf151926705b32b6638a81de58fa79407a0466f6a8d594e027718d09d1f789142eb415acc46085628f3bd313cf63f0295e94286d0ba7817e09c144481ad305b34d9e570cb916635c3b73b341a564b09ffd2195ee4f798cfc322e541e241d74cc55d6806a04c81bb2ed882d9ead6fa32b32a361406b869b8bcfe009708fd0ca011ac6464e752baccdb37425398682bb7a7206235a3527a05cb4c65b777d9317d12543ce4a5621e1ff1d7f75cd2621b7b634567368bc56f468f8b756ee70daaa8dc41cebe1ab0f556fb6f8ffbdcdf756baf9025dd143727abfa3454e5e623fdb46d2c74372e2d65514e940f455f98118c09d99cf7d3a643fa33161c3f12e4b3d269cafe6d293c50e985ca9505c1973177947b3d0067e76cec12077b3a962b830c25ec30c1fbba6ffb81b822c39699bf651c6b2b3e98317f86aff9c3fd89abaa5dcd3558f6a9831058667884f7dc0e65731bbdcdf6429829d4db71562add87594714de892a089b50bacb6060fe2639af23d15050b20a85ee699067e3ddbf095e81e6c310491f580c6bdbf5e8c31759838e2bd4f2b68032dfec0a96a1d608ea425ebf4ea49a05df1b80c53290d573e629a3d0b3056f8344acd84acf504ce59fe725e8493129aeb3205268bb42f40a350dd591d3af47f94d73033d2984488068aa6fc918878cf6479b1cf0ff1aee132e55b0e0de6564390aacd36cc3b9144347ed7e015af33c0898e7135b8a3a2e7269d1d7ae139bb955fbe86781b3eff8f14e5d553c01f66f4a999ec02e08159853dedd7ffd42e41337f0679c59126af9b31429c13e7f9072c01215f141e8e66e6093340073f691ae6abf767c2cf7cca1db83d030747d4024fbf5b3801d839f3bba851b60f76b3df3b751d96331e440fe0d9edaf20f22ab1d0812ec176d4da920c3ee1be47b2959f103877ffd07f03a7a6047a4b8681155be47f668a39335dacc3c43f43230c8ad99919e9eeeb3aa8473274b32ff0138c9b5ac04ffcbb0cd993b13dfc29a502e6d47d2086bed4069424be116d51f82064886aab41a5e4a8f7d1ca0bc2051802b4e2aef704d566956a692c744ab78151db30ad6471aaeab64209b865eb350c368918ef177ef66aec0f9213c2d12ae297cc1a67a5b52e3d711bfbcc876a9fce561ef1a96623598f472ee0bcc41834aac717a02409d41a6206857ca91c49033aacb776419140c59075e27f94314759ddb7253caeabb990c46c1fd8e491d0b64aba17db81c58e1d58788ce25674d81414d382d29ae174d6b1b54b7e787bcf3e76d2a51435e87998c01214b32cc6e4bd929c41ff37413efd6658cf80678d5cac0663607984671db4424f960a843859b1900b9f2a624f2496a5f1498aabcd67f044f51fad43b9a6e803394ab58447251a95d70777c9fee7447d3392c699574a500e474ccc8c98a9024f4ec557606f30adfa034c553fa0af11298fa3c2a78f0f87c2b1a7d364f731f556dfba1062b6d84ab99f482304221ca4811e1b5035639f2a481c8c4caf3fd6e800d5b6a402572d673057cfed562218f26881f60f12a2202742901d5a30ced60be69d98c9b128f32918eadf7800d003757d3418c9a6314fc23a1672bb9b6c3131ab026bafedc966237669200c841ab290fddad2111f444bd8e84214b551a05b3a67d865e6b0bb18e3266fdad21557478db74f78fbbc5f07ecfcfcb728ab2fa800cce323ec39a59063f3db65b039e09f1e8c7b4251b3d5ee682743eada9f80e558b4ea012964997d87e36fa7ef2e717a1dbddecc57f365066ccd2a7617b041feb7c381da39ca13a2d0d123a3314cf322e335acfa881c9fb253b984dce56e298f9b4bd1d6d5365abe009b4e4c0294b4f4ed0230726c4e5edf7d4c9f73c6448ae0f1aa1643da61a2b4974baca5f6f8f0e4ba90f8a681afc55d466ae5397de55bf87e87d3ea22845c59a1781dc0cbbfa279c0c129a6502f9c5dff60a203cf8f7ec66d628dc62c8b775c31590731da61519a6ea3c7fe383657693579945bca73a77341d82bba8fd63879f69f00e238bf26babd40ec540e02f9be528fdee61c63561cd80399cf0c2c04b8e4a3223865d364c06c6cebbc077d095bda1e0ab6e776c7fdf797195e99c58be9023ba91685bc1456970dff6879a534d8f35a8883dcd8a70a3a2fd291f81dd82398090f2aae59ee3e6510930242c627bfa933329d289869a86432ccb77fc17651425f59ae3e3493bf348d955c82a29d4b02f5bbfb90bb3a9cf7264de5f7b37378755454173dc52ccf5d243ddcdc31abf2c3df9779328ea1f23409565007f0e0725749b63a791e956c220e2b9591b294e41b5320f125c2f198cf9f7c39080707e7179fa8c607f1ac22488c7eddfb8f2ba2a54ee553e01937399b43596b018f64be9a8c4882b1ed8b9adbc3ce3acd31f660bb86bd5b13079632a15bd8b60536f623d73c6f56e6ec66cc9a0c1c62753e7cc6f3fb16ded4d205966b6fd89ba9d1e32dd2443f173a012858fad26a2a7edd1164d245505f6825174ebd6f72e51835bd17fe62345b99341f35c28aa7cd4e5825c51f94c137d5dd02ef0b48337f3be8578ab28499e3d608378735e0751e6a54b0de788649334dbe1aeb731e8ebec11b1f252e729dab2a0235585ad6f3a4d95dbae0469fcb6bc77ec3e493dfff77a7f0d47cc4e783c8c525b18528e004df6da7a2342cdc269ba9a3ad30b8f4e500cceb70947f6aa02385d9b6de9aff12e98767e78434b7126f0b92d19dcd5fcf583f9e44c2ed52f3dc4bd0fdf2ca94eada1ac6ecab2980c5c6670ce60a22aeadf1bf2a8a98d8d947881ab58056f4ca0129e5a294f58379403ee664b3d42e27d348eeec9bae20fa2cf03f256d7339326e10d1013a18a6669f098ae2746a30268df900b7560704d328891f8fe0d48eaac481e812f30fa7dd4851bef050f7385b59b3fa52110a6942cc270b399d6f5cf6053bfd454331a8bd3b80599d062f1f4e3f0fe3f63eb31a229dcff06114b1f973870863f5f31380b6f57a83d10c70872c67ecc1b18052ea55c979c5b5bd29f426e1423dceb07db0f684ab602fcd16b8f59783a0e3f8e593858a64d03c62e2bd4d5167a36936738a3b6630dec076ad04e7e50a9dfbe05cd988ce503437612fc20a3bac8aeb9107a284cc256aedc332fc20e4f1cbfb3944f5dfbb3fe5fc7908184d443ea4530ea6ecf9cb6c4a0b4d50f670040a30ed8aac942c4047309287fb60ac05cfd7198e40fc054e0c09775f09b7939e6fa036c0d5a4efe951f7157d502dff605a2af717128ec12e3b90b5c282306760cab8de36cb4c16342e3d25bceb0454becef2761804057f20a1f910d009de3491af0ce1721676e7d4758282f500018979bdecf55a11f86b8106f407b0d2216b599f3d210df275b5128faea206cffa2efab544e777a0e6ab8d9f57c7a4c87228a61d2a955963024ad95ab397b703f62e1302d850c2706cddb9d823ea28d6004c0c1283c38f64e527e690331418d083f88cbe6757db26fca4f495cef81bf40ec281e39d5e6855ee254d924b1c73ec1200ff51986d2f65201b7b64e2922d31fdfe4e102a14e78e118c1c504601e9e85009598b711872be63a79b4bd9012f545b3005456d1bdb7c93f0e19add076a299da26eb8368de2e9556ab6515ddd20a0ffdbf11f84b590f0ebd54a49f1110cb64d3190466d4cd4ba448c551a93f0f9eb12d89cacbb8d2539ff327060c66784093c4d4563b047fa197c16f15f58f7ed26268f83797543fc5ee520f4a196d5dc3e7ce5ec41b23130b4d0be06d080ff9a3f2a54e2f40856f1e0e2b3d298d8f53701bf7763a4636ec702213dcb33f7b9c6d651363df7f81704dc930aaca93a389c214a88546f0877d6101bdba1696240859ffdebe44d70e7a9c67bc61db94b8c21101af004bfb24ddc184b72d1adc119322ce1aa84a0359153c3eaab804ba14575ea7e4e65f17a618772c977bdfa11bcafeed03514f68752754b4732f8d0823a31f25e96dd8f30fe237e015f164c88a13a664a829339b46fd1d7c910aa9b4dd6e638ed431a9573935b7ce9b64294553f620227513cc133f7f869e784d485ac1aec5a9818a774c54ace213e4d3f7ad726703c9ddabde59a711c9f096667e874d6471b2587e9ae718c558b20145c855658570ca5ddb0a420e9fc7dcb04ec44f63cea9f94e822d46b215bf6600355cca8a9fe153551276f85d6843deaf6b34db6edbac860caf42aec5328fc471510a1b1ea0bbd8da3289291156a4bc52d6b4f0c690f80cef7a12835e787907108657581f0549438c10e2f540bb0df6225cd8545781c295af4ad5cf1f702c0a0a484a336c91c76378a60e9b509c66d99af08f00f2a8c33e65cf47b4e637871f03bc8c6c99e2f40b4e07a7aee985411a44ef26268fb8d4c6749d42ca7e3d4f2f344758d2e7b07e3363c5344a95b216c08050789963e28b20c81ddaed9a6b65c1182d0ad87dc6e478b9d5d1590a1c6611220e71d82424f0ede0b93f3727d5b7209c0b7c5c6947647f716a76e63017d41616a5d4e97620fa53e36241df1f4a3410a211f8034f028fc773095de62905a5a29d1631b332db33b637ab5d8b67ff00153db550c44a313e157e444696de9b20e1d3cb6a7768d2988a279e5dac4c2ca3a09ccfeeb4ea6a939d4b1eca97f26c86a4443a13e6ab8f1130b9b65719d1b0dd21d2d58c53f0c4f6d5f98eba673f5d395ca4d4dbedcd2eb66fe8bfa68608b19e2483b196b3094ca8a1ecaaa6462f729f4380ef51353ebae4a30b99f2cc7cbb19f8475fbb37b9b276ef7ecea09befaa7bf9e738f16d2a46586319c2dcea631cdebe4c5001945452df9e8207865004ef1fd8e095353e8b8cfcdde682d8e14b320c7c1296d6fbebca899907244476244552483b45b059baccd648a11ab1a01bf7d66f7a3ffb28ef96536f77af75815ea5e8ac6dea6cb9b214bc0151ea55a2830b298a7684b3b41a469501620604f49d31ef967bbc4cae28cbf38684192b5f6c374d32279c10cffce9ace66531e06c3c03f963ff610f52738453d22f78557cada1d286d99104ae769ce2764320aea472159f7c8d17b0eb2f9d4af3853c3d8fa9cf11baadbeeffa9e78f7809261e8b7ecad7df0fb38b25d43f149881bff3df4cea889bfd9d837704a77fe70b3ee8f43878ab13c551fa402b97c48263a448db00c0ba47632217c5e0ee1a9d109286e3d86c9e669becb51043d2781455dc9bc6c878c0e23956d01cf117f883ad58e21c2768c5c415b38bd56b4b0910e3649eec2b37374868f8418a80a38f04a0de555575232b866cff2d95f1b7ac71b8d428d0fecb466f0d968b2ea80969d65e733335fcef92c5b98f85ce7d91b2475caa13d2cca44528b91f808a5f58d3b64f10aff6b67304d53e80c8586e0f73d8048a7010fa67024ab75e7744e55035bc6db8d5e8e8243446fad1b543779ba431a1190ac16a3723add31dddc0b2c6db2c937cbc31c1adaa0e", 0x1000}}, 0x1006) sendmsg$netlink(r2, &(0x7f0000004300)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f0000003dc0)=[{&(0x7f0000000200)={0xdc, 0x40, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@generic="b4f8655dfc7cf29a81e76c65f27a640d2470a5f7419c8ec1b73c63e591140bf55a17b868a1883dac79c168a111999bf5f3fea5b13451608d48a937fb5ed5972a21c3acb8974b3c34ee7bd888b101693d688c82d8aafc02d75a0d0c0ba202ea017a1773a6afc4e7d32ae69b4c8cef0b3d4946dbf150f1c6807927df56cbb1867980df991dbaae8ea03987743f4a4dd572ce4d75af48cdc88cd9a52f25cc51bab76b261081ea71d431d7defee6680cd674833090c5e857be5914661cf7dc275c03b176a30b154a2edf627ca4"]}, 0xdc}, {0x0}, {&(0x7f0000000380)={0x1c, 0x16, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xc, 0x151, 0x0, 0x1, [@nested={0x4, 0x36}, @nested={0x4, 0xe2}]}]}, 0x1c}, {&(0x7f0000001a80)={0xd8, 0x16, 0x4, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0xd9, 0x0, 0x0, @fd=r1}, @generic="c5acc4db9caf5ba9bc99cb79f5a1e3bed5994b1d88b6232f7838abdda2e988d12ddb554e60e7ca41037582823c1522cb264b0d86e7bdb447ff7ac9b36185142660dc92f0a4dd195982f77bfd8c3a66396ba0808269cc8f9532e6d15bd490c5e5094d794c6f48ecb3bd529828cc28ada3bc83dadca18519d8720acbd488ef375f14215fda9f7c98b852913ef4b962be91af6b2bec4d70994508a95df4e291be1d8cbedc13104cf01a672b3e8ede5432c5", @typed={0x8, 0x77, 0x0, 0x0, @fd=r4}, @nested={0x8, 0xbe, 0x0, 0x1, [@generic, @nested={0x4, 0xcb}]}]}, 0xd8}, {&(0x7f0000005540)=ANY=[@ANYBLOB="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"], 0x1890}, {&(0x7f00000004c0)={0x178, 0x2f, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@generic="537e21f92df7638a146a4eba977465128c1c3d403ea42d931cc2769b4ff4bf1eb859789c43c3d8dbef51a089576037f545aafe64a62f7b2b061c1e75cbd56fa0cf9069024d778bbf543244e896358fec937f5f374c1dae509dd10fecc7097affb487bde20e8767b189debfda53feab0648bc7baf5b2f86204594499a70f0d7248398ff20ea353ddf884aa3ea538cf4212a5d24c235c0516d5acd0b86c5b0565e608696003eb4ff49d3f2f6ca47b8589fa2e3c012f3633fe79cc2ecb6df0db5b0d1a685b80ec685d347787f9a47fc7a238b093250b26a6c25aa", @generic="7aa3c4d4f672b503bf502729", @generic="6e87885f6ca7b7797c056012d07bb909498cdd60a48b1415bb6e7aaef3717ca6c7ab921967e4326a431688c22ec5c19c84dbb437ba9a6f9409b0cc6eda3feedd4fb72ebc5d847df978a2207699ca0105f78cd3785d5fd97c5262b8e39a4d13a43bf40471b6", @typed={0xc, 0xa2, 0x0, 0x0, @u64=0x7fffffff}, @typed={0xe, 0x2, 0x0, 0x0, @str='syzkaller\x00'}]}, 0x178}], 0x6, &(0x7f00000041c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x24, 0x1, 0x1, [r4, r2, r1, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x110, 0x8010}, 0x20000000) 2.040845824s ago: executing program 8 (id=1341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x2, 0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.86234463s ago: executing program 8 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x51829000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x402, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) socket(0x9, 0x5, 0x5278) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x9, 0xb7, 0xe356, 0x3, 0x8], 0xeeee8000, 0xc0481}) (async) r8 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000000009040000000001020809050200"/50, @ANYRES64=r1, @ANYRESHEX=r5], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="059900f3ffffff11"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async, rerun: 64) epoll_create(0x7) (rerun: 64) 1.806989961s ago: executing program 0 (id=1343): syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @dstopts={0x6c}]}}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340), {0x2a}, &(0x7f0000000400)=""/73, 0x49, &(0x7f0000000480)=""/215, &(0x7f0000000580)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x62001) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="ea00000003", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) r6 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x404c085) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 933.045341ms ago: executing program 8 (id=1344): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$inet(0x2, 0x3, 0x2) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x5e) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 843.817777ms ago: executing program 5 (id=1345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/freeze_filesystems', 0x181000, 0xe4) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x13, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000100)='#[\'[#@}@-\x00', 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 770.504678ms ago: executing program 0 (id=1346): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000000) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000a00)=""/4096, &(0x7f0000000000)=0x1000) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x2966, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1, 0x6f}, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x200000000114, 0x3, 0x0, &(0x7f0000000000)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fanotify_mark(0xffffffffffffffff, 0x2, 0x1008, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, 0x0, 0x0) 734.880134ms ago: executing program 4 (id=1347): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15000000ffffffff09000000010000", @ANYBLOB="01"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 301.716171ms ago: executing program 4 (id=1348): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15000000ffffffff09000000010000", @ANYBLOB="01"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 140.287603ms ago: executing program 1 (id=1349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='afs_dir_check_failed\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000010) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040), &(0x7f0000000180)=0x4) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioperm(0x7, 0x81, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x20, &(0x7f0000000080)={0x11, 0x0, 0x2}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffff5]}, 0x8, 0x100000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00e', @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf250700000008002b00fbffffff0500330000000000050029000100000005002d0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000480)=""/126, 0xfffffffffffffd81}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000380), 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) 0s ago: executing program 4 (id=1350): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x88400) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2103, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000002c0)=""/209) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x8000, 0x1, 0x59455247, 0x8, 0xc, [{0x6fc0, 0xd9}, {0x8, 0x3}, {0xe, 0x3ff}, {0x8}, {0x1, 0x8147}, {0x6, 0xd}, {0x80000001, 0xfffffff8}, {0x145, 0xf9}], 0x4, 0x3, 0x2, 0x1, 0x2}}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) pwrite64(r3, &(0x7f0000000440)="7de2b3", 0x3, 0x4) kernel console output (not intermixed with test programs): reated IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.245035][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.285897][ T42] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 398.348042][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.372576][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.383418][ T5875] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.428368][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.455009][ T42] usb 8-1: not running at top speed; connect to a high speed hub [ 398.465677][ T42] usb 8-1: config 7 has an invalid interface number: 58 but max is 3 [ 398.482285][ T5875] usb 7-1: config 0 descriptor?? [ 398.498381][ T42] usb 8-1: config 7 has an invalid interface number: 129 but max is 3 [ 398.526709][ T5875] cp210x 7-1:0.0: cp210x converter detected [ 398.548258][ T42] usb 8-1: config 7 has an invalid interface number: 190 but max is 3 [ 398.567315][ T42] usb 8-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 398.591141][ T42] usb 8-1: config 7 has an invalid interface number: 221 but max is 3 [ 398.611574][ T42] usb 8-1: config 7 has an invalid descriptor of length 250, skipping remainder of the config [ 398.642441][ T42] usb 8-1: config 7 has no interface number 0 [ 398.658980][ T42] usb 8-1: config 7 has no interface number 1 [ 398.690385][ T42] usb 8-1: config 7 has no interface number 2 [ 398.699437][ T9968] FAULT_INJECTION: forcing a failure. [ 398.699437][ T9968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.733865][ T42] usb 8-1: config 7 has no interface number 3 [ 398.735157][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.3.1035 Not tainted syzkaller #0 PREEMPT(full) [ 398.735178][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.735187][ T9968] Call Trace: [ 398.735193][ T9968] [ 398.735198][ T9968] dump_stack_lvl+0x16c/0x1f0 [ 398.735227][ T9968] should_fail_ex+0x512/0x640 [ 398.735248][ T9968] _copy_to_user+0x32/0xd0 [ 398.735269][ T9968] copy_siginfo_to_user+0x27/0xc0 [ 398.735291][ T9968] x64_setup_rt_frame+0x811/0xcf0 [ 398.735316][ T9968] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 398.735339][ T9968] arch_do_signal_or_restart+0x5e4/0x7c0 [ 398.735358][ T9968] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 398.735375][ T9968] ? __do_splice+0x1e1/0x360 [ 398.735402][ T9968] exit_to_user_mode_loop+0x85/0x130 [ 398.735420][ T9968] do_syscall_64+0x426/0xfa0 [ 398.735435][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.735451][ T9968] RIP: 0033:0x7fd00818f6c7 [ 398.735464][ T9968] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 398.735478][ T9968] RSP: 002b:00007fd0090b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 398.735494][ T9968] RAX: 0000000000000113 RBX: 00007fd0083e5fa0 RCX: 00007fd00818f6c9 [ 398.735503][ T9968] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000009 [ 398.735512][ T9968] RBP: 00007fd0090b0090 R08: 0000000000001000 R09: 0800000000000000 [ 398.735520][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.735529][ T9968] R13: 00007fd0083e6038 R14: 00007fd0083e5fa0 R15: 00007fffca398258 [ 398.735557][ T9968] [ 399.084999][ T868] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 399.139945][ T9958] bridge0: entered promiscuous mode [ 399.147430][ T9958] macvlan2: entered promiscuous mode [ 399.222073][ T42] usb 8-1: config 7 interface 58 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 399.233949][ T42] usb 8-1: config 7 interface 58 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 399.253834][ T42] usb 8-1: config 7 interface 58 altsetting 216 has a duplicate endpoint with address 0xB, skipping [ 399.265702][ T42] usb 8-1: config 7 interface 58 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 399.279041][ T868] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 399.283797][ T42] usb 8-1: config 7 interface 129 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 399.299750][ T42] usb 8-1: config 7 interface 129 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 399.312209][ T42] usb 8-1: config 7 interface 190 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 399.319432][ T868] usb 9-1: config 0 has no interface number 0 [ 399.359208][ T42] usb 8-1: config 7 interface 190 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 399.362367][ T868] usb 9-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 399.382598][ T42] usb 8-1: config 7 interface 190 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 399.464028][ T868] usb 9-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 399.468340][ T42] usb 8-1: config 7 interface 190 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 399.533772][ T868] usb 9-1: config 0 interface 11 has no altsetting 0 [ 399.534848][ T42] usb 8-1: config 7 interface 190 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 399.563495][ T868] usb 9-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 399.589701][ T868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.606031][ T42] usb 8-1: config 7 interface 190 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 399.637965][ T42] usb 8-1: config 7 interface 190 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 399.671774][ T42] usb 8-1: config 7 interface 190 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 399.678938][ T868] usb 9-1: config 0 descriptor?? [ 399.700455][ T5875] cp210x 7-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 399.720782][ T9972] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 399.733920][ T42] usb 8-1: config 7 interface 221 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.736485][ T868] keyspan 9-1:0.11: Keyspan 4 port adapter converter detected [ 399.756357][ T5875] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 399.833955][ T5875] usb 7-1: cp210x converter now attached to ttyUSB0 [ 399.840780][ T42] usb 8-1: config 7 interface 58 has no altsetting 0 [ 399.863230][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81 [ 399.871933][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1 [ 399.902211][ T42] usb 8-1: config 7 interface 129 has no altsetting 0 [ 399.909477][ T868] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 399.919042][ T5875] usb 7-1: USB disconnect, device number 5 [ 399.934217][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 399.965146][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82 [ 399.986580][ T42] usb 8-1: config 7 interface 221 has no altsetting 0 [ 400.006990][ T5875] cp210x 7-1:0.0: device disconnected [ 400.063854][ T42] usb 8-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice=1e.93 [ 400.079774][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2 [ 400.113853][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.140128][ T868] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 400.252755][ T42] usb 8-1: Product: syz [ 400.275502][ T42] usb 8-1: Manufacturer: 䙩ᗺ⸀㿡떲䕥腣綔剽⓪밖ￓ䋨Ⱁ◛໏䣃搸հ൛묯Ⱡᛉ쨩供鷛椻鈈줆⩄⫺즷⒴世垈쐰宆裣ｨ⻪ড়䇃㰫퇵ꆍᶪ鎵鸏흍锄퓕ぢ☂⯄㉓賃졓﷦⅚ၯ릮ﯨ성嵯ឡꕹ剃뀉䭁礕 [ 400.367403][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83 [ 400.418473][ T42] usb 8-1: SerialNumber: syz [ 400.433901][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 400.438477][ T42] usb 8-1: Interface #190 referenced by multiple IADs [ 400.459170][ T42] usb 8-1: Interface #221 referenced by multiple IADs [ 400.529886][ T868] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 400.577603][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84 [ 400.612220][ T868] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 400.724128][ T889] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 400.732356][ T42] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 400.747597][ T42] usb 8-1: selecting invalid altsetting 0 [ 400.764994][ T2340] pvrusb2: Invalid write control endpoint [ 400.785324][ T868] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 400.787367][ T42] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 400.807179][ T2340] usb 8-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 400.885266][ T2340] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 400.894006][ T30] audit: type=1400 audit(2000000082.260:673): avc: denied { firmware_load } for pid=2340 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 400.925826][ T889] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 400.939231][ T889] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 400.951253][ T42] usb 8-1: selecting invalid altsetting 0 [ 400.968412][ T889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 401.002231][ T42] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 401.013755][ T889] usb 4-1: config 1 has no interface number 0 [ 401.028222][ T889] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 401.058887][ T889] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 401.077735][ T42] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 401.096620][ T42] usb 8-1: selecting invalid altsetting 0 [ 401.108285][ T889] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 401.133128][ T42] usb 8-1: USB disconnect, device number 2 [ 401.162788][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.199357][ T889] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 401.752841][ T889] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 401.902195][ T889] usb 9-1: USB disconnect, device number 2 [ 402.599459][ T889] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 402.997658][ T5882] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 403.133708][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1044'. [ 403.163970][T10012] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1044'. [ 403.461704][ T889] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 403.540995][ T5882] usb 4-1: USB disconnect, device number 40 [ 403.548371][ T5882] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 403.698902][ T889] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 404.077681][ T889] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 404.103250][ T889] keyspan 9-1:0.11: device disconnected [ 404.191847][T10023] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 406.346417][ T5882] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 406.583174][T10054] ubi0: attaching mtd0 [ 406.592228][T10054] ubi0: scanning is finished [ 406.596919][T10054] ubi0: empty MTD device detected [ 406.744939][ T5882] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 406.763905][ T5882] usb 4-1: config 0 has no interface number 0 [ 406.802138][ T9] IPVS: starting estimator thread 0... [ 407.137661][ T30] audit: type=1400 audit(2000000088.480:674): avc: denied { map } for pid=10053 comm="syz.8.1057" path="pipe:[27502]" dev="pipefs" ino=27502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 407.186486][ T5882] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 407.244209][ T5882] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 407.260592][T10054] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 407.297678][ T5882] usb 4-1: config 0 interface 11 has no altsetting 0 [ 407.443758][T10060] IPVS: using max 50 ests per chain, 120000 per kthread [ 407.461286][ T5882] usb 4-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 407.610315][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.128686][ T5882] usb 4-1: config 0 descriptor?? [ 408.153343][T10045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 408.179379][ T5882] keyspan 4-1:0.11: Keyspan 4 port adapter converter detected [ 408.598889][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 408.923787][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 408.962792][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 409.035011][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 409.100270][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 409.173573][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 409.216462][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 409.243890][ T868] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 409.253733][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 409.302608][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 409.349513][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 409.389816][ T5882] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 409.396758][T10087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 409.424452][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 409.432885][ T868] usb 9-1: Using ep0 maxpacket: 8 [ 409.619113][ T30] audit: type=1400 audit(2000000091.000:675): avc: denied { create } for pid=10082 comm="syz.6.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.896448][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1066'. [ 409.902774][ T868] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 409.948104][ T868] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 409.962670][ T30] audit: type=1400 audit(2000000091.000:676): avc: denied { ioctl } for pid=10082 comm="syz.6.1065" path="socket:[27565]" dev="sockfs" ino=27565 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.987512][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.018359][ T868] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.068207][ T9] usb 4-1: USB disconnect, device number 41 [ 410.072707][ T30] audit: type=1400 audit(2000000091.000:677): avc: denied { write } for pid=10082 comm="syz.6.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 410.094903][ T30] audit: type=1400 audit(2000000091.010:678): avc: denied { execute } for pid=10082 comm="syz.6.1065" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.141906][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 410.161672][ T868] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.190284][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 410.203760][ T868] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.229444][ T868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.245802][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 410.298265][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 410.568847][ T9] keyspan 4-1:0.11: device disconnected [ 410.580182][ T868] usb 9-1: GET_CAPABILITIES returned 0 [ 410.655691][ T868] usbtmc 9-1:16.0: can't read capabilities [ 412.621898][ T889] usb 9-1: USB disconnect, device number 3 [ 412.630900][T10119] FAULT_INJECTION: forcing a failure. [ 412.630900][T10119] name failslab, interval 1, probability 0, space 0, times 0 [ 412.670352][T10119] CPU: 0 UID: 0 PID: 10119 Comm: syz.7.1075 Not tainted syzkaller #0 PREEMPT(full) [ 412.670378][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.670388][T10119] Call Trace: [ 412.670395][T10119] [ 412.670401][T10119] dump_stack_lvl+0x16c/0x1f0 [ 412.670433][T10119] should_fail_ex+0x512/0x640 [ 412.670451][T10119] ? fs_reclaim_acquire+0xae/0x150 [ 412.670473][T10119] should_failslab+0xc2/0x120 [ 412.670493][T10119] __kmalloc_noprof+0xdd/0x880 [ 412.670516][T10119] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.670542][T10119] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.670559][T10119] tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.670581][T10119] ? tomoyo_profile+0x47/0x60 [ 412.670610][T10119] tomoyo_path_number_perm+0x245/0x580 [ 412.670636][T10119] ? tomoyo_path_number_perm+0x237/0x580 [ 412.670664][T10119] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.670692][T10119] ? find_held_lock+0x2b/0x80 [ 412.670733][T10119] ? find_held_lock+0x2b/0x80 [ 412.670753][T10119] ? hook_file_ioctl_common+0x145/0x410 [ 412.670780][T10119] ? __fget_files+0x20e/0x3c0 [ 412.670802][T10119] security_file_ioctl+0x9b/0x240 [ 412.670822][T10119] __x64_sys_ioctl+0xb7/0x210 [ 412.670846][T10119] do_syscall_64+0xcd/0xfa0 [ 412.670868][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.670885][T10119] RIP: 0033:0x7fe78898f6c9 [ 412.670900][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.670918][T10119] RSP: 002b:00007fe789876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.670934][T10119] RAX: ffffffffffffffda RBX: 00007fe788be5fa0 RCX: 00007fe78898f6c9 [ 412.670945][T10119] RDX: 0000200000000100 RSI: 000000000000560f RDI: 0000000000000003 [ 412.670956][T10119] RBP: 00007fe789876090 R08: 0000000000000000 R09: 0000000000000000 [ 412.670965][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.670975][T10119] R13: 00007fe788be6038 R14: 00007fe788be5fa0 R15: 00007ffccebc1558 [ 412.670997][T10119] [ 412.881519][T10119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.977328][T10121] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 413.099576][T10121] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 413.147798][T10131] FAULT_INJECTION: forcing a failure. [ 413.147798][T10131] name failslab, interval 1, probability 0, space 0, times 0 [ 413.175725][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.7.1078 Not tainted syzkaller #0 PREEMPT(full) [ 413.175753][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.175763][T10131] Call Trace: [ 413.175770][T10131] [ 413.175778][T10131] dump_stack_lvl+0x16c/0x1f0 [ 413.175811][T10131] should_fail_ex+0x512/0x640 [ 413.175833][T10131] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 413.175869][T10131] should_failslab+0xc2/0x120 [ 413.175890][T10131] kmem_cache_alloc_noprof+0x75/0x6e0 [ 413.175915][T10131] ? security_file_alloc+0x34/0x2b0 [ 413.175941][T10131] ? security_file_alloc+0x34/0x2b0 [ 413.175959][T10131] security_file_alloc+0x34/0x2b0 [ 413.175980][T10131] init_file+0x93/0x4c0 [ 413.176002][T10131] alloc_empty_file+0x73/0x1e0 [ 413.176024][T10131] alloc_file_pseudo+0x13a/0x230 [ 413.176048][T10131] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 413.176071][T10131] ? _raw_spin_unlock+0x28/0x50 [ 413.176095][T10131] ? alloc_fd+0x471/0x7d0 [ 413.176114][T10131] __anon_inode_getfile+0xe8/0x280 [ 413.176139][T10131] anon_inode_getfd+0x52/0xb0 [ 413.176162][T10131] btf_new_fd+0x541/0x54d0 [ 413.176186][T10131] ? avc_has_perm_noaudit+0x149/0x3b0 [ 413.176221][T10131] ? __pfx_btf_new_fd+0x10/0x10 [ 413.176246][T10131] ? cap_capable+0xb3/0x250 [ 413.176275][T10131] ? bpf_lsm_capable+0x9/0x10 [ 413.176294][T10131] ? security_capable+0x7e/0x260 [ 413.176321][T10131] ? ns_capable+0xd7/0x110 [ 413.176345][T10131] __sys_bpf+0x39f/0x4980 [ 413.176377][T10131] ? __pfx___sys_bpf+0x10/0x10 [ 413.176402][T10131] ? find_held_lock+0x2b/0x80 [ 413.176430][T10131] ? find_held_lock+0x2b/0x80 [ 413.176457][T10131] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 413.176490][T10131] ? fput+0x9b/0xd0 [ 413.176510][T10131] ? ksys_write+0x1ac/0x250 [ 413.176527][T10131] ? __pfx_ksys_write+0x10/0x10 [ 413.176547][T10131] __x64_sys_bpf+0x78/0xc0 [ 413.176572][T10131] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.176599][T10131] do_syscall_64+0xcd/0xfa0 [ 413.176615][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.176632][T10131] RIP: 0033:0x7fe78898f6c9 [ 413.176646][T10131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.176662][T10131] RSP: 002b:00007fe789876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.176680][T10131] RAX: ffffffffffffffda RBX: 00007fe788be5fa0 RCX: 00007fe78898f6c9 [ 413.176691][T10131] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000012 [ 413.176701][T10131] RBP: 00007fe789876090 R08: 0000000000000000 R09: 0000000000000000 [ 413.176711][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.176720][T10131] R13: 00007fe788be6038 R14: 00007fe788be5fa0 R15: 00007ffccebc1558 [ 413.176740][T10131] [ 413.471082][ T5868] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 413.753686][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 413.760802][ T5868] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.775787][ T5868] usb 7-1: config 0 has no interface number 0 [ 413.810181][ T5868] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 413.823688][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.839696][ T5868] usb 7-1: Product: syz [ 413.853654][ T5868] usb 7-1: Manufacturer: syz [ 413.861108][ T5868] usb 7-1: SerialNumber: syz [ 413.945459][ T5868] usb 7-1: config 0 descriptor?? [ 413.983055][ T5868] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 414.008563][ T5868] usb 7-1: selecting invalid altsetting 1 [ 414.026985][ T5868] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 414.211697][ T5868] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 414.276258][ T5868] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 414.612807][ T5868] usb 7-1: media controller created [ 414.647015][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.844444][ T5868] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 414.851459][ T5868] zl10353_read_register: readreg error (reg=127, ret==-71) [ 414.904398][ T5868] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 415.030691][ T5868] usb 7-1: USB disconnect, device number 6 [ 415.263738][ T889] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 415.403741][ T889] usb 9-1: device descriptor read/64, error -71 [ 415.520591][T10180] netlink: 'syz.3.1086': attribute type 15 has an invalid length. [ 415.523758][ T30] audit: type=1400 audit(2000000096.900:679): avc: denied { read write } for pid=10179 comm="syz.3.1086" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 415.528748][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 415.573727][ T30] audit: type=1400 audit(2000000096.900:680): avc: denied { open } for pid=10179 comm="syz.3.1086" path="/227/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 415.683721][ T889] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 415.823734][ T889] usb 9-1: device descriptor read/64, error -71 [ 415.936340][ T889] usb usb9-port1: attempt power cycle [ 416.343948][ T889] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 416.365536][ T889] usb 9-1: device descriptor read/8, error -71 [ 416.488752][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 416.893790][ T889] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 416.945740][ T889] usb 9-1: device descriptor read/8, error -71 [ 417.087229][ T889] usb usb9-port1: unable to enumerate USB device [ 417.139285][T10204] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.1091'. [ 418.334057][ T5937] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 418.514307][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.543900][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.724048][T10234] netlink: 'syz.7.1098': attribute type 1 has an invalid length. [ 418.731892][T10234] netlink: 'syz.7.1098': attribute type 4 has an invalid length. [ 418.739740][T10234] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1098'. [ 419.274464][ T5937] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 419.289191][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.413669][ T5937] usb 7-1: config 0 descriptor?? [ 419.692856][ T5868] IPVS: starting estimator thread 0... [ 419.803825][T10246] IPVS: using max 48 ests per chain, 115200 per kthread [ 419.863838][ T5897] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 419.892672][T10245] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10245 comm=syz.8.1103 [ 419.911211][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.936879][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.937238][T10242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=10242 comm=syz.8.1103 [ 419.957542][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.976729][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.000867][T10248] tipc: Disabling bearer [ 420.202331][ T5897] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 420.212020][ T5897] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 420.223917][ T30] audit: type=1400 audit(2000000101.580:681): avc: denied { connect } for pid=10243 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 420.244041][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 420.253433][ T5897] usb 3-1: config 1 has no interface number 0 [ 420.298870][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1095'. [ 420.677343][ T5897] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 420.689248][ T5897] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 420.704340][ T5897] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 420.714097][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.785053][T10255] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.1105'. [ 420.801290][ T5897] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 421.353519][ T5897] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 421.573100][ T5897] usb 3-1: USB disconnect, device number 32 [ 421.586571][ T5897] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 421.639799][ T5937] usbhid 7-1:0.0: can't add hid device: -71 [ 421.651378][ T5937] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 421.699019][ T5937] usb 7-1: USB disconnect, device number 7 [ 421.852311][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1108'. [ 423.008290][ T30] audit: type=1400 audit(2000000104.370:682): avc: denied { connect } for pid=10271 comm="syz.6.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 423.229972][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 423.503954][T10286] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 423.763676][ T5868] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 424.020937][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.032222][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 424.049198][ T5868] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 424.104034][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.140577][ T5868] usb 3-1: config 0 descriptor?? [ 424.158884][ T5868] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 424.183946][ T5868] dvb-usb: bulk message failed: -22 (3/0) [ 424.227191][ T5868] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 424.265190][ T5868] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 424.274953][ T5897] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 424.291667][ T5868] usb 3-1: media controller created [ 424.295796][T10299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.324677][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.366857][T10286] dibusb: i2c wr: len=61 is too big! [ 424.366857][T10286] [ 424.406477][ T5868] dvb-usb: bulk message failed: -22 (6/0) [ 424.442437][ T5868] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 424.474759][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 424.510795][ T5868] dvb-usb: schedule remote query interval to 150 msecs. [ 424.561831][ T5868] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 424.575942][T10297] syzkaller1: entered promiscuous mode [ 424.581674][T10297] syzkaller1: entered allmulticast mode [ 424.625773][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.694179][ T5897] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 424.727017][ T5868] dvb-usb: bulk message failed: -22 (1/0) [ 424.742577][ T5868] dvb-usb: error while querying for an remote control event. [ 424.810772][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.870412][ T5897] usb 4-1: config 0 descriptor?? [ 424.943927][ T889] dvb-usb: bulk message failed: -22 (1/0) [ 424.951610][ T889] dvb-usb: error while querying for an remote control event. [ 424.968203][ T5897] ttusbir 4-1:0.0: cannot find expected altsetting [ 424.975291][T10307] FAULT_INJECTION: forcing a failure. [ 424.975291][T10307] name failslab, interval 1, probability 0, space 0, times 0 [ 425.103842][T10307] CPU: 0 UID: 0 PID: 10307 Comm: syz.7.1121 Not tainted syzkaller #0 PREEMPT(full) [ 425.103861][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.103867][T10307] Call Trace: [ 425.103871][T10307] [ 425.103876][T10307] dump_stack_lvl+0x16c/0x1f0 [ 425.103898][T10307] should_fail_ex+0x512/0x640 [ 425.103911][T10307] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 425.103931][T10307] should_failslab+0xc2/0x120 [ 425.103945][T10307] kmem_cache_alloc_node_noprof+0x78/0x770 [ 425.103961][T10307] ? __alloc_skb+0x2b2/0x380 [ 425.103976][T10307] ? __alloc_skb+0x2b2/0x380 [ 425.103987][T10307] __alloc_skb+0x2b2/0x380 [ 425.104000][T10307] ? __pfx___alloc_skb+0x10/0x10 [ 425.104017][T10307] alloc_skb_with_frags+0xe0/0x860 [ 425.104034][T10307] ? rcu_is_watching+0x12/0xc0 [ 425.104049][T10307] sock_alloc_send_pskb+0x7f9/0x980 [ 425.104067][T10307] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 425.104079][T10307] ? kfree_skbmem+0x1a4/0x1f0 [ 425.104089][T10307] ? sk_skb_reason_drop+0x136/0x1a0 [ 425.104103][T10307] ? __pfx_sk_psock_verdict_recv+0x10/0x10 [ 425.104118][T10307] ? unix_stream_read_skb+0x29d/0x3d0 [ 425.104130][T10307] ? __pfx_unix_stream_read_skb+0x10/0x10 [ 425.104142][T10307] unix_stream_sendmsg+0x39f/0x1340 [ 425.104159][T10307] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 425.104178][T10307] ____sys_sendmsg+0xa98/0xc70 [ 425.104189][T10307] ? copy_msghdr_from_user+0x10a/0x160 [ 425.104202][T10307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.104218][T10307] ___sys_sendmsg+0x134/0x1d0 [ 425.104233][T10307] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.104245][T10307] ? __lock_acquire+0x622/0x1c90 [ 425.104278][T10307] __sys_sendmsg+0x16d/0x220 [ 425.104292][T10307] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.104314][T10307] do_syscall_64+0xcd/0xfa0 [ 425.104325][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.104336][T10307] RIP: 0033:0x7fe78898f6c9 [ 425.104344][T10307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.104354][T10307] RSP: 002b:00007fe789876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.104365][T10307] RAX: ffffffffffffffda RBX: 00007fe788be5fa0 RCX: 00007fe78898f6c9 [ 425.104371][T10307] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 425.104377][T10307] RBP: 00007fe789876090 R08: 0000000000000000 R09: 0000000000000000 [ 425.104383][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.104389][T10307] R13: 00007fe788be6038 R14: 00007fe788be5fa0 R15: 00007ffccebc1558 [ 425.104403][T10307] [ 425.383911][ T889] dvb-usb: bulk message failed: -22 (1/0) [ 425.412909][ T889] dvb-usb: error while querying for an remote control event. [ 425.476518][T10299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.597520][T10299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.664187][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 425.692498][ T5901] dvb-usb: error while querying for an remote control event. [ 425.815957][T10317] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.1124'. [ 426.157551][T10299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.169119][ T5868] dvb-usb: bulk message failed: -22 (1/0) [ 426.473744][ T5868] dvb-usb: error while querying for an remote control event. [ 426.527882][ T9] usb 3-1: USB disconnect, device number 33 [ 426.832572][ T30] audit: type=1400 audit(2000000108.200:683): avc: denied { map } for pid=10321 comm="syz.8.1126" path="socket:[28308]" dev="sockfs" ino=28308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 427.182519][ T3443] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.211927][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 427.277172][ T10] usb 4-1: USB disconnect, device number 42 [ 427.309994][ T3443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.331632][ T3443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.351816][ T3443] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.399145][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 427.792263][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 427.803003][T10342] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.1131'. [ 429.120663][T10360] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.1138'. [ 429.630129][ T7203] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.904242][ T7203] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.272077][ T7203] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.419646][T10375] tipc: New replicast peer: 255.255.255.255 [ 430.439482][T10375] tipc: Enabled bearer , priority 10 [ 430.488185][ T7203] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.508768][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.519908][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.528173][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.538722][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.546432][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.956120][ T30] audit: type=1326 audit(2000000112.310:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 431.124563][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1149'. [ 431.176812][ T30] audit: type=1326 audit(2000000112.310:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 431.234684][ T30] audit: type=1326 audit(2000000112.310:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 431.345188][ T7203] bridge_slave_1: left allmulticast mode [ 431.361866][ T7203] bridge_slave_1: left promiscuous mode [ 431.367944][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.385946][ T30] audit: type=1326 audit(2000000112.310:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 431.421000][ T7203] bridge_slave_0: left allmulticast mode [ 431.432408][ T7203] bridge_slave_0: left promiscuous mode [ 431.529513][ T30] audit: type=1326 audit(2000000112.310:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 431.553703][ T30] audit: type=1326 audit(2000000112.310:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 431.589674][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.600841][ T30] audit: type=1326 audit(2000000112.310:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 432.076683][ T30] audit: type=1326 audit(2000000112.310:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 432.122290][ T30] audit: type=1326 audit(2000000112.310:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 432.189594][ T30] audit: type=1326 audit(2000000112.310:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf938f6c9 code=0x7ffc0000 [ 432.634640][ T9693] Bluetooth: hci2: command tx timeout [ 432.693500][ T7203] bridge0 (unregistering): left promiscuous mode [ 432.699959][ T5882] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 432.875397][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 432.899047][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.910905][ T5882] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.927777][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.962148][ T5882] usb 4-1: config 0 descriptor?? [ 432.998262][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.009905][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.022680][ T7203] bond0 (unregistering): Released all slaves [ 433.111123][T10376] chnl_net:caif_netlink_parms(): no params data found [ 433.187457][ T5882] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 433.386280][ T868] usb 4-1: USB disconnect, device number 43 [ 433.971480][T10376] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.143746][T10376] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.190430][T10376] bridge_slave_0: entered allmulticast mode [ 434.298824][T10376] bridge_slave_0: entered promiscuous mode [ 434.470598][T10376] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.503753][T10376] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.561753][T10376] bridge_slave_1: entered allmulticast mode [ 434.592232][T10376] bridge_slave_1: entered promiscuous mode [ 434.714308][ T9693] Bluetooth: hci2: command tx timeout [ 435.053645][ T7203] hsr_slave_0: left promiscuous mode [ 435.099100][ T7203] hsr_slave_1: left promiscuous mode [ 435.325987][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.431376][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.596267][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.623993][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.772680][ T7203] veth1_macvtap: left promiscuous mode [ 435.813784][ T7203] veth0_macvtap: left promiscuous mode [ 435.819460][ T7203] veth1_vlan: left promiscuous mode [ 435.953891][ T7203] veth0_vlan: left promiscuous mode [ 436.803145][ T9693] Bluetooth: hci2: command tx timeout [ 437.293726][ T868] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 437.472819][ T868] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 437.481315][ T868] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 437.501367][ T868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 437.543922][ T868] usb 3-1: config 1 has no interface number 0 [ 437.550071][ T868] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 437.571624][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 437.583697][ T868] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 437.613219][ T868] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 437.631829][ T868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.665689][ T868] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 437.695741][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 438.543832][T10474] input: syz1 as /devices/virtual/input/input21 [ 438.873998][ T9693] Bluetooth: hci2: command tx timeout [ 438.900921][T10442] bridge5: entered promiscuous mode [ 438.906715][T10442] bridge5: entered allmulticast mode [ 438.919320][T10444] bridge6: entered promiscuous mode [ 438.924625][T10444] bridge6: entered allmulticast mode [ 439.286975][T10376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.412449][T10376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.531712][T10376] team0: Port device team_slave_0 added [ 439.609086][T10376] team0: Port device team_slave_1 added [ 439.896821][T10376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.928134][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.955077][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.033681][T10376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.094504][ T868] snd_usb_pod 3-1:1.1: set_interface failed [ 440.105265][ T868] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 440.132897][ T868] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 440.174473][T10376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.197856][ T868] usb 3-1: USB disconnect, device number 34 [ 440.206330][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.232342][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.425736][T10376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.088155][T10376] hsr_slave_0: entered promiscuous mode [ 441.102045][T10376] hsr_slave_1: entered promiscuous mode [ 441.185342][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 441.196298][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 441.205513][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 441.288185][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 441.295461][ T5937] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 441.307940][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 441.348136][ T7203] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.492555][ T5937] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.534933][ T5937] usb 9-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 441.555129][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.572813][ T5937] usb 9-1: config 0 descriptor?? [ 441.618212][ T7203] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.740907][ T7203] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.841617][ T7203] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.990462][T10501] netlink: 380 bytes leftover after parsing attributes in process `syz.8.1174'. [ 442.010005][ T5937] usbhid 9-1:0.0: can't add hid device: -71 [ 442.036974][ T5937] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 442.099722][ T5937] usb 9-1: USB disconnect, device number 8 [ 442.345929][ T7203] bridge_slave_1: left allmulticast mode [ 442.363352][ T7203] bridge_slave_1: left promiscuous mode [ 442.379068][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.410811][ T7203] bridge_slave_0: left allmulticast mode [ 442.440855][ T7203] bridge_slave_0: left promiscuous mode [ 442.452463][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.368115][ T868] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 443.434371][ T5823] Bluetooth: hci6: command tx timeout [ 443.541437][ T868] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 443.550135][ T868] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 443.560175][ T868] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 443.570398][ T868] usb 9-1: config 1 has no interface number 0 [ 443.576596][ T868] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 443.593960][ T868] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 443.609384][ T868] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 443.625502][ T868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.695204][ T868] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 443.986700][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.012053][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.036543][ T7203] bond0 (unregistering): Released all slaves [ 444.163119][T10502] chnl_net:caif_netlink_parms(): no params data found [ 444.318423][T10376] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 444.405884][T10376] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 444.447541][T10376] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 444.587708][T10376] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 444.922061][ T7203] hsr_slave_0: left promiscuous mode [ 444.947240][ T7203] hsr_slave_1: left promiscuous mode [ 444.993747][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.083789][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.106798][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.176346][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.273948][ T5868] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 445.344871][ T7203] veth1_macvtap: left promiscuous mode [ 445.359696][ T7203] veth0_macvtap: left promiscuous mode [ 445.378505][ T7203] veth1_vlan: left promiscuous mode [ 445.394031][ T7203] veth0_vlan: left promiscuous mode [ 445.413658][ T5868] usb 3-1: device descriptor read/64, error -71 [ 445.529371][ T5823] Bluetooth: hci6: command tx timeout [ 445.667995][ T5868] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 445.794370][ T868] snd_usb_pod 9-1:1.1: set_interface failed [ 445.823276][ T5868] usb 3-1: device descriptor read/64, error -71 [ 445.826680][ T868] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 445.857260][ T868] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 445.884950][ T868] usb 9-1: USB disconnect, device number 9 [ 446.380517][ T5868] usb usb3-port1: attempt power cycle [ 446.547380][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 446.548001][ T30] audit: type=1400 audit(2000000127.930:708): avc: denied { write } for pid=10592 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 446.733941][ T5868] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 446.761852][ T5868] usb 3-1: device descriptor read/8, error -71 [ 447.013662][ T5868] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 447.044958][ T5868] usb 3-1: device descriptor read/8, error -71 [ 447.154034][ T5868] usb usb3-port1: unable to enumerate USB device [ 447.345254][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 447.485646][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 447.601167][ T5823] Bluetooth: hci6: command tx timeout [ 447.972611][ T30] audit: type=1400 audit(2000000129.350:709): avc: denied { getopt } for pid=10601 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 448.033889][ T30] audit: type=1400 audit(2000000129.350:710): avc: denied { append } for pid=10601 comm="syz.3.1189" name="pfkey" dev="proc" ino=4026533195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 448.089536][ T30] audit: type=1400 audit(2000000129.350:711): avc: denied { setattr } for pid=10601 comm="syz.3.1189" name="tty3" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 448.901075][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.942820][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.997678][T10502] bridge_slave_0: entered allmulticast mode [ 449.043971][T10502] bridge_slave_0: entered promiscuous mode [ 449.112319][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.143482][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.162053][T10502] bridge_slave_1: entered allmulticast mode [ 449.173254][T10502] bridge_slave_1: entered promiscuous mode [ 449.332066][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.388227][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.547340][T10502] team0: Port device team_slave_0 added [ 449.590856][ T7203] IPVS: stop unused estimator thread 0... [ 449.633314][T10502] team0: Port device team_slave_1 added [ 449.677490][ T5823] Bluetooth: hci6: command tx timeout [ 449.731520][T10619] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1193'. [ 449.797934][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.836308][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.862289][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.903727][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.928932][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.099616][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.126340][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.161101][T10376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.294529][T10502] hsr_slave_0: entered promiscuous mode [ 450.314482][T10502] hsr_slave_1: entered promiscuous mode [ 450.328291][T10502] debugfs: 'hsr0' already exists in 'hsr' [ 450.356652][T10502] Cannot create hsr debugfs directory [ 450.375159][T10376] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.405266][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.412511][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.513643][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 450.607053][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.614263][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.676915][ T9] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 450.704998][ T9] usb 3-1: config 0 has no interface number 0 [ 450.733661][ T9] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 450.778703][ T9] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 450.827387][ T9] usb 3-1: config 0 interface 11 has no altsetting 0 [ 450.858320][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 450.875102][T10638] FAULT_INJECTION: forcing a failure. [ 450.875102][T10638] name failslab, interval 1, probability 0, space 0, times 0 [ 450.907298][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.936500][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.8.1196 Not tainted syzkaller #0 PREEMPT(full) [ 450.936526][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.936537][T10638] Call Trace: [ 450.936543][T10638] [ 450.936549][T10638] dump_stack_lvl+0x16c/0x1f0 [ 450.936584][T10638] should_fail_ex+0x512/0x640 [ 450.936604][T10638] ? fs_reclaim_acquire+0xae/0x150 [ 450.936627][T10638] should_failslab+0xc2/0x120 [ 450.936648][T10638] __kmalloc_noprof+0xdd/0x880 [ 450.936673][T10638] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 450.936699][T10638] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 450.936718][T10638] tomoyo_realpath_from_path+0xc2/0x6e0 [ 450.936740][T10638] ? tomoyo_profile+0x47/0x60 [ 450.936766][T10638] tomoyo_path_number_perm+0x245/0x580 [ 450.936792][T10638] ? tomoyo_path_number_perm+0x237/0x580 [ 450.936822][T10638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.936851][T10638] ? find_held_lock+0x2b/0x80 [ 450.936898][T10638] ? find_held_lock+0x2b/0x80 [ 450.936917][T10638] ? hook_file_ioctl_common+0x145/0x410 [ 450.936946][T10638] ? __fget_files+0x20e/0x3c0 [ 450.936969][T10638] security_file_ioctl+0x9b/0x240 [ 450.936991][T10638] __x64_sys_ioctl+0xb7/0x210 [ 450.937108][T10638] do_syscall_64+0xcd/0xfa0 [ 450.937131][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.937150][T10638] RIP: 0033:0x7fdb79b8f6c9 [ 450.937166][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.937183][T10638] RSP: 002b:00007fdb7aaf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.937199][T10638] RAX: ffffffffffffffda RBX: 00007fdb79de5fa0 RCX: 00007fdb79b8f6c9 [ 450.937210][T10638] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 450.937220][T10638] RBP: 00007fdb7aaf2090 R08: 0000000000000000 R09: 0000000000000000 [ 450.937229][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.937240][T10638] R13: 00007fdb79de6038 R14: 00007fdb79de5fa0 R15: 00007ffe091d47a8 [ 450.937283][T10638] [ 450.937291][T10638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 451.158204][ T9] usb 3-1: config 0 descriptor?? [ 451.174507][T10632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.195611][ T9] keyspan 3-1:0.11: Keyspan 4 port adapter converter detected [ 451.206912][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 451.237828][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 451.263914][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 451.305873][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 451.333766][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 451.375033][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 451.422529][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 451.443795][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1197'. [ 451.483050][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 451.587625][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 451.588335][T10502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.688684][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 451.754620][ T9] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 451.758369][T10376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.811912][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 451.834006][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 451.859428][T10502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.020699][ T10] usb 9-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 452.046525][T10502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.047313][ T10] usb 9-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.283462][ T10] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 452.322430][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 452.375351][T10502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.383895][ T10] usb 9-1: SerialNumber: syz [ 453.356474][ T10] usbhid 9-1:36.0: couldn't find an input interrupt endpoint [ 453.405891][ T10] usb 9-1: USB disconnect, device number 10 [ 453.497398][T10376] veth0_vlan: entered promiscuous mode [ 453.549365][T10376] veth1_vlan: entered promiscuous mode [ 453.575163][T10502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.593378][ T9] usb 3-1: USB disconnect, device number 39 [ 453.650059][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 453.680683][T10502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.694426][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 453.724163][T10502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.737067][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 453.768350][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 453.774508][T10502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.809120][ T9] keyspan 3-1:0.11: device disconnected [ 453.883839][T10376] veth0_macvtap: entered promiscuous mode [ 453.919305][T10376] veth1_macvtap: entered promiscuous mode [ 454.019864][T10376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.032517][T10689] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1203'. [ 454.061904][T10376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.096801][ T3443] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.115592][ T3443] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.171364][ T3443] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.196006][ T3443] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.425486][ T9693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.438347][ T9693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.447611][ T9693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.460498][ T9693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.483222][ T9693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.523739][T10502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.579244][ T7197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.588467][ T7197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.636840][T10502] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.773898][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.781044][ T7197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.810888][ T7197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.828209][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.835357][ T7215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.843663][ T7197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.940170][ T30] audit: type=1400 audit(2000000136.320:712): avc: denied { mount } for pid=10376 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 455.179932][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1144'. [ 456.554358][ T9693] Bluetooth: hci1: command tx timeout [ 456.737369][T10702] chnl_net:caif_netlink_parms(): no params data found [ 457.005841][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.121666][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.129994][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.139234][T10702] bridge_slave_0: entered allmulticast mode [ 457.157167][T10702] bridge_slave_0: entered promiscuous mode [ 457.179862][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.187697][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.197701][T10702] bridge_slave_1: entered allmulticast mode [ 457.225029][T10702] bridge_slave_1: entered promiscuous mode [ 457.444990][T10753] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.1209'. [ 457.720734][T10702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.778016][T10702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.974707][T10702] team0: Port device team_slave_0 added [ 458.008931][T10702] team0: Port device team_slave_1 added [ 458.362637][ T30] audit: type=1400 audit(2000000139.630:713): avc: denied { connect } for pid=10763 comm="syz.9.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 458.453160][T10702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.464526][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.531018][T10702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.653045][ T9693] Bluetooth: hci1: command tx timeout [ 458.694523][T10702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.701506][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.729293][T10702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.762249][T10502] veth0_vlan: entered promiscuous mode [ 458.787158][T10502] veth1_vlan: entered promiscuous mode [ 458.857239][T10702] hsr_slave_0: entered promiscuous mode [ 458.883924][T10702] hsr_slave_1: entered promiscuous mode [ 458.898462][T10702] debugfs: 'hsr0' already exists in 'hsr' [ 458.913645][T10702] Cannot create hsr debugfs directory [ 459.011012][T10502] veth0_macvtap: entered promiscuous mode [ 459.037627][T10502] veth1_macvtap: entered promiscuous mode [ 459.496383][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1215'. [ 459.552550][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.042760][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.156719][ T7203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.175231][ T7203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.280182][ T7203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.324706][ T7203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.717260][ T9693] Bluetooth: hci1: command tx timeout [ 460.784967][ T7203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.148421][ T7203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.615800][ T7203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.865617][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.877885][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.888273][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.898006][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.906248][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.934459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.994598][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.252921][ T7203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.255180][T10822] tipc: Failed to remove unknown binding: 66,1,1/0:3196517176/3196517178 [ 462.272196][T10822] tipc: Failed to remove unknown binding: 66,1,1/0:3196517176/3196517178 [ 462.382294][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.404509][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.647300][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1225'. [ 462.977875][ T5823] Bluetooth: hci1: command tx timeout [ 463.534182][T10848] tipc: Started in network mode [ 463.539043][T10848] tipc: Node identity ac14140f, cluster identity 4711 [ 463.553986][T10848] tipc: New replicast peer: 255.255.255.255 [ 463.560510][T10848] tipc: Enabled bearer , priority 10 [ 463.676792][T10702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.820845][T10702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.863822][ T5901] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 463.914023][T10817] chnl_net:caif_netlink_parms(): no params data found [ 464.010053][ T5823] Bluetooth: hci3: command tx timeout [ 464.228013][T10702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.413753][ T5901] usb 5-1: not running at top speed; connect to a high speed hub [ 464.533797][ T5901] usb 5-1: config 6 has an invalid interface number: 173 but max is 2 [ 464.554204][ T5897] tipc: Node number set to 2886997007 [ 464.614106][ T5901] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 464.622840][ T5901] usb 5-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 464.691097][ T5901] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 464.702494][ T5901] usb 5-1: config 6 has no interface number 0 [ 464.709469][ T5901] usb 5-1: config 6 interface 173 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 464.880122][T10867] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.1229'. [ 465.105940][ T5901] usb 5-1: config 6 interface 173 has no altsetting 0 [ 465.193542][ T5901] usb 5-1: New USB device found, idVendor=2c7c, idProduct=6005, bcdDevice=b7.a5 [ 465.207652][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.550355][ T5901] usb 5-1: Product: ᜨ閄铠戻ⁿτḾ꣞Ѿ氒톞惔℈ᮮ統矢㘬䧈晱쳙㈲ದ穴첹楹炑㚸⸼桾陑ꩮ煠꼓䍞쐋㟨̲ꅇ케蚄쟛拪⮓ꢝꁠ⬷리読声诮℘뵑ꓷপ㙰嶯뼊뤔ꎒ荙ቆ陬雦挱㬵Ģᱠ [ 465.665814][ T5901] usb 5-1: Manufacturer: ж [ 465.670372][ T5901] usb 5-1: SerialNumber: 狠㯲菰졔௯楐襪椟零ₗ㢬啊尿㢾Ⲝ䀩㫆玛ῼ監囒ꄹ㖺࿤戇鋴睌잡襌鲪處꣭벭㿘Ԅᒁ딇뱼齂벂筈䍴穲؟᪎㕤整䥤㺢홖㐖楠ಅ⬮뺃瞥롮生꿲죞Ｏ䚘瞻䥏눗﫽妌嫕櫗 錇蘸졆ሬﹸૼ苻㉡ᢅॶ趺㵗鏡ﷀ䇠㑈㫈추ﴴ멗뇴䛫ᒗ紧ᡈᚯ띂ᆗ嗛ၬ귔哻蔭ﺇᛈ☃잝䦾ψ嬨 [ 465.758190][ T2340] pvrusb2: request_firmware fatal error with code=-110 [ 465.770098][ T2340] pvrusb2: Failure uploading firmware1 [ 465.773672][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 465.788015][ T2340] pvrusb2: Device initialization was not successful. [ 465.796693][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 465.807587][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 465.889317][ T2340] pvrusb2: Invalid write control endpoint [ 465.914523][ T42] pvrusb2: Device being rendered inoperable [ 465.962284][ T2340] usb 8-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 465.989772][ T9] usb 10-1: device descriptor read/64, error -71 [ 466.010480][ T2340] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 466.032723][ T30] audit: type=1400 audit(2000000147.390:714): avc: denied { getopt } for pid=10845 comm="syz.4.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 466.093396][ T5823] Bluetooth: hci3: command tx timeout [ 467.203932][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 467.343830][ T9] usb 10-1: device descriptor read/64, error -71 [ 467.402248][ T5901] option 5-1:6.173: GSM modem (1-port) converter detected [ 467.435557][ T5901] usb 5-1: USB disconnect, device number 8 [ 467.453985][ T9] usb usb10-port1: attempt power cycle [ 467.456528][ T5901] option 5-1:6.173: device disconnected [ 467.660375][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.682123][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.700089][ T7203] bond0 (unregistering): Released all slaves [ 467.793685][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 467.814349][ T9] usb 10-1: device descriptor read/8, error -71 [ 467.883131][ T7203] bond1 (unregistering): Released all slaves [ 467.896086][T10702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.913823][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 468.023194][ T7203] tipc: Disabling bearer [ 468.053694][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 468.055677][ T7203] tipc: Left network mode [ 468.068025][ T5901] usb 5-1: device descriptor read/64, error -71 [ 468.074658][ T9] usb 10-1: device descriptor read/8, error -71 [ 468.154349][ T5823] Bluetooth: hci3: command tx timeout [ 468.213379][T10909] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 468.253693][ T9] usb usb10-port1: unable to enumerate USB device [ 468.543782][ T5901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 468.626731][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1234'. [ 468.638989][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.654377][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.670742][T10817] bridge_slave_0: entered allmulticast mode [ 468.694402][T10817] bridge_slave_0: entered promiscuous mode [ 468.703994][ T5901] usb 5-1: device descriptor read/64, error -71 [ 468.757320][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.772406][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.804817][T10817] bridge_slave_1: entered allmulticast mode [ 468.840810][T10817] bridge_slave_1: entered promiscuous mode [ 468.986774][ T5901] usb usb5-port1: attempt power cycle [ 469.000629][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.049515][ T7203] hsr_slave_0: left promiscuous mode [ 469.083424][ T7203] hsr_slave_1: left promiscuous mode [ 469.100266][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.122218][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.142654][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.170463][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.257683][ T7203] veth1_macvtap: left promiscuous mode [ 469.285952][ T7203] veth0_macvtap: left promiscuous mode [ 469.291604][ T7203] veth1_vlan: left promiscuous mode [ 469.487480][ T7203] veth0_vlan: left promiscuous mode [ 469.560603][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1237'. [ 469.577749][ T5901] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 469.615767][T10934] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1237'. [ 469.665655][ T5901] usb 5-1: device descriptor read/8, error -71 [ 469.934015][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 469.974734][ T5901] usb 5-1: device descriptor read/8, error -71 [ 470.094131][ T5901] usb usb5-port1: unable to enumerate USB device [ 470.234139][ T5823] Bluetooth: hci3: command tx timeout [ 471.214502][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 471.310539][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 471.373021][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 471.391215][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 471.398897][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.407878][ T5937] usb 5-1: config 4 interface 0 has no altsetting 0 [ 471.434486][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 471.440753][ T5937] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 471.461427][ T5937] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 471.483324][ T5937] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 471.521333][ T5937] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 471.534888][ T5937] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 471.542292][ T5937] usb 5-1: media controller created [ 471.567585][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.081976][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.091284][ T868] infiniband syz1: ib_query_port failed (-19) [ 472.321131][T10817] team0: Port device team_slave_0 added [ 472.430488][T10817] team0: Port device team_slave_1 added [ 472.501030][T10702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.680200][T10958] usb 5-1: dvb_usb_au6610: wlen=4, aborting [ 472.686870][ T5937] zl10353_read_register: readreg error (reg=127, ret==0) [ 472.934468][ T5937] usb 5-1: USB disconnect, device number 13 [ 472.982103][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.020915][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.102798][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.167440][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.183745][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.239100][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1244'. [ 473.258342][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.327242][ T7203] IPVS: stop unused estimator thread 0... [ 473.396274][T10702] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.672577][T10817] hsr_slave_0: entered promiscuous mode [ 473.754624][T10817] hsr_slave_1: entered promiscuous mode [ 473.773940][T10817] debugfs: 'hsr0' already exists in 'hsr' [ 473.779796][T10817] Cannot create hsr debugfs directory [ 474.072424][ T30] audit: type=1400 audit(2000000155.450:715): avc: denied { mount } for pid=10997 comm="syz.4.1247" name="/" dev="hugetlbfs" ino=33273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 474.102628][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.109350][T10999] i2c i2c-0: Invalid block write size 252 [ 474.109974][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.125020][ T9693] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.146377][ T9693] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.159527][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.166725][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.176886][ T9693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.189243][ T9693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.196912][ T9693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.361210][ T30] audit: type=1400 audit(2000000155.740:716): avc: denied { mounton } for pid=10997 comm="syz.4.1247" path="/file0" dev="hugetlbfs" ino=33293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 474.855174][ T868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 474.902185][ T7203] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.019011][ T868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.051972][ T868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.083669][ T868] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 475.122872][ T868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.151998][ T868] usb 5-1: config 0 descriptor?? [ 475.262977][ T7203] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.467173][ T7203] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.555134][ T5937] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 475.596151][ T868] usbhid 5-1:0.0: can't add hid device: -71 [ 475.603335][ T868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 475.617051][ T868] usb 5-1: USB disconnect, device number 14 [ 475.630227][T10817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.741044][ T5937] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 475.752762][ T5937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.766647][ T7203] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.777477][ T5937] usb 9-1: Product: syz [ 475.781634][ T5937] usb 9-1: Manufacturer: syz [ 475.790298][ T5937] usb 9-1: SerialNumber: syz [ 475.828095][ T5937] usb 9-1: config 0 descriptor?? [ 475.845434][ T5937] hub 9-1:0.0: bad descriptor, ignoring hub [ 475.861646][ T5937] hub 9-1:0.0: probe with driver hub failed with error -5 [ 475.913520][T10817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.010564][T10817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.058907][ T5937] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 476.095286][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 476.124351][ T5937] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 476.145448][ T5937] usb 9-1: media controller created [ 476.155550][T10817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.193186][T10702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.234097][ T9693] Bluetooth: hci2: command tx timeout [ 476.235318][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 476.249221][T11019] dib0700: tx buffer length is larger than 4. Not supported. [ 476.386397][T11000] chnl_net:caif_netlink_parms(): no params data found [ 476.493784][T11048] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1249'. [ 476.698738][ T5937] DVB: Unable to find symbol dib7000p_attach() [ 476.772546][ T5937] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 476.937985][ T5937] rc_core: IR keymap rc-dib0700-rc5 not found [ 476.949667][ T5937] Registered IR keymap rc-empty [ 476.964865][ T5937] dvb-usb: could not initialize remote control. [ 476.971248][ T5937] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 477.160011][ T5937] usb 9-1: USB disconnect, device number 11 [ 477.586017][ T6882] udevd[6882]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 477.763365][ T6882] udevd[6882]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 477.894573][ T7203] bridge_slave_1: left allmulticast mode [ 477.900281][ T7203] bridge_slave_1: left promiscuous mode [ 477.927806][ T5937] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 477.955996][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.993063][ T7203] bridge_slave_0: left allmulticast mode [ 478.019031][ T7203] bridge_slave_0: left promiscuous mode [ 478.049795][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.073631][ T30] audit: type=1400 audit(2000000159.440:717): avc: denied { ioctl } for pid=11067 comm="syz.4.1253" path="socket:[32444]" dev="sockfs" ino=32444 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.130167][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1252'. [ 478.323778][ T9693] Bluetooth: hci2: command tx timeout [ 478.593059][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.604669][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.614765][ T7203] bond0 (unregistering): Released all slaves [ 479.071556][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.084042][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.100347][T11000] bridge_slave_0: entered allmulticast mode [ 479.124118][T11000] bridge_slave_0: entered promiscuous mode [ 479.143081][T10702] veth0_vlan: entered promiscuous mode [ 479.368813][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.815461][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.822800][T11000] bridge_slave_1: entered allmulticast mode [ 479.846954][T11000] bridge_slave_1: entered promiscuous mode [ 479.922826][T10702] veth1_vlan: entered promiscuous mode [ 480.195623][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.230783][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.257275][T10817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 480.287915][ T7203] hsr_slave_0: left promiscuous mode [ 480.299717][ T7203] hsr_slave_1: left promiscuous mode [ 480.324307][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.348304][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.362499][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.370956][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.394309][ T9693] Bluetooth: hci2: command tx timeout [ 480.410165][ T7203] veth1_macvtap: left promiscuous mode [ 480.415809][ T7203] veth0_macvtap: left promiscuous mode [ 480.421422][ T7203] veth1_vlan: left promiscuous mode [ 480.428679][ T7203] veth0_vlan: left promiscuous mode [ 480.685720][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 481.304717][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 481.365620][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 482.012275][T10817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 482.027550][T10817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.125410][T11000] team0: Port device team_slave_0 added [ 482.134771][T10817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.162308][T10702] veth0_macvtap: entered promiscuous mode [ 482.171840][T11000] team0: Port device team_slave_1 added [ 482.206216][T10702] veth1_macvtap: entered promiscuous mode [ 482.267516][T11140] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1262'. [ 482.468692][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.475962][ T9693] Bluetooth: hci2: command tx timeout [ 482.484013][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.584682][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.654684][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.662598][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.886006][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.054935][T10702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.232491][T11000] hsr_slave_0: entered promiscuous mode [ 483.241031][T11000] hsr_slave_1: entered promiscuous mode [ 483.435112][T10702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.447796][ T7206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.520425][ T7206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.537647][T11162] SELinux: failed to load policy [ 483.552823][ T7206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.657898][ T7206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.721764][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1266'. [ 484.426857][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.500985][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.700010][T11000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.774651][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.781854][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.837373][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.844853][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.085714][T11000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.156221][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.187596][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.250900][T11000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.417210][T11000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.488360][ T7206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.525779][ T7206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.849881][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.926817][T11000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.030307][T11000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.179213][T11000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.372322][T11000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.719592][T11000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.811309][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.857805][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.865066][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.905796][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.912908][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.995356][T10817] veth0_vlan: entered promiscuous mode [ 487.019099][T10817] veth1_vlan: entered promiscuous mode [ 487.093501][T10817] veth0_macvtap: entered promiscuous mode [ 487.171333][T10817] veth1_macvtap: entered promiscuous mode [ 487.229348][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.278167][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.323820][ T7206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.364089][ T7206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.389147][ T7206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.438829][ T7203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.607892][ T7206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.625736][ T7206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.703147][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.737349][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.764202][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.836545][T11000] veth0_vlan: entered promiscuous mode [ 487.886670][T11000] veth1_vlan: entered promiscuous mode [ 488.011429][T11000] veth0_macvtap: entered promiscuous mode [ 488.042668][T11000] veth1_macvtap: entered promiscuous mode [ 488.135860][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.426559][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.564064][ T5901] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 488.587257][ T7206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.640857][ T7206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.740532][ T7203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.785396][ T5901] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 488.847010][ T5901] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 488.861997][ T7203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.897928][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 488.940867][ T5901] usb 6-1: config 1 has no interface number 0 [ 488.982634][ T5901] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 489.020778][ T5901] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.034850][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.042714][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.106317][ T5901] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 489.132196][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.155074][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.172872][ T5901] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 489.213291][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.376015][ T5901] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 489.593072][ T5901] usb 6-1: USB disconnect, device number 10 [ 489.610927][ T5901] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 489.632322][ T9693] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 489.687691][ T30] audit: type=1400 audit(2000000171.070:718): avc: denied { ioctl } for pid=11275 comm="syz.1.1243" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 490.122549][T11287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 490.129102][T11287] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 490.137785][T11287] vhci_hcd vhci_hcd.0: Device attached [ 490.144921][T11290] vhci_hcd: connection closed [ 490.146506][ T7206] vhci_hcd: stop threads [ 490.183727][ T7206] vhci_hcd: release socket [ 490.198438][ T7206] vhci_hcd: disconnect device [ 490.571651][ T30] audit: type=1400 audit(2000000171.920:719): avc: denied { setopt } for pid=11292 comm="syz.1.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 490.803868][ T5901] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 491.169510][ T5901] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 491.290872][T11306] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.1276'. [ 491.297514][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.524671][ T5901] usb 2-1: Product: syz [ 491.530667][ T5901] usb 2-1: Manufacturer: syz [ 491.559703][ T5901] usb 2-1: SerialNumber: syz [ 491.574206][ T5901] usb 2-1: config 0 descriptor?? [ 491.582678][ T5901] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 491.610624][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 491.622591][T11312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1275'. [ 491.632933][T11312] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1275'. [ 491.656080][ T5901] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 491.671587][ T5901] usb 2-1: media controller created [ 491.717264][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.754233][T11314] Attempt to restore checkpoint with obsolete wellknown handles [ 491.788632][T11293] dvb-usb: bulk message failed: -22 (7/0) [ 491.854035][ T30] audit: type=1326 audit(2000000173.230:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.8.1277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb79b8f6c9 code=0x0 [ 491.906383][ T5901] DVB: Unable to find symbol mt352_attach() [ 491.966484][ T5901] DVB: Unable to find symbol nxt6000_attach() [ 491.976733][ T5901] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 492.001485][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 492.026045][ T5901] dvb-usb: schedule remote query interval to 1000 msecs. [ 492.058645][ T5901] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 492.075775][ T5901] dvb-usb: bulk message failed: -22 (7/0) [ 492.089624][ T5901] dvb-usb: bulk message failed: -22 (7/0) [ 493.384530][ T5882] dvb-usb: bulk message failed: -22 (7/0) [ 493.483829][ T5882] dvb-usb: error while querying for an remote control event. [ 493.495626][ T5901] usb 2-1: USB disconnect, device number 36 [ 493.804250][ T5901] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 493.817711][T11343] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1282'. [ 494.039253][T11348] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 494.316968][ T30] audit: type=1400 audit(2000000175.480:721): avc: denied { ioctl } for pid=11336 comm="syz.5.1281" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 494.507752][ T30] audit: type=1400 audit(2000000175.480:722): avc: denied { checkpoint_restore } for pid=11336 comm="syz.5.1281" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 494.509315][T11349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.529631][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.923664][ T5857] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 495.554534][ T5857] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 495.583650][ T5901] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 495.587523][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.696275][ T5857] usb 5-1: Product: syz [ 495.700501][ T5857] usb 5-1: Manufacturer: syz [ 495.705413][ T5857] usb 5-1: SerialNumber: syz [ 495.718453][ T5857] usb 5-1: config 0 descriptor?? [ 495.801441][ T5901] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 495.828709][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.853296][ T5901] usb 9-1: Product: syz [ 495.868298][ T5901] usb 9-1: Manufacturer: syz [ 495.883300][ T5901] usb 9-1: SerialNumber: syz [ 495.912891][ T5901] usb 9-1: config 0 descriptor?? [ 495.952415][ T5901] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 495.964010][ T5857] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 496.203405][ T5901] gspca_sunplus: reg_r err -71 [ 496.217559][ T5901] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 496.261917][ T5901] usb 9-1: USB disconnect, device number 12 [ 496.830924][T11391] overlayfs: failed to get inode (-116) [ 496.840743][T11391] overlayfs: failed to get inode (-116) [ 497.884569][ T5868] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 498.054129][T11406] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.205431][ T5868] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 498.243353][ T5868] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.286516][ T5868] usb 9-1: config 0 has no interface number 0 [ 498.311027][ T5868] usb 9-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 498.363407][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.406945][ T5868] usb 9-1: config 0 descriptor?? [ 498.468666][ T5868] ttusbir 9-1:0.255: cannot find expected altsetting [ 498.554924][ T5857] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 498.616285][T11406] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.894398][ T5868] usb 5-1: USB disconnect, device number 15 [ 499.325043][T11406] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.449694][T11435] exFAT-fs (loop1): mounting with "discard" option, but the device does not support discard [ 499.487437][ T30] audit: type=1400 audit(2000000180.830:723): avc: denied { setopt } for pid=11433 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 499.511776][T11435] exFAT-fs (loop1): unable to read boot sector [ 499.520390][T11435] exFAT-fs (loop1): failed to read boot sector [ 499.533125][T11435] exFAT-fs (loop1): failed to recognize exfat type [ 499.690217][T11441] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1300'. [ 500.004185][T11406] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.237078][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 500.380379][T11448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.570837][ T1033] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.203855][T11461] tipc: Started in network mode [ 501.213326][T11461] tipc: Node identity ac14140f, cluster identity 4711 [ 501.233136][T11461] tipc: New replicast peer: 255.255.255.255 [ 501.245015][T11461] tipc: Enabled bearer , priority 10 [ 501.256839][ T7215] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.286384][ T7215] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.299763][ T5937] usb 9-1: USB disconnect, device number 13 [ 501.318709][ T7215] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.063326][ T30] audit: type=1400 audit(2000000182.960:724): avc: denied { create } for pid=11465 comm="syz.8.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 502.369384][ T5857] tipc: Node number set to 2886997007 [ 502.928312][ T5937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 503.114278][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 503.130923][ T5937] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.188175][ T5937] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.269185][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.305554][ T5937] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 503.342870][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.392539][ T5937] usb 6-1: config 0 descriptor?? [ 503.815708][T11494] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 503.951822][T11503] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1312'. [ 503.962839][T11503] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1312'. [ 504.100322][ T5937] hid_parser_main: 8 callbacks suppressed [ 504.100347][ T5937] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 504.114088][ T5882] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 504.122297][ T5937] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 504.129803][ T5937] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 504.137243][ T5937] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 504.216562][ T5937] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 504.311621][T11508] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1318'. [ 504.610117][ T5937] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 504.622591][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.640591][ T5882] usb 1-1: config 0 has no interface number 0 [ 504.653747][ T5882] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 505.163726][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.188517][ T5882] usb 1-1: config 0 descriptor?? [ 505.198372][ T5882] usb 1-1: selecting invalid altsetting 1 [ 505.210605][ T5882] dvb_ttusb_budget: ttusb_init_controller: error [ 505.217511][ T5882] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 505.409791][ T30] audit: type=1400 audit(2000000186.780:725): avc: denied { ioctl } for pid=11514 comm="syz.8.1319" path="socket:[35983]" dev="sockfs" ino=35983 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 505.413004][ T5882] DVB: Unable to find symbol cx22700_attach() [ 505.533180][T11478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.584029][T11519] bridge1: entered promiscuous mode [ 505.997342][T11478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.863813][ T30] audit: type=1400 audit(2000000186.790:726): avc: denied { read } for pid=11514 comm="syz.8.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 506.904659][ T5857] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 506.985533][ T5882] DVB: Unable to find symbol tda10046_attach() [ 507.093683][ T5882] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 507.145074][ T5882] usb 1-1: USB disconnect, device number 39 [ 507.177598][T11532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1322'. [ 507.187876][T11532] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1322'. [ 507.227226][T11535] FAULT_INJECTION: forcing a failure. [ 507.227226][T11535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.269395][T11535] CPU: 0 UID: 0 PID: 11535 Comm: syz.1.1323 Not tainted syzkaller #0 PREEMPT(full) [ 507.269422][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.269432][T11535] Call Trace: [ 507.269438][T11535] [ 507.269445][T11535] dump_stack_lvl+0x16c/0x1f0 [ 507.269477][T11535] should_fail_ex+0x512/0x640 [ 507.269502][T11535] _copy_from_iter+0x29f/0x1720 [ 507.269524][T11535] ? __pfx_avc_has_perm+0x10/0x10 [ 507.269550][T11535] ? __pfx__copy_from_iter+0x10/0x10 [ 507.269573][T11535] ? sock_has_perm+0x259/0x2f0 [ 507.269598][T11535] ? __pfx_sock_has_perm+0x10/0x10 [ 507.269626][T11535] hci_sock_sendmsg+0x46d/0x25f0 [ 507.269655][T11535] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 507.269683][T11535] sock_write_iter+0x566/0x610 [ 507.269701][T11535] ? __pfx_sock_write_iter+0x10/0x10 [ 507.269723][T11535] ? bpf_lsm_file_permission+0x9/0x10 [ 507.269740][T11535] ? security_file_permission+0x71/0x210 [ 507.269760][T11535] ? rw_verify_area+0xcf/0x6c0 [ 507.269787][T11535] vfs_write+0x7d3/0x11d0 [ 507.269804][T11535] ? __pfx_sock_write_iter+0x10/0x10 [ 507.269822][T11535] ? __pfx_vfs_write+0x10/0x10 [ 507.269835][T11535] ? find_held_lock+0x2b/0x80 [ 507.269871][T11535] ksys_write+0x1f8/0x250 [ 507.269886][T11535] ? __pfx_ksys_write+0x10/0x10 [ 507.269910][T11535] do_syscall_64+0xcd/0xfa0 [ 507.269927][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.269942][T11535] RIP: 0033:0x7fd69ed8f6c9 [ 507.269956][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.269970][T11535] RSP: 002b:00007fd69fc4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.269988][T11535] RAX: ffffffffffffffda RBX: 00007fd69efe5fa0 RCX: 00007fd69ed8f6c9 [ 507.269999][T11535] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004 [ 507.270009][T11535] RBP: 00007fd69fc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 507.270019][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.270029][T11535] R13: 00007fd69efe6038 R14: 00007fd69efe5fa0 R15: 00007ffeaa6d31b8 [ 507.270053][T11535] [ 508.032188][ T5937] usb 6-1: USB disconnect, device number 11 [ 508.442533][T11547] ref_ctr_offset mismatch. inode: 0x68 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000380 [ 508.717762][T11547] uprobe: syz.5.1326:11547 failed to unregister, leaking uprobe [ 508.733839][T11547] uprobe: syz.5.1326:11547 failed to unregister, leaking uprobe [ 508.797269][ T5823] Bluetooth: hci7: command 0x0406 tx timeout [ 508.921067][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1329'. [ 508.925269][T11568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1330'. [ 508.963716][T10062] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 509.046242][ T30] audit: type=1326 audit(2000000197.395:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 509.124111][T10062] usb 2-1: Using ep0 maxpacket: 8 [ 509.357709][T10062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.456501][T10062] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 509.468205][ T30] audit: type=1326 audit(2000000197.525:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 509.468256][ T30] audit: type=1326 audit(2000000197.735:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 509.521360][T11575] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1332'. [ 509.669438][ T30] audit: type=1326 audit(2000000197.735:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 509.767181][T10062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 509.798729][T10062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 509.843371][T10062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 509.844238][ T30] audit: type=1326 audit(2000000197.815:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 509.909811][T10062] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 509.919735][T10062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 509.953915][T10062] usb 2-1: Product: syz [ 509.958251][T10062] usb 2-1: Manufacturer: syz [ 509.983780][T10062] usb 2-1: SerialNumber: syz [ 509.994313][ T30] audit: type=1326 audit(2000000197.825:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 510.002388][T10062] usb 2-1: config 0 descriptor?? [ 510.113908][ T30] audit: type=1326 audit(2000000197.955:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 510.324058][T10062] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 510.348247][T10062] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 510.472359][ T30] audit: type=1326 audit(2000000197.955:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 510.515217][T10062] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 510.574190][T10062] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 510.585361][ T30] audit: type=1326 audit(2000000197.955:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738bf8f6c9 code=0x7ffc0000 [ 510.904206][T11580] syz.0.1334: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 510.941964][T10062] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 510.969564][T11594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1335'. [ 510.976839][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.0.1334 Not tainted syzkaller #0 PREEMPT(full) [ 510.976868][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 510.976878][T11580] Call Trace: [ 510.976885][T11580] [ 510.976892][T11580] dump_stack_lvl+0x16c/0x1f0 [ 510.976924][T11580] warn_alloc+0x248/0x3a0 [ 510.976952][T11580] ? __pfx_warn_alloc+0x10/0x10 [ 510.976988][T11580] ? hash_ipportip_create+0x3ec/0x1250 [ 510.977004][T11580] ? __vmalloc_node_noprof+0xad/0xf0 [ 510.977028][T11580] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 510.977049][T11580] ? __kasan_kmalloc+0xaa/0xb0 [ 510.977064][T11580] ? hash_ipportip_create+0x36b/0x1250 [ 510.977091][T11580] ? hash_ipportip_create+0x3ec/0x1250 [ 510.977113][T11580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 510.977137][T11580] ? ___kmalloc_large_node+0xed/0x160 [ 510.977160][T11580] __kvmalloc_node_noprof+0x431/0x9c0 [ 510.977176][T11580] ? hash_ipportip_create+0x3ec/0x1250 [ 510.977193][T11580] ? hash_ipportip_create+0x3ec/0x1250 [ 510.977214][T11580] ? hash_ipportip_create+0x3ec/0x1250 [ 510.977231][T11580] hash_ipportip_create+0x3ec/0x1250 [ 510.977250][T11580] ? __nla_parse+0x14/0x60 [ 510.977276][T11580] ? __pfx_hash_ipportip_create+0x10/0x10 [ 510.977293][T11580] ip_set_create+0x7e4/0x14d0 [ 510.977318][T11580] ? __pfx_ip_set_create+0x10/0x10 [ 510.977352][T11580] ? find_held_lock+0x2b/0x80 [ 510.977380][T11580] nfnetlink_rcv_msg+0x9fc/0x1200 [ 510.977406][T11580] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 510.977427][T11580] ? __lock_acquire+0x622/0x1c90 [ 510.977470][T11580] ? avc_has_perm_noaudit+0x149/0x3b0 [ 510.977499][T11580] netlink_rcv_skb+0x158/0x420 [ 510.977528][T11580] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 510.977547][T11580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.977580][T11580] ? ns_capable+0xd7/0x110 [ 510.977601][T11580] nfnetlink_rcv+0x1b3/0x430 [ 510.977618][T11580] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 510.977634][T11580] ? netlink_deliver_tap+0x1ae/0xd30 [ 510.977661][T11580] netlink_unicast+0x5aa/0x870 [ 510.977689][T11580] ? __pfx_netlink_unicast+0x10/0x10 [ 510.977723][T11580] netlink_sendmsg+0x8c8/0xdd0 [ 510.977749][T11580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.977780][T11580] ____sys_sendmsg+0xa98/0xc70 [ 510.977797][T11580] ? copy_msghdr_from_user+0x10a/0x160 [ 510.977817][T11580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.977844][T11580] ___sys_sendmsg+0x134/0x1d0 [ 510.977862][T11580] ? futex_private_hash_put+0x176/0x300 [ 510.977887][T11580] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.977905][T11580] ? __lock_acquire+0x622/0x1c90 [ 510.977957][T11580] __sys_sendmsg+0x16d/0x220 [ 510.977977][T11580] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.977997][T11580] ? __x64_sys_futex+0x1e0/0x4c0 [ 510.978025][T11580] do_syscall_64+0xcd/0xfa0 [ 510.978042][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.978059][T11580] RIP: 0033:0x7f4ffb78f6c9 [ 510.978081][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.978096][T11580] RSP: 002b:00007f4ffc5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.978113][T11580] RAX: ffffffffffffffda RBX: 00007f4ffb9e5fa0 RCX: 00007f4ffb78f6c9 [ 510.978123][T11580] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 510.978133][T11580] RBP: 00007f4ffb811f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.978142][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.978151][T11580] R13: 00007f4ffb9e6038 R14: 00007f4ffb9e5fa0 R15: 00007fff3242bcb8 [ 510.978176][T11580] [ 510.978183][T11580] Mem-Info: [ 511.383692][T10062] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 511.403702][T11580] active_anon:26518 inactive_anon:0 isolated_anon:0 [ 511.403702][T11580] active_file:19582 inactive_file:40820 isolated_file:0 [ 511.403702][T11580] unevictable:768 dirty:442 writeback:0 [ 511.403702][T11580] slab_reclaimable:13321 slab_unreclaimable:123366 [ 511.403702][T11580] mapped:60279 shmem:10171 pagetables:2080 [ 511.403702][T11580] sec_pagetables:0 bounce:0 [ 511.403702][T11580] kernel_misc_reclaimable:0 [ 511.403702][T11580] free:1206825 free_pcp:13795 free_cma:0 [ 511.528074][T11580] Node 0 active_anon:106172kB inactive_anon:0kB active_file:78284kB inactive_file:163080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:241272kB dirty:1744kB writeback:0kB shmem:39148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14492kB pagetables:8268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 511.611437][T11598] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1335'. [ 511.612618][T11580] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 511.660786][T11580] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.704036][T11580] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 511.709854][T11580] Node 0 DMA32 free:905756kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106072kB inactive_anon:0kB active_file:78284kB inactive_file:163080kB unevictable:1536kB writepending:1744kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:47768kB local_pcp:26512kB free_cma:0kB [ 511.828554][T10062] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 511.891608][T11580] lowmem_reserve[]: 0 0 1 1 1 [ 511.897729][T10062] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 512.536784][T11580] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.614745][T11580] lowmem_reserve[]: 0 0 0 0 0 [ 512.628385][T10062] usb 2-1: USB disconnect, device number 37 [ 512.654747][T11580] Node 1 Normal free:3905100kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:24kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7816kB local_pcp:5768kB free_cma:0kB [ 512.873954][T11580] lowmem_reserve[]: 0 0 0 0 0 [ 512.928791][T11580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 512.961950][T11580] Node 0 DMA32: 305*4kB (UM) 278*8kB (UM) 186*16kB (UME) 47*32kB (UE) 297*64kB (UME) 282*128kB (UME) 185*256kB (UM) 128*512kB (UME) 67*1024kB (UM) 31*2048kB (UME) 142*4096kB (UM) = 889652kB [ 513.022301][T11580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 513.076802][T11580] Node 1 Normal: 189*4kB (UME) 65*8kB (UME) 39*16kB (UME) 195*32kB (UME) 74*64kB (UME) 18*128kB (UME) 1*256kB (U) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3905100kB [ 513.163013][T11580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 513.209305][T11580] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 513.240113][T11580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 513.283763][T11580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 513.284154][T10062] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 513.313460][T11580] 73265 total pagecache pages [ 513.335413][T11580] 0 pages in swap cache [ 513.351155][T11580] Free swap = 124996kB [ 513.380377][T11580] Total swap = 124996kB [ 513.393900][T11580] 2097051 pages RAM [ 513.400022][T11580] 0 pages HighMem/MovableOnly [ 513.426235][T11620] netlink: 'syz.8.1340': attribute type 1 has an invalid length. [ 513.443254][T11580] 428747 pages reserved [ 513.446415][T11620] netlink: 'syz.8.1340': attribute type 3 has an invalid length. [ 513.483930][T11620] netlink: 'syz.8.1340': attribute type 2 has an invalid length. [ 513.486188][T11580] 0 pages cma reserved [ 513.523038][T11620] netlink: 'syz.8.1340': attribute type 3 has an invalid length. [ 513.531318][T11620] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1340'. [ 513.540961][T10062] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 513.559670][T10062] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 513.611557][T10062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 513.644424][T10062] usb 2-1: config 1 has no interface number 0 [ 513.650618][T10062] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 513.683614][T10062] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 513.732291][T10062] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 513.766230][T10062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.804788][T10062] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 514.212986][T11639] netlink: 'syz.0.1343': attribute type 10 has an invalid length. [ 514.220958][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1343'. [ 514.262680][T11639] batman_adv: batadv0: Adding interface: virt_wifi0 [ 514.269563][T11639] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.295442][T11639] batman_adv: batadv0: Interface activated: virt_wifi0 [ 514.489594][T10062] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 514.712534][ T5882] usb 2-1: USB disconnect, device number 38 [ 514.728370][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 514.923605][ T30] audit: type=1400 audit(2000000203.295:736): avc: denied { getopt } for pid=11650 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 514.997960][ T30] audit: type=1400 audit(2000000203.375:737): avc: denied { setopt } for pid=11646 comm="syz.5.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 515.054233][ T5857] IPVS: starting estimator thread 0... [ 515.145081][T11658] IPVS: using max 50 ests per chain, 120000 per kthread [ 515.674887][ T31] INFO: task syz.5.964:9532 blocked for more than 143 seconds. [ 515.693891][ T31] Not tainted syzkaller #0 [ 515.699283][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.733714][ T31] task:syz.5.964 state:D stack:28856 pid:9532 tgid:9531 ppid:7885 task_flags:0x400040 flags:0x00080002 [ 515.763531][ T31] Call Trace: [ 515.773605][ T31] [ 515.781729][ T31] __schedule+0x1190/0x5de0 [ 515.790935][ T31] ? check_path.constprop.0+0x24/0x50 [ 515.804441][ T31] ? __lock_acquire+0x622/0x1c90 [ 515.809569][ T30] audit: type=1400 audit(2000000204.185:738): avc: denied { append } for pid=11674 comm="syz.4.1350" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 515.849105][ T31] ? __pfx___schedule+0x10/0x10 [ 515.860667][ T31] ? find_held_lock+0x2b/0x80 [ 515.868197][ T31] ? schedule+0x2d7/0x3a0 [ 515.906244][ T31] ? comedi_open+0xe0/0x5a0 [ 515.914309][ T31] schedule+0xe7/0x3a0 [ 515.923198][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.928848][ T31] __mutex_lock+0x818/0x1060 [ 515.933772][ T31] ? comedi_open+0xe0/0x5a0 [ 515.940117][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.945633][ T31] ? __pfx_comedi_open+0x10/0x10 [ 515.951318][ T31] ? comedi_open+0xe0/0x5a0 [ 515.956739][ T31] ? __pfx_comedi_open+0x10/0x10 [ 515.962155][ T31] comedi_open+0xe0/0x5a0 [ 515.966641][ T31] ? __pfx_comedi_open+0x10/0x10 [ 515.971881][ T31] chrdev_open+0x234/0x6a0 [ 516.006832][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 516.029544][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 516.051458][ T31] do_dentry_open+0x982/0x1530 [ 516.063055][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 516.075387][ T31] vfs_open+0x82/0x3f0 [ 516.084321][ T5857] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 516.093077][ T31] path_openat+0x1de4/0x2cb0 [ 516.108232][ T31] ? __pfx_path_openat+0x10/0x10 [ 516.120954][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 516.133639][ T31] do_filp_open+0x20b/0x470 [ 516.147127][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 516.179586][ T31] ? alloc_fd+0x471/0x7d0 [ 516.206087][ T31] do_sys_openat2+0x11b/0x1d0 [ 516.213773][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.238325][ T31] ? __pfx___schedule+0x10/0x10 [ 516.257047][ T5857] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 516.282513][ T31] __x64_sys_openat+0x174/0x210 [ 516.290853][ T5857] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 516.295133][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.326849][ T31] do_syscall_64+0xcd/0xfa0 [ 516.338105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.352791][ T31] RIP: 0033:0x7f524198f6c9 [ 516.362935][ T31] RSP: 002b:00007f52428b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.381442][ T31] RAX: ffffffffffffffda RBX: 00007f5241be5fa0 RCX: 00007f524198f6c9 [ 516.390598][ T5857] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.438201][ T31] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 516.450856][ T5857] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 516.456856][ T31] RBP: 00007f5241a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.471568][ T5857] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 516.484987][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.507054][ T31] R13: 00007f5241be6038 R14: 00007f5241be5fa0 R15: 00007ffe30db5ba8 [ 516.508157][ T5857] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.537631][ T31] [ 516.553229][ T31] INFO: task syz.1.973:9558 blocked for more than 144 seconds. [ 516.587897][ T5857] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 516.590503][ T31] Not tainted syzkaller #0 [ 516.616923][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.620006][ T5857] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 516.634485][ T31] task:syz.1.973 state:D stack:28272 pid:9558 tgid:9557 ppid:5808 task_flags:0x400040 flags:0x00080002 [ 516.664350][ T5857] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.673835][ T31] Call Trace: [ 516.682815][ T31] [ 516.689418][ T31] __schedule+0x1190/0x5de0 [ 516.698527][ T31] ? __lock_acquire+0x622/0x1c90 [ 516.703472][ T5857] usb 5-1: string descriptor 0 read error: -22 [ 516.703876][ T5857] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 516.723965][ T31] ? __pfx___schedule+0x10/0x10 [ 516.726061][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.728937][ T31] ? find_held_lock+0x2b/0x80 [ 516.745919][ T31] ? schedule+0x2d7/0x3a0 [ 516.759006][ T31] ? comedi_open+0xe0/0x5a0 [ 516.761075][ T5857] adutux 5-1:168.0: interrupt endpoints not found [ 516.771144][ T31] schedule+0xe7/0x3a0 [ 516.775782][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.781339][ T31] __mutex_lock+0x818/0x1060 [ 516.786695][ T31] ? comedi_open+0xe0/0x5a0 [ 516.791952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.805677][ T31] ? __pfx_comedi_open+0x10/0x10 [ 516.811021][ T31] ? comedi_open+0xe0/0x5a0 [ 516.817934][ T31] ? __pfx_comedi_open+0x10/0x10 [ 516.824338][ T31] comedi_open+0xe0/0x5a0 [ 516.829251][ T31] ? __pfx_comedi_open+0x10/0x10 [ 516.835333][ T31] chrdev_open+0x234/0x6a0 [ 516.840128][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 516.845389][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 516.851792][ T31] do_dentry_open+0x982/0x1530 [ 516.856941][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 516.864257][ T31] vfs_open+0x82/0x3f0 [ 516.868401][ T31] path_openat+0x1de4/0x2cb0 [ 516.873023][ T31] ? __pfx_path_openat+0x10/0x10 [ 516.878833][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 516.884087][ T31] do_filp_open+0x20b/0x470 [ 516.888633][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 516.894387][ T31] ? alloc_fd+0x471/0x7d0 [ 516.899336][ T31] do_sys_openat2+0x11b/0x1d0 [ 516.909960][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.916157][ T31] ? find_held_lock+0x2b/0x80 [ 516.920895][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 516.926385][ T31] __x64_sys_openat+0x174/0x210 [ 516.931373][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.937179][ T31] ? do_user_addr_fault+0x843/0x1370 [ 516.942518][ T31] do_syscall_64+0xcd/0xfa0 [ 516.947540][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.959781][ T31] RIP: 0033:0x7fed85f8f6c9 [ 516.980407][ T31] RSP: 002b:00007fed86dc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.990855][ T31] RAX: ffffffffffffffda RBX: 00007fed861e5fa0 RCX: 00007fed85f8f6c9 [ 516.994833][ T5857] usb 5-1: USB disconnect, device number 16 [ 517.010876][ T31] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 517.023661][ T31] RBP: 00007fed86011f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.041851][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.059193][ T31] R13: 00007fed861e6038 R14: 00007fed861e5fa0 R15: 00007ffe2a10f268 [ 517.073485][ T31] [ 517.076906][ T31] [ 517.076906][ T31] Showing all locks held in the system: [ 517.100107][ T3443] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.117082][ T31] 1 lock held by khungtaskd/31: [ 517.123605][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 517.143636][ T31] 6 locks held by kworker/1:1/42: [ 517.148734][ T31] #0: ffff888023291548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 517.162236][ T31] #1: ffffc90000b27d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 517.174798][ T31] #2: ffff888144bcf198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 517.199247][ T31] #3: ffff88803e0a1198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 517.208575][ T31] #4: ffff88802a906160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 517.229193][ T31] #5: ffff888045b9c188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x8a/0x630 [ 517.239938][ T31] 2 locks held by pvrusb2-context/2340: [ 517.250581][ T31] #0: ffff888045b9c188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xb6/0x4510 [ 517.261281][ T31] #1: ffffffff8e2772d0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 517.275951][ T31] 7 locks held by kworker/u8:6/3443: [ 517.281260][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 517.291725][ T31] #1: ffffc9000c877d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 517.306776][ T31] #2: ffffffff900d0f50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 517.316453][ T31] #3: ffff88805d70d0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 517.338056][ T31] #4: ffff88805d70e250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 517.348804][ T31] #5: ffffffff900e7388 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x800 [ 517.361145][ T31] #6: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 517.373265][ T31] 2 locks held by getty/5576: [ 517.378191][ T31] #0: ffff8880361ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 517.388217][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 517.399677][ T31] 3 locks held by kworker/0:7/5937: [ 517.406795][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 517.417524][ T31] #1: ffffc9000473fd00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 517.428031][ T31] #2: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 517.439046][ T31] 4 locks held by udevd/6908: [ 517.452739][ T31] #0: ffff888078eabe80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 517.473781][ T31] #1: ffff88802fa07088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 517.493509][ T31] #2: ffff88807def9968 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 517.505303][ T31] #3: ffff88803e0a1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 517.515495][ T31] 2 locks held by syz.4.437/7669: [ 517.520532][ T31] 1 lock held by syz.5.964/9532: [ 517.525643][ T31] #0: ffff8880301cd8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xe0/0x5a0 [ 517.535173][ T31] 1 lock held by syz.1.973/9558: [ 517.540106][ T31] #0: ffff8880301cd8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xe0/0x5a0 [ 517.549672][ T31] [ 517.571492][ T31] ============================================= [ 517.571492][ T31] [ 517.628234][ T3443] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.638304][ T31] NMI backtrace for cpu 0 [ 517.638320][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 517.638340][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.638349][ T31] Call Trace: [ 517.638355][ T31] [ 517.638361][ T31] dump_stack_lvl+0x116/0x1f0 [ 517.638392][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 517.638413][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 517.638440][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.638466][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 517.638490][ T31] watchdog+0xf3f/0x1170 [ 517.638515][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.638538][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.638557][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.638586][ T31] ? __kthread_parkme+0x19e/0x250 [ 517.638613][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.638633][ T31] kthread+0x3c5/0x780 [ 517.638650][ T31] ? __pfx_kthread+0x10/0x10 [ 517.638669][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.638689][ T31] ? __pfx_kthread+0x10/0x10 [ 517.638707][ T31] ret_from_fork+0x675/0x7d0 [ 517.638722][ T31] ? __pfx_kthread+0x10/0x10 [ 517.638738][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.638773][ T31] [ 517.638779][ T31] Sending NMI from CPU 0 to CPUs 1: [ 517.768182][ C1] NMI backtrace for cpu 1 [ 517.768197][ C1] CPU: 1 UID: 0 PID: 11700 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 517.768220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.768229][ C1] RIP: 0010:lock_acquire+0x134/0x350 [ 517.768247][ C1] Code: 65 8b 05 47 d5 08 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 87 93 08 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 fa <48> c7 c7 c3 af b1 8d e8 a0 be c7 09 45 89 e0 89 e9 44 89 ea 65 ff [ 517.768260][ C1] RSP: 0018:ffffc9000ba77720 EFLAGS: 00000046 [ 517.768272][ C1] RAX: ffff88802c958000 RBX: ffffffff8e3c4760 RCX: 0000000000000001 [ 517.768281][ C1] RDX: 0000000000000000 RSI: ffffffff816c15f1 RDI: fffffbfff1c788ec [ 517.768290][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 517.768298][ C1] R10: 0000000000000000 R11: 0000000000007cdf R12: 0000000000000000 [ 517.768306][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.768314][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 517.768329][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.768338][ C1] CR2: 00007f7211e9a368 CR3: 0000000055fee000 CR4: 00000000003526f0 [ 517.768347][ C1] Call Trace: [ 517.768352][ C1] [ 517.768358][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 517.768375][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 517.768394][ C1] unwind_next_frame+0xd1/0x20a0 [ 517.768408][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 517.768422][ C1] ? x64_sys_call+0x150b/0x1730 [ 517.768441][ C1] ? unwind_get_return_address+0x59/0xa0 [ 517.768455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 517.768473][ C1] arch_stack_walk+0x94/0x100 [ 517.768490][ C1] ? x64_sys_call+0x150b/0x1730 [ 517.768509][ C1] stack_trace_save+0x8e/0xc0 [ 517.768526][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 517.768545][ C1] ? kasan_save_stack+0x42/0x60 [ 517.768558][ C1] ? kasan_save_stack+0x33/0x60 [ 517.768570][ C1] kasan_save_stack+0x33/0x60 [ 517.768582][ C1] ? kasan_save_stack+0x33/0x60 [ 517.768593][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 517.768610][ C1] ? kmem_cache_free+0x15e/0x6c0 [ 517.768622][ C1] ? exit_mmap+0x50a/0xb90 [ 517.768636][ C1] ? __mmput+0x12a/0x410 [ 517.768651][ C1] ? mmput+0x62/0x70 [ 517.768665][ C1] ? do_exit+0x7c7/0x2bf0 [ 517.768682][ C1] ? do_group_exit+0xd3/0x2a0 [ 517.768700][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 517.768717][ C1] ? x64_sys_call+0x150b/0x1730 [ 517.768747][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 517.768764][ C1] kmem_cache_free+0x15e/0x6c0 [ 517.768776][ C1] ? exit_mmap+0x50a/0xb90 [ 517.768791][ C1] ? exit_mmap+0x50a/0xb90 [ 517.768805][ C1] exit_mmap+0x50a/0xb90 [ 517.768820][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 517.768843][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 517.768858][ C1] __mmput+0x12a/0x410 [ 517.768873][ C1] mmput+0x62/0x70 [ 517.768887][ C1] do_exit+0x7c7/0x2bf0 [ 517.768906][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 517.768921][ C1] ? __pfx_do_exit+0x10/0x10 [ 517.768939][ C1] ? rcu_is_watching+0x12/0xc0 [ 517.768963][ C1] do_group_exit+0xd3/0x2a0 [ 517.768982][ C1] __x64_sys_exit_group+0x3e/0x50 [ 517.769001][ C1] x64_sys_call+0x150b/0x1730 [ 517.769018][ C1] do_syscall_64+0xcd/0xfa0 [ 517.769031][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.769044][ C1] RIP: 0033:0x7f7211cca6c5 [ 517.769055][ C1] Code: Unable to access opcode bytes at 0x7f7211cca69b. [ 517.769060][ C1] RSP: 002b:00007ffec1257f28 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 517.769073][ C1] RAX: ffffffffffffffda RBX: 00007ffec1258204 RCX: 00007f7211cca6c5 [ 517.769082][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 517.769090][ C1] RBP: 0000000000000003 R08: 00007ffec1258020 R09: 0000000000000002 [ 517.769099][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 517.769107][ C1] R13: 00007ffec1258260 R14: 00007f7211eda000 R15: 000055e15e532d98 [ 517.769121][ C1] [ 518.302994][ T3443] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.422426][ T3443] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.615897][ T3443] bridge_slave_1: left allmulticast mode [ 518.637857][ T3443] bridge_slave_1: left promiscuous mode [ 518.649131][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.663119][ T3443] bridge_slave_0: left allmulticast mode [ 518.670925][ T3443] bridge_slave_0: left promiscuous mode [ 518.677233][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.698551][ T3443] batman_adv: batadv0: Interface deactivated: gretap1 [ 518.901700][ T3443] batman_adv: batadv0: Removing interface: gretap1 [ 519.287816][ T3443] bond1 (unregistering): Released all slaves [ 519.461189][ T3443] bond2 (unregistering): Released all slaves [ 519.540333][ T3443] tipc: Disabling bearer [ 519.561477][ T3443] tipc: Left network mode [ 519.789494][ T3443] hsr_slave_0: left promiscuous mode [ 519.804290][ T3443] hsr_slave_1: left promiscuous mode [ 519.810259][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.833934][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.848268][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.863627][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.904672][ T3443] veth1_macvtap: left promiscuous mode [ 519.910227][ T3443] veth0_macvtap: left promiscuous mode [ 519.919740][ T3443] veth1_vlan: left promiscuous mode [ 520.443959][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 520.494678][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 521.300551][ T3443] IPVS: stop unused estimator thread 0... [ 524.608352][ T5185] udevd[5185]: worker [6908] /devices/platform/dummy_hcd.7/usb8/8-1 is taking a long time