last executing test programs: 5m0.460293336s ago: executing program 2 (id=103): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000140)={0x0, 0xffffffffffffffb7, [0x1, 0x2, 0xe, 0x2, 0x45b4a831, 0xff]}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400e800}, 0x4004) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x9}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8001}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x5c}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4m59.341701428s ago: executing program 2 (id=107): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x1000, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) setxattr(0x0, &(0x7f0000000600)=@random={'user.', '\x00'}, 0x0, 0x0, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="390b5f6ac54d1e8d4c568994cf48722e5f3e619571e3ee6de09a1f4d6cd31c5f66e740fb7930606815edac44aee8db0b05d8e2f0581f625103d435e2d741f99e0a3e6b9f6e8689aabc110d25f3f80c62005b1d9b6694f03784849c12dff0d16b9633a87a5e2f56d9241c0256dea8420961a7ca700753d973e932db6b9131a3675ead72b0ff74f3ddf581ba545fe74c3bc98cd5bd4cab62e9d3a75059f876fc7beb7d5f5b98c9484b3a12202be788f8ec34f5f0d48c2e11993e2670fd222f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000400)) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14}}, 0x5014) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) 4m57.937164627s ago: executing program 2 (id=111): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000076daff1c40950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) close(0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_TYPE(r2, 0x0, 0x4000001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async, rerun: 32) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "d7cd9afa4438880d", "1314f8cfba6ececad1ca7e5879e9afac", "67172541", "40a261d9c38d93b8"}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000740)='S', 0xffe0, 0x8000, 0x0, 0x0) (rerun: 64) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x36, 0x0, &(0x7f00000001c0)) 4m55.388087507s ago: executing program 2 (id=121): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001800000018a46600020000000000a941f19ef28c4209b4a15244ceabc5550e1dae0eada870c8c4d0fa000003000600000000000000000209000000d3"], 0x0, 0x32, 0x0, 0x1}, 0x28) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100005800c00038008"], 0x34}}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001c00010029bd7000fedbdf250a020000", @ANYRES32=r8, @ANYBLOB="0000420305000c00010000000800010000000000070000000500010004000000040002"], 0x90}, 0x1, 0x0, 0x0, 0xc051}, 0x44040) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20024044}, 0x8000002) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2d64657669636573202d70696473202b70696473202b706572665f6576656e74202d637075202b7270696473202b72750000000000000000eac21208100000000000000000c7c6419686a6a33b9ef80ef72b86cfcc0fed55d4517e26a19547f5138bb243cb47f204a7a10a42c527ba13f372a9c5aa706cdfebdfba"], 0x41) 4m55.225299854s ago: executing program 2 (id=123): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84020, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = epoll_create(0x47) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m52.741182489s ago: executing program 2 (id=136): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x2, 0xf0, 0x6, 0x5, 0x0, 0xf439}) (async) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r2, 0x31ed000) 4m37.700454217s ago: executing program 32 (id=136): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x2, 0xf0, 0x6, 0x5, 0x0, 0xf439}) (async) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r2, 0x31ed000) 3m1.289575372s ago: executing program 0 (id=529): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) r1 = fanotify_init(0x2c, 0x101000) flistxattr(r1, &(0x7f0000000000)=""/127, 0x7f) 3m1.235730375s ago: executing program 0 (id=531): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000600)={0x2, 0x0, {&(0x7f00000005c0)=""/29, 0x1d, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e24, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {}, 0x8000000800000001, 0x2, 0x3}}}, 0x118) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x87) fchmodat(r0, 0x0, 0x122) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001000000080001"], 0x30}}, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000900)=""/87, 0x57}], 0x3, &(0x7f0000000980)=""/162, 0xa2}, 0x4}], 0x1, 0x2, 0x0) 3m0.182309133s ago: executing program 4 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f000017b000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpriority(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) clock_gettime(0x0, &(0x7f0000000640)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = syz_io_uring_setup(0x233, 0x0, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(0x0, 0x51b, 0x400800) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 2m59.301006868s ago: executing program 4 (id=540): shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000002540)='net/l2cap\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/anycast6\x00') (async) syz_open_procfs(0x0, &(0x7f00000001c0)='net/anycast6\x00') r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_ethernet(0x26, &(0x7f00000007c0)=ANY=[@ANYBLOB="01f9ff00aaaaaaaaaa00080045c3001840680000d289907809000000000000008f84e8eb"], 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1a8, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) r5 = socket(0x15, 0x80806, 0x6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x2df}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x2df}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2c, 0x42cd, 0x7f3, 0x3, 0xb6a, 0xf, 0x0, {r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x7, 0x4, 0x9, 0x6}}, &(0x7f0000000240)=0xb0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) shutdown(r7, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000400)={r8, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000400)={r8, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2m59.238198643s ago: executing program 0 (id=541): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x22000801) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000100000000000000000000018010000696c6c2500000000002020207b1af8ff00000000a8b5695b2b10eb86736f3398a972bfa100000000000007010008f8ffffffb702000008000000b70300000200000085000000060000000833d8c622ea44c93400010000009500000000000000943a9c59c099008f6f44bc289a58e74f2fbef934ada64d72b368d52b22c5cd2d627e64447771be0cb91bfdf3c60d26cf9faef58368706640705fb4a137"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100008412ffffff00000000020000000f00000000004f30005d0d279625cf4b230fa0026413b5ad40408d5126d96493a9614ed17cc396d5322ab5bc492b64ba1f45a2d484da11d4adcfe39c03b5da3e325f206b62c06d"], 0x0, 0x35, 0x0, 0x1, 0x40}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) dup3(r4, r3, 0x80000) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m58.237021964s ago: executing program 0 (id=542): pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) r1 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029d0003010070000904000000010100000a24010900000201020d2406000003080003000000000c24020601010600001004ff0c240208010203010000000009040100000102000009040101010102000009050109200040000007250102008500090402000001020000090402010101020080000002020300070003000000000000000000072401280c0300090582094000090080"], 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00222200000096231306e53f0b53743ff62a9000070d00be0083"], 0x0}, 0x0) symlink(&(0x7f0000000380)='./file2\x00', &(0x7f0000000040)='./file0\x00') (async) openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0) (async) close(r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xe, 0x7d1c1518, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x92}, 0x8084) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) (async) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004000) 2m57.427515023s ago: executing program 4 (id=544): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x2, 0x7e5104, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockname(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x80) r1 = socket$igmp6(0xa, 0x3, 0x2) dup(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m57.185108054s ago: executing program 4 (id=546): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x5761, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) statx(r3, &(0x7f0000000100)='./file0\x00', 0x800, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x14002, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@access_uid={'access', 0x3d, r5}}]}}) 2m56.942445301s ago: executing program 0 (id=547): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffff, @loopback, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10100, 0x0) r4 = fcntl$getown(r1, 0x9) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r1, &(0x7f0000000100)={r3, r1, 0x10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x3, 0x2, 0x3}) 2m56.655402412s ago: executing program 0 (id=548): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000001000)={'mangle\x00', 0x0, [0x1, 0x3, 0x5, 0x9, 0x6]}, &(0x7f0000001080)=0x54) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x7fff, 0x0, 0x3, 0x800, 0x5, 0x6, 0x1ff}, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) (async) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x412002) 2m56.605037578s ago: executing program 4 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4008094}, 0x8000) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) listen(r1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x31) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffb, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x2, 0x6, {}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x40077, 0x200000009}) 2m56.313362357s ago: executing program 4 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, 0x7fff, 0x20005) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="74eb53346d4dbd726b17e19b25730d4d9b0d45541257e12d1e1e59c78d10362f9454c270310d4836c553225cf1b0", 0x2e}, {&(0x7f0000001400)="b2a626fa1f75173a30f47fc1ba198f9199585927430dd1f76f799277a47297aefa592b619877ae9bb67ca26ccc6444da3769764303190acce6c68fa3df944222daf56a5d0486b607d97853c4e476c543e703c9f51524c14b53ecace1c36f71e92f46b93b9763469d0bfff8383fb93748e6d4fc33f848879b0873b4e41ba8f80f85dd448749cbaa66ef2e8563e15643b5b1bddd3c555b07d5119b1cc5f94af0e485e4cf9066bfb40a9948ccd86075e4dd952182f189e999a5d6d3256758fc835203540adf9f7872bf8179501e78a29e3f96e502abf042657653eb5da27222b1b984f463d492b22e1eac239dfe3a39a126844f075f", 0xf4}], 0x2, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x98, 0x40}}, {{&(0x7f0000001840)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f00000018c0)="e5982058993ad20dff5a9340c2e6a632b0484c81b2abc6058e0b9288db3e1b41e4a441e8cea45d10692187577bf21109", 0x30}, {&(0x7f0000001900)="02077514e53110a7604d7b984e494268d55e22bc9c5f35d051859ffee924ace85b0c42d9c8d48084c2dad354c8a54f1de676930b3837e070ce814a3153f237bb84a082a14a4c6369ef0483454cbc5ab1b496b6c08f0b0419333f9cef54529226f8117a05e182215fd9aebc0165881301bd3eccb4922ba52efb8bd9d2dcb42daf21afea5c91c70107dd6a06fbd4295ae4e14ac30f55b48e8c6569f2e71101c49e03722d7228878bb032866f2748af4e109e0af83ce9091ff9973ab3af412fb082b9a1e9b5b04391c40d27b466cfaa360961369df4def9ae", 0xd7}, {&(0x7f0000001a00)="fc861395297257c2107dd62609277a06518985c7f36b27761c09ca8b45126c002f03ffb8aae829ec989972352a6dda4428d3d47921b10749c0b1ac4977adb35f45b4d808818b4ea95a55b5e4e6d1d9c43a8319921cbc6e3950ca23947fe674f05f36361ee905cea354d061943fb582699d0f2b9ee31c40696f13070a006e0338d15ba5c2a13746d619a74979a4a9ef0664034750d6e4294c1c5aa459f5e0e052ffda7907275397a24078a5d4911b82e6e87c44fe65e6331512bfee44f620b4010805360eca8168315222ce944cdce62d1647", 0xd2}, {&(0x7f0000001b00)="25c023411f67cca76b4a0cdbb6c93aea5ae7d7433894df864bfdb11fe7ae7c650c38a8e5f3454d091b30e388d173177e3c775e3470554c40bfe33ad4c71b1d45d92e98dd4ed2c0066c39b09e0346a1b2573d6940b01189f28a465a864625f0d8f377b659ce593fd3d88fc96f5f722fdffe239a8f42b1c974cd07cd", 0x7b}], 0x4, &(0x7f0000001c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r4]}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r5, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r4]}}], 0xc8, 0x40000}}], 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000100), 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2m56.113010299s ago: executing program 33 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, 0x7fff, 0x20005) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="74eb53346d4dbd726b17e19b25730d4d9b0d45541257e12d1e1e59c78d10362f9454c270310d4836c553225cf1b0", 0x2e}, {&(0x7f0000001400)="b2a626fa1f75173a30f47fc1ba198f9199585927430dd1f76f799277a47297aefa592b619877ae9bb67ca26ccc6444da3769764303190acce6c68fa3df944222daf56a5d0486b607d97853c4e476c543e703c9f51524c14b53ecace1c36f71e92f46b93b9763469d0bfff8383fb93748e6d4fc33f848879b0873b4e41ba8f80f85dd448749cbaa66ef2e8563e15643b5b1bddd3c555b07d5119b1cc5f94af0e485e4cf9066bfb40a9948ccd86075e4dd952182f189e999a5d6d3256758fc835203540adf9f7872bf8179501e78a29e3f96e502abf042657653eb5da27222b1b984f463d492b22e1eac239dfe3a39a126844f075f", 0xf4}], 0x2, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x98, 0x40}}, {{&(0x7f0000001840)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f00000018c0)="e5982058993ad20dff5a9340c2e6a632b0484c81b2abc6058e0b9288db3e1b41e4a441e8cea45d10692187577bf21109", 0x30}, {&(0x7f0000001900)="02077514e53110a7604d7b984e494268d55e22bc9c5f35d051859ffee924ace85b0c42d9c8d48084c2dad354c8a54f1de676930b3837e070ce814a3153f237bb84a082a14a4c6369ef0483454cbc5ab1b496b6c08f0b0419333f9cef54529226f8117a05e182215fd9aebc0165881301bd3eccb4922ba52efb8bd9d2dcb42daf21afea5c91c70107dd6a06fbd4295ae4e14ac30f55b48e8c6569f2e71101c49e03722d7228878bb032866f2748af4e109e0af83ce9091ff9973ab3af412fb082b9a1e9b5b04391c40d27b466cfaa360961369df4def9ae", 0xd7}, {&(0x7f0000001a00)="fc861395297257c2107dd62609277a06518985c7f36b27761c09ca8b45126c002f03ffb8aae829ec989972352a6dda4428d3d47921b10749c0b1ac4977adb35f45b4d808818b4ea95a55b5e4e6d1d9c43a8319921cbc6e3950ca23947fe674f05f36361ee905cea354d061943fb582699d0f2b9ee31c40696f13070a006e0338d15ba5c2a13746d619a74979a4a9ef0664034750d6e4294c1c5aa459f5e0e052ffda7907275397a24078a5d4911b82e6e87c44fe65e6331512bfee44f620b4010805360eca8168315222ce944cdce62d1647", 0xd2}, {&(0x7f0000001b00)="25c023411f67cca76b4a0cdbb6c93aea5ae7d7433894df864bfdb11fe7ae7c650c38a8e5f3454d091b30e388d173177e3c775e3470554c40bfe33ad4c71b1d45d92e98dd4ed2c0066c39b09e0346a1b2573d6940b01189f28a465a864625f0d8f377b659ce593fd3d88fc96f5f722fdffe239a8f42b1c974cd07cd", 0x7b}], 0x4, &(0x7f0000001c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r4]}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r5, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r4]}}], 0xc8, 0x40000}}], 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000100), 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2m41.331371087s ago: executing program 34 (id=548): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000001000)={'mangle\x00', 0x0, [0x1, 0x3, 0x5, 0x9, 0x6]}, &(0x7f0000001080)=0x54) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x7fff, 0x0, 0x3, 0x800, 0x5, 0x6, 0x1ff}, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) (async) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x412002) 2m8.616383411s ago: executing program 6 (id=719): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000740)=""/244, 0xf4}], 0x1, &(0x7f0000000440)=""/19, 0x13}, 0x9}, {{&(0x7f0000000580)=@tipc=@name, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000002000)=""/109, 0x6d}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000980)=""/118, 0x76}, {&(0x7f0000000a00)=""/48, 0x30}, {&(0x7f00000023c0)=""/175, 0xaf}, {&(0x7f0000000b00)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/239, 0xef}, {&(0x7f0000000cc0)=""/1, 0x1}], 0x9, &(0x7f0000000dc0)=""/100, 0x64}, 0x2}, {{&(0x7f0000000e40)=@x25, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000ec0)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000a40)=""/119, 0x77}}, {{&(0x7f0000002080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002100)=""/123, 0x7b}, {&(0x7f0000002180)=""/245, 0xf5}], 0x2}, 0x5}], 0x4, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000740)=""/244, 0xf4}], 0x1, &(0x7f0000000440)=""/19, 0x13}, 0x9}, {{&(0x7f0000000580)=@tipc=@name, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000002000)=""/109, 0x6d}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000980)=""/118, 0x76}, {&(0x7f0000000a00)=""/48, 0x30}, {&(0x7f00000023c0)=""/175, 0xaf}, {&(0x7f0000000b00)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/239, 0xef}, {&(0x7f0000000cc0)=""/1, 0x1}], 0x9, &(0x7f0000000dc0)=""/100, 0x64}, 0x2}, {{&(0x7f0000000e40)=@x25, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000ec0)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000a40)=""/119, 0x77}}, {{&(0x7f0000002080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002100)=""/123, 0x7b}, {&(0x7f0000002180)=""/245, 0xf5}], 0x2}, 0x5}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x40, 0x0, 0x4, 0xb49, 0x1, 0x9, 0x8, 0x200}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) writev(r3, 0x0, 0x0) (async) writev(r3, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000002580)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)=ANY=[@ANYBLOB="2629ab000342cb16e78cf85087f761c1aa2843069653359761367b6ab8b5e885c5660f8496f5c9000c49083a39436ef41c628aa1bcc08a3c4b6ddb5e95c5e4ec23e85cf23c019656f213c3e256f2806cca7b4456c4d3ead6b637d5ffd19cd0b2359df8554f21e75649df12e01d305e6bc4a3acb2ae27e08099a4fbd8461a98e849bd53eb160f1028e480cd698f82608fccdfc249648159057956f670ebc615fdb75b71f8d26015bbdf027d7b1b506a6c0f17fb68a500955d86c09011", @ANYRES16=r6, @ANYBLOB="000325bd7000fbdbdf251c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x40006) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)=ANY=[@ANYBLOB="2629ab000342cb16e78cf85087f761c1aa2843069653359761367b6ab8b5e885c5660f8496f5c9000c49083a39436ef41c628aa1bcc08a3c4b6ddb5e95c5e4ec23e85cf23c019656f213c3e256f2806cca7b4456c4d3ead6b637d5ffd19cd0b2359df8554f21e75649df12e01d305e6bc4a3acb2ae27e08099a4fbd8461a98e849bd53eb160f1028e480cd698f82608fccdfc249648159057956f670ebc615fdb75b71f8d26015bbdf027d7b1b506a6c0f17fb68a500955d86c09011", @ANYRES16=r6, @ANYBLOB="000325bd7000fbdbdf251c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x40006) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="735873000b00000000000000000000009510000000000200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="735873000b00000000000000000000009510000000000200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2m8.194042055s ago: executing program 6 (id=721): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000600)=[{0x8, 0x88f2b4e481a670b8, 0x1, &(0x7f00000001c0)="c5"}, {0x0, 0x8000, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x2000, 0x0, 0x0}], 0x4}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x30241, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x181) 2m6.213119645s ago: executing program 6 (id=724): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000001159a8af0000000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m5.938901016s ago: executing program 6 (id=726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) umount2(&(0x7f0000000080)='./file0\x00', 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x0, 0x9b}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x240200, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f0000000240)={0x2, r3, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r5, 0xc08c5102, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 2m4.804400746s ago: executing program 6 (id=732): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x7fff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) socket$inet_sctp(0x2, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x2f62, 0x0, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000005, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 2m4.293449805s ago: executing program 6 (id=734): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) (async) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x1000000}) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m3.065693691s ago: executing program 35 (id=734): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) (async) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x1000000}) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10.292642112s ago: executing program 1 (id=1205): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, &(0x7f0000000180)=0x80000001, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) cachestat(r0, &(0x7f00000000c0)={0x5f8, 0x5}, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2, 0x0, 0x0, 0x8000000}}}}}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e", 0x22) sendfile(r3, r3, 0x0, 0x200000) 9.448105313s ago: executing program 8 (id=1206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x20000080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) umount2(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r6, 0x4000, r5}, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xa3d}}, &(0x7f00000000c0)='GPL\x00', 0xee56, 0x0, 0x0, 0x41100, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050002000000fedbdf256088bc0a08000300", @ANYRES32=r10], 0x2c}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x4, 0x5, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x4, 0x53a, 0x34e, 0x6}}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120110071fcd1b08cf100355af75012203010902240001080910030904180202b41d3f0109050e03ff050207010905850320"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 8.492045248s ago: executing program 1 (id=1209): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1478dff87c5f04df859a4fe434daaf5ebff6009b20520000000000000000000000000069eaca6c5828571f7615d4bc1cbd07b72e555e3e17ff517fb47f5b5cd550b9d1cc836707dba349fbf6c1aaff087195d43cf88b31be32e39f684cfcc70b4fe148e43628741eb4bc69662e6de081f6d083928377dc3001932bf8555f05f7f44868d77b"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x22000000) 7.559954083s ago: executing program 3 (id=1210): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="c0133bcd261f5e9a34eaaade947fd79bcc1764864c07736f6b54f5de59f3cebc4f2c56ee47f1c7a1f24dc06227de82c56e81402af28bd3bed54eb3a2ee1a47efb707514600d2e8724bf122fc8f521a"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 7.18932556s ago: executing program 1 (id=1211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0xf00, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x3504, 0x2, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) 6.656909903s ago: executing program 8 (id=1213): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000340)="650f6f34343566b842000f00d88705006900b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217ac4e181592f", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000120000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x50) 4.913044957s ago: executing program 8 (id=1218): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="5b26ac7f7f04"}) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00f9ff6700e97800000000000000000a0200000000000004000400"], 0x1c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000000020ed"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.901877418s ago: executing program 7 (id=1219): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0x22, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0x3, 0xa, 0x9, 0xc, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6eb}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @jmp={0x5, 0x0, 0x8, 0x5, 0x9, 0x40}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x3a, &(0x7f0000000900)=""/58, 0x41000, 0xa0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x5, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000f00)=[r0], &(0x7f0000000f40)=[{0x0, 0x5, 0xf, 0x8}], 0x10, 0x2}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async, rerun: 32) ioperm(0x5, 0x8, 0x8000000000005) (async, rerun: 32) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async, rerun: 64) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000000)={0x0, 0x300}) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "2f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c244fba9bf1f098ed541e3501b56b576e78f951702b8be38082aacc094274456d93eff9f781adecbc6401bb5575b1d0d0dbf948cc15c194fb002ddc28f42b06"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.753062942s ago: executing program 7 (id=1220): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x1}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r2, 0x5, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, 0x0, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000001180)={0x1, 0x0, {0xe, 0x7, 0x200a, 0x6, 0x4, 0x2, 0x0, 0x7}}) (async) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x40000) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x2, @pix={0x0, 0x43, 0x32314247, 0x0, 0xfffffffb, 0x3, 0x8, 0x20, 0x1, 0x2}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x4000010) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) (async) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) 4.61180568s ago: executing program 1 (id=1221): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x401, 0x7ca2, 0x3, 0x7}]}) 4.472749027s ago: executing program 1 (id=1222): writev(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'team_slave_0\x00', @broadcast}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r5, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.472390432s ago: executing program 3 (id=1223): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000080000000400000021000000c1000000", @ANYRES32=0x1, @ANYBLOB="00000000000000b25dfff3ea52502ace5d3eb78d01c0e05c08373bef091503ffaecf0108a2b506f8759241fb7a8b3a6820132b2fc1a952eaf0b4604b1375a7ed30c0f0e1c656023814177a6422405a3044d279d8c706000000b5c40ca41fd6e2667532e1f88848fe33f565be2ea67c1052069f6a5b66341baa4c21a15e22d2962d71118456f748152b5c31951b7075e9d471430b40670d6029", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xb47, r6}, 0x38) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x440c0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) io_uring_setup(0x10007, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(r7, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r9, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000008010400000000000000000a00000a05000300060000000900010073797a3100000000060002400019000034000480080004"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.447191325s ago: executing program 7 (id=1224): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2021, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000b5d968f58c83134431", @ANYRES32=0x0, @ANYBLOB="00000000c100000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4604}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.729061443s ago: executing program 5 (id=1226): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1ff, "3a1c7ae978d6b4e8495fd31362ad5317eadbb2c669665b1ab6ac4c7c0ef865b6", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"59a6085ec0dd70c501d08e173056036eb047ae5e8ff75f1af2be153675b84822", r2}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x7, 0x700, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}}) 1.915038952s ago: executing program 5 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@typed={0x14, 0x17, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x111}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42885}, 0x0) 1.834886231s ago: executing program 3 (id=1228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x589001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bridge_slave_0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) syz_genetlink_get_family_id$batadv(0x0, r1) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x4000}, {0x0, 0x100000000, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) 1.71100016s ago: executing program 5 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x60f7, &(0x7f0000000380)={0x0, 0x39bd, 0x800, 0xfffffbff, 0x3be}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x3, 0x3, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) write(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240), &(0x7f00000000c0)) 1.709378487s ago: executing program 1 (id=1230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x5c000000, 0x0, 0xfffffffffffffffd}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r5 = fsmount(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='+cOuset '], 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x6048780, &(0x7f00000001c0)="07b5e42d302283ba87697ce3ff665d7cb4bdf0381b74630609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e80900000000000000878e74532cf26a3f8ca5", 0x97, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="646a21c1314836dab1375dc5370b85964d1d297e7f2cfd4e637f9d367842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c0625f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c030547e774da8d") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0100001000010000000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) 1.588227021s ago: executing program 8 (id=1231): r0 = syz_open_dev$video4linux(&(0x7f0000000600), 0x10000, 0x40080) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x980000, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040f0404050104"], 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x80010, r0, 0xcae3b000) r1 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, 0x0) 1.516242044s ago: executing program 3 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x5c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) timer_create(0x3e295f6bdcf3ea24, 0x0, &(0x7f0000000000)) 689.564511ms ago: executing program 5 (id=1233): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x4, 0x0, 0x0, 0x7, [@sadb_sa={0x2, 0x18, 0x4d4, 0x0, 0x81}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) (async, rerun: 32) open_by_handle_at(r0, &(0x7f0000000040)=@OVL_FILEID_V1={0x4d, 0xf8, {'\x00', {0x0, 0xfb, 0x4a, 0x0, 0x8, "7a72bae21f8857f7a82275df77fb296e", "80a987242fefbb0674b6e481b830b6662df620a6e548c6b801749c065859768795cd110852b52715a1b8affa64f9319c1c4551b3ac"}}}, 0x20100) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 64) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 32) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc82) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet(r3, 0x0, 0xa0) (async, rerun: 32) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x10, 0x0, 0xe, 0x0, @tick=0x1, {}, {}, @raw32={[0xb]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x70) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r5, 0x4b49, 0x0) 685.925773ms ago: executing program 7 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x603, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x603, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x0) (async) 605.491511ms ago: executing program 3 (id=1235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003940)={0x2020}, 0x203b) sendfile(r1, r1, &(0x7f0000000040), 0x18) sendfile(r0, r1, 0x0, 0x80006) 604.968457ms ago: executing program 8 (id=1236): r0 = dup(0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000440)={0x2, 0xe, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x7c}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0xffff}}]}, 0x90}}, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r4 = epoll_create1(0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x7f}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2004}) (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r7, 0xe54aef35e9c2845d, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x10000c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x8, 0x0, 0x0}}, 0x3) (async, rerun: 32) r8 = socket$isdn_base(0x22, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000180)=0x288a, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) bind$packet(r9, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x3a, 0x4, 0x328, 0xffffffff, 0x0, 0x110, 0x110, 0x110, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x82, {0xd}}}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async) sendto$packet(r9, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) (async) recvmsg(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) (async) bind$isdn_base(r8, &(0x7f0000000140)={0x22, 0x6, 0x3, 0x6, 0x81}, 0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 507.417742ms ago: executing program 7 (id=1237): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000000000000000008001e0040000000", 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002f00010026bdf000fcdbdf25040000000c000c000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 438.741016ms ago: executing program 3 (id=1238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async, rerun: 64) r1 = accept$alg(r0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000022c0)="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", 0xb59}, {&(0x7f0000000300)="a4037a2eb666b127cbe155276b5127577479a26ad832eff7b2141d0c64b56c42af75fa12b804a3ab6ad766cfcb6c58086bc324e1fe598c4a8676d46dd7a1f33ab1f3297ce4a869487cc9dd1323b82cdeca2ac5ae993db6697b89223d5d5efc8618969b2b3829c0f5f69fbeab35faafb2076c140af2b456", 0x77}], 0x2, 0x0, 0x0, 0x20008014}], 0x1, 0x20044014) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x2, [0x7f, 0x8]}, &(0x7f0000000080)=0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r7], 0x12) (async, rerun: 64) r9 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300000000000000010000000000009200000000000000000000000202000000002e000061"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) 332.829954ms ago: executing program 5 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) (async, rerun: 32) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) (async) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async, rerun: 64) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f00000002c0)=0x2) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) (async) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 260.469418ms ago: executing program 8 (id=1240): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x100040, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="ac80d4938e0ffb004cce143d5b9de1e407782bae7dddaed8547c94fcc69a35c919731cbcfedbf127557996273735b88fe510288e22038d2627cb50a3c243133bcaa19ec2621427adde3330a2c8bb53fd7c90fd96ac6edc75a6932db7c86985a0c116482f0d7510e31912fbb349d227b361c03955749a47e1568f5e5c29e5b64a57f783701c59ab8822b338886c3f08976ea451464ec35e467258a7db7092304624f3e6662eaf6326c30b248e3c5fa9e3eb05d8ec02fda9c2bc31b69fb9d5a788a32c2ee7858de0b0c32ce67f8c48d2a75e1bbc753dfc219fa3a1f1b6e4e72e7a44344f90f2bfb3d72d9098ed8d4edba8be", @ANYRES32=r0]) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) fanotify_init(0x1, 0x6629e2338eb741be) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r5, 0x36, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRES16=r7, @ANYRES32], 0x128}, 0x1, 0x0, 0x0, 0x20004011}, 0x20008800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000740)=""/165) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe8000000000000000000000000000bbe0000002000000009d51dd3e5272ada26f15f0070c0000000000000000ffff0000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0xa1}}, 0x20040811) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x190) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfd|o\f?=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 178.951253ms ago: executing program 7 (id=1241): write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000640), 0x2, 0x20000) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000680)={0x0, @reserved}) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x1}, 0x18) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000084acb587bdf9061c0abdb887857b24a5a29c0bfc322e2f05c14cce9f8da446517858c08ec79dc4e09230496fdfea14c860fd2537a34e1ea0cc0111755a7d30b223d375967a277b49a1b22281e0993c0fccf003c6777e0daff60d99ebf1eb63c491fc8acd64932b5844438b060de8314362bf6830f6a437a262715646e5dbb5846b2978a3aa62dc8bcfa1887672ff6e5c4787a6b5f15905794f5707d812bf80abd0a8d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 5 (id=1242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x10) migrate_pages(0xffffffffffffffff, 0xcd, &(0x7f0000000000)=0xfffffffffffffffe, &(0x7f0000000080)) (async) migrate_pages(0xffffffffffffffff, 0xcd, &(0x7f0000000000)=0xfffffffffffffffe, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000372000/0x3000)=nil, 0x3000, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000050000000500000009"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) timer_create(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) kernel console output (not intermixed with test programs): 83.231095][ T5818] usb 6-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=eb.17 [ 283.250940][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.270272][ T5984] usb usb8-port1: unable to enumerate USB device [ 283.351654][ T9816] netlink: 'syz.3.786': attribute type 17 has an invalid length. [ 283.365556][ T9816] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 283.385501][ T5984] usb 4-1: USB disconnect, device number 40 [ 283.522473][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.532221][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.744708][ T5818] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.759196][ T5818] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 283.860335][ T9829] kAFS: unable to lookup cell '(' [ 284.013340][ T30] audit: type=1326 audit(1765873653.068:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.1.788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbee638f749 code=0x0 [ 284.243323][ T9829] kAFS: unable to lookup cell '(,c¾ûL' [ 284.382505][ T5818] usb 6-1: USB disconnect, device number 28 [ 284.537119][ T5822] usbhid 9-1:0.0: can't add hid device: -71 [ 284.560144][ T5822] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 284.594361][ T30] audit: type=1400 audit(1765873653.648:625): avc: denied { connect } for pid=9839 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.596438][ T5822] usb 9-1: USB disconnect, device number 2 [ 284.620995][ T9840] netlink: 196 bytes leftover after parsing attributes in process `syz.3.791'. [ 284.889430][ T30] audit: type=1400 audit(1765873653.678:626): avc: denied { append } for pid=9843 comm="syz.7.792" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 284.912825][ T30] audit: type=1400 audit(1765873653.678:627): avc: denied { open } for pid=9843 comm="syz.7.792" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 285.040268][ T5921] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 285.290281][ T5921] usb 8-1: device descriptor read/64, error -71 [ 286.300166][ T6181] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 286.478260][ T6181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.546714][ T6181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 286.560409][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.797'. [ 286.569552][ T6181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.582243][ T6181] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.596353][ T6181] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.635049][ T6181] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.659296][ T9864] exFAT-fs (loop5): unable to read boot sector [ 286.670002][ T6181] usb 2-1: Manufacturer: syz [ 286.677512][ T9864] exFAT-fs (loop5): failed to read boot sector [ 286.684419][ T6181] usb 2-1: config 0 descriptor?? [ 286.693442][ T9864] exFAT-fs (loop5): failed to recognize exfat type [ 286.710043][ T5921] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 286.873277][ T5924] hid-generic 0004:01BE:004B.0014: unknown main item tag 0x2 [ 286.882625][ T5921] usb 8-1: device descriptor read/64, error -71 [ 286.899324][ T5924] hid-generic 0004:01BE:004B.0014: unexpected long global item [ 286.908853][ T5924] hid-generic 0004:01BE:004B.0014: probe with driver hid-generic failed with error -22 [ 287.002345][ T5921] usb usb8-port1: attempt power cycle [ 287.065551][ T9893] netlink: 2 bytes leftover after parsing attributes in process `syz.3.803'. [ 287.090135][ T6181] rc_core: IR keymap rc-hauppauge not found [ 287.105155][ T6181] Registered IR keymap rc-empty [ 287.116216][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 287.216287][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 287.410041][ T5921] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 287.429261][ T6181] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 287.468130][ T5921] usb 8-1: device descriptor read/8, error -71 [ 287.476737][ T9882] exFAT-fs (loop5): unable to read boot sector [ 287.555630][ T6181] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 287.628883][ T9901] netlink: 256 bytes leftover after parsing attributes in process `syz.1.795'. [ 287.641229][ T9882] exFAT-fs (loop5): failed to read boot sector [ 287.676503][ T9882] exFAT-fs (loop5): failed to recognize exfat type [ 287.704587][ T9843] block nbd7: shutting down sockets [ 287.881025][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.070450][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.135229][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.200152][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.282423][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.340174][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.380124][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.430105][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.471106][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.520096][ T6181] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.571270][ T6181] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 288.605921][ T6181] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 289.196442][ T6181] usb 2-1: USB disconnect, device number 38 [ 289.360016][ T48] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 289.630035][ T48] usb 6-1: device descriptor read/64, error -71 [ 290.191436][ T48] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 290.315982][ T5924] IPVS: starting estimator thread 0... [ 290.403553][ T48] usb 6-1: device descriptor read/64, error -71 [ 290.421159][ T9971] IPVS: using max 79 ests per chain, 189600 per kthread [ 290.542314][ T48] usb usb6-port1: attempt power cycle [ 290.890336][ T48] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 290.950787][ T48] usb 6-1: device descriptor read/8, error -71 [ 291.250165][ T48] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 291.296175][ T48] usb 6-1: device descriptor read/8, error -71 [ 291.384657][ T30] audit: type=1400 audit(1765873660.428:628): avc: denied { ioctl } for pid=10002 comm="syz.1.816" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 291.421645][ T48] usb usb6-port1: unable to enumerate USB device [ 291.435842][T10006] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 291.458792][T10006] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 291.496526][T10006] overlayfs: failed to set uuid (49/file0, err=-13); falling back to uuid=null. [ 291.893351][T10020] cgroup: Need name or subsystem set [ 292.307204][ T30] audit: type=1400 audit(1765873661.358:629): avc: denied { set_context_mgr } for pid=10021 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 292.696784][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 292.770156][ T9347] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 293.071519][ T9347] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.084099][ T9347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.096336][ T9347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 293.107149][ T9347] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.122604][ T9347] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.150013][ T9347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.170628][ T9347] usb 6-1: config 0 descriptor?? [ 293.610652][ T9347] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 293.716774][T10062] can0: slcan on ttyS3. [ 294.311291][T10076] trusted_key: syz.1.832 sent an empty control message without MSG_MORE. [ 294.379669][T10034] overlayfs: overlapping lowerdir path [ 294.463433][T10080] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 294.556573][T10079] netlink: 'syz.7.833': attribute type 1 has an invalid length. [ 294.602992][T10079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.667627][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.7.833'. [ 295.234108][ T9347] usb 6-1: USB disconnect, device number 33 [ 295.269617][T10060] can0 (unregistered): slcan off ttyS3. [ 295.279007][T10079] bond1: entered promiscuous mode [ 295.286793][T10079] bond1: entered allmulticast mode [ 295.357415][T10085] bond1: (slave dummy0): making interface the new active one [ 295.415375][T10085] dummy0: entered promiscuous mode [ 295.438655][T10085] dummy0: entered allmulticast mode [ 295.458708][T10085] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 295.656349][T10087] bond1 (unregistering): (slave dummy0): Releasing active interface [ 295.666190][T10087] dummy0: left promiscuous mode [ 295.673508][T10087] dummy0: left allmulticast mode [ 295.694809][T10087] bond1 (unregistering): Released all slaves [ 295.710169][ T9347] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 295.892342][ T9347] usb 4-1: Using ep0 maxpacket: 8 [ 295.924314][ T9347] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 295.969119][T10106] bridge0: entered promiscuous mode [ 295.990247][ T9347] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 295.991303][T10106] macvlan2: entered promiscuous mode [ 296.033272][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.109240][ T9347] hub 4-1:32.0: bad descriptor, ignoring hub [ 296.129699][ T9347] hub 4-1:32.0: probe with driver hub failed with error -5 [ 296.169474][ T30] audit: type=1400 audit(1765873665.218:630): avc: denied { mounton } for pid=10121 comm="syz.7.839" path="/" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 296.420355][ T48] usb 4-1: USB disconnect, device number 41 [ 296.460295][ T5923] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 296.642582][ T5923] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 296.663706][ T5923] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.692604][ T5923] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 296.711762][ T5923] usb 8-1: config 1 has no interface number 0 [ 296.728000][ T5923] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 296.749030][ T5923] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 296.801862][ T5923] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.820059][ T9347] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 296.827769][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.852084][ T5923] usb 8-1: Product: syz [ 296.856277][ T5923] usb 8-1: Manufacturer: syz [ 296.862642][T10138] netlink: 'syz.1.841': attribute type 21 has an invalid length. [ 296.870430][ T5923] usb 8-1: SerialNumber: syz [ 297.012506][ T9347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.033643][ T9347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 297.046307][ T9347] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 297.059254][ T9347] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 297.072756][ T9347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.102723][ T9347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.116908][ T9347] usb 6-1: Product: syz [ 297.121470][ T9347] usb 6-1: Manufacturer: syz [ 297.126264][ T9347] usb 6-1: SerialNumber: syz [ 297.141126][T10132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.257088][ T30] audit: type=1400 audit(1765873666.308:631): avc: denied { mounton } for pid=10146 comm="syz.1.844" path="/173/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 297.395552][T10132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.407696][T10132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.418851][ T5924] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 297.601057][ T5923] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 297.620266][ T5924] usb 4-1: device descriptor read/64, error -71 [ 297.626838][ T5923] usb 8-1: USB disconnect, device number 13 [ 297.880080][ T5924] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 297.898060][ T9347] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 297.905167][ T9347] cdc_ncm 6-1:1.0: bind() failure [ 297.912888][ T9347] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 297.919675][ T9347] cdc_ncm 6-1:1.1: bind() failure [ 298.010049][ T5924] usb 4-1: device descriptor read/64, error -71 [ 298.133593][ T5924] usb usb4-port1: attempt power cycle [ 298.268636][T10169] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.293180][ T30] audit: type=1400 audit(1765873667.348:632): avc: denied { getopt } for pid=10162 comm="syz.7.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 298.330316][T10169] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 298.500963][ T5924] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 298.574232][ T5924] usb 4-1: device descriptor read/8, error -71 [ 298.850295][ T5924] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 298.882107][ T5924] usb 4-1: device descriptor read/8, error -71 [ 298.920422][ T6658] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 299.000427][ T5924] usb usb4-port1: unable to enumerate USB device [ 299.250000][ T6658] usb 9-1: Using ep0 maxpacket: 16 [ 299.597941][T10192] block device autoloading is deprecated and will be removed. [ 299.854213][ T6658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.865228][ T6658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.876033][ T6658] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 299.885106][ T6658] usb 9-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 299.889804][ T5924] usb 6-1: USB disconnect, device number 34 [ 299.893314][ T6658] usb 9-1: Manufacturer: syz [ 299.895087][ T6658] usb 9-1: config 0 descriptor?? [ 299.991827][T10198] NILFS (nullb0): couldn't find nilfs on the device [ 300.047141][T10201] netlink: 96 bytes leftover after parsing attributes in process `syz.5.857'. [ 300.169219][T10204] mkiss: ax0: crc mode is auto. [ 300.507525][ T6658] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 300.550845][ T6658] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 300.620268][ T5924] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 300.667340][ T6658] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 300.675728][ T6658] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 300.683160][ T6658] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 300.692116][ T6658] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [syz] on usb-dummy_hcd.8-1/input0 [ 301.200472][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 301.232712][T10223] netlink: 'syz.8.851': attribute type 10 has an invalid length. [ 301.332809][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.368936][T10223] bond0: (slave team0): Enslaving as an active interface with an up link [ 301.383475][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.402401][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 301.416491][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.506453][ T5924] usb 4-1: config 0 descriptor?? [ 301.517014][ T5924] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 301.530243][ T9347] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 301.548083][ T5924] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.593426][ T6658] usb 9-1: USB disconnect, device number 3 [ 301.612170][ T5924] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 301.627795][ T5824] udevd[5824]: setting mode of /dev/i2c-1 to 020600 failed: No such file or directory [ 301.640520][ T5924] usb 4-1: media controller created [ 301.667712][ T5824] udevd[5824]: setting owner of /dev/i2c-1 to uid=0, gid=0 failed: No such file or directory [ 301.688150][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.759813][ T5924] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 301.769362][ T30] audit: type=1326 audit(1765873670.828:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 301.782946][ T5924] error writing reg: 0xff, val: 0x00 [ 301.823251][ T30] audit: type=1326 audit(1765873670.828:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 301.854288][ T30] audit: type=1326 audit(1765873670.828:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 301.885051][ T30] audit: type=1326 audit(1765873670.828:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 301.918451][ T30] audit: type=1326 audit(1765873670.828:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 301.937234][ T5924] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 301.963083][ T30] audit: type=1326 audit(1765873670.828:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 301.971338][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.995159][ T30] audit: type=1326 audit(1765873670.828:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 302.022415][ T30] audit: type=1326 audit(1765873670.828:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54858f749 code=0x7fc00000 [ 302.023836][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.208175][ T6658] usb 4-1: USB disconnect, device number 46 [ 302.347393][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 302.347407][ T30] audit: type=1400 audit(1765873671.398:703): avc: denied { validate_trans } for pid=10248 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 302.443758][ T30] audit: type=1400 audit(1765873671.488:704): avc: denied { wake_alarm } for pid=10251 comm="syz.8.867" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.548103][ T30] audit: type=1400 audit(1765873671.598:705): avc: denied { getopt } for pid=10258 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.895620][ T5924] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 303.051546][ T5924] usb 9-1: config 0 has no interfaces? [ 303.080363][ T5924] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 303.454727][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.480111][ T5924] usb 9-1: config 0 descriptor?? [ 303.663859][T10276] hsr0: entered allmulticast mode [ 303.682823][T10276] hsr_slave_0: entered allmulticast mode [ 303.727926][T10276] hsr_slave_1: entered allmulticast mode [ 303.748994][ T5924] usb 9-1: USB disconnect, device number 4 [ 304.318111][T10300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=10300 comm=syz.5.881 [ 304.680028][ T6181] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 304.788954][ T30] audit: type=1800 audit(1765873673.788:706): pid=10312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.883" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 305.135005][ T30] audit: type=1400 audit(1765873674.148:707): avc: denied { write } for pid=10308 comm="syz.3.884" name="file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 305.194207][ T30] audit: type=1400 audit(1765873674.158:708): avc: denied { open } for pid=10308 comm="syz.3.884" path="/193/file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 305.260283][ T6181] usb 6-1: device descriptor read/64, error -71 [ 305.277378][ T30] audit: type=1400 audit(1765873674.328:709): avc: denied { read write } for pid=10303 comm="syz.7.882" name="mouse0" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 305.541319][ T6181] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 305.725266][ T6181] usb 6-1: device descriptor read/64, error -71 [ 305.770802][ T30] audit: type=1400 audit(1765873674.818:710): avc: denied { load_policy } for pid=10322 comm="syz.8.887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 305.847992][T10323] SELinux: failed to load policy [ 305.897748][ T6181] usb usb6-port1: attempt power cycle [ 305.917185][ T9347] IPVS: starting estimator thread 0... [ 305.990072][ T6658] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 306.020243][T10326] IPVS: using max 48 ests per chain, 115200 per kthread [ 306.047514][T10330] netlink: 60 bytes leftover after parsing attributes in process `syz.8.889'. [ 306.067413][T10330] unsupported nlmsg_type 40 [ 306.087473][ T30] audit: type=1326 audit(1765873675.138:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.8.889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c1b78f749 code=0x0 [ 306.200061][ T6658] usb 8-1: Using ep0 maxpacket: 32 [ 306.206664][ T6658] usb 8-1: config 0 has an invalid interface number: 151 but max is 0 [ 306.215012][ T6658] usb 8-1: config 0 has no interface number 0 [ 306.224726][ T6658] usb 8-1: config 0 interface 151 has no altsetting 0 [ 306.240593][ T6658] usb 8-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 306.249638][ T6658] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.257925][ T6181] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 306.266636][ T6658] usb 8-1: Product: syz [ 306.272695][ T6658] usb 8-1: Manufacturer: syz [ 306.277342][ T6658] usb 8-1: SerialNumber: syz [ 306.284753][ T6181] usb 6-1: device descriptor read/8, error -71 [ 306.318716][ T6658] usb 8-1: config 0 descriptor?? [ 306.342351][ T6658] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 306.530025][ T6181] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 306.572201][ T6181] usb 6-1: device descriptor read/8, error -71 [ 306.711050][ T6181] usb usb6-port1: unable to enumerate USB device [ 306.841869][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 306.851850][T10338] netlink: 54759 bytes leftover after parsing attributes in process `syz.1.891'. [ 307.295171][ T6658] usb 8-1: USB disconnect, device number 14 [ 307.519004][T10349] usb usb8: usbfs: process 10349 (syz.5.893) did not claim interface 0 before use [ 307.569276][ T30] audit: type=1400 audit(1765873676.618:712): avc: denied { ioctl } for pid=10339 comm="syz.8.892" path="socket:[32751]" dev="sockfs" ino=32751 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.023811][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.034463][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.049638][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.059937][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.072272][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.082099][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.093354][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.103159][T10358] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.112669][T10358] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 308.167616][T10357] block device autoloading is deprecated and will be removed. [ 308.230573][T10362] ntfs3(nullb0): Primary boot signature is not NTFS. [ 308.268154][T10362] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 308.493780][ T30] audit: type=1400 audit(1765873677.538:713): avc: denied { write } for pid=10363 comm="syz.7.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 309.200431][ T9347] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 309.402916][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.7.900'. [ 309.469828][ T30] audit: type=1400 audit(1765873678.518:714): avc: denied { read } for pid=10377 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.473752][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.900'. [ 310.070002][ T9347] usb 4-1: Using ep0 maxpacket: 16 [ 310.130987][ T9347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.131871][ T9347] usb 4-1: config 1 has an invalid interface number: 35 but max is 0 [ 310.131890][ T9347] usb 4-1: config 1 has no interface number 0 [ 310.131904][ T9347] usb 4-1: config 1 interface 35 has no altsetting 0 [ 310.151590][ T9347] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=fd.15 [ 310.151614][ T9347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.151632][ T9347] usb 4-1: Product: syz [ 310.151647][ T9347] usb 4-1: Manufacturer: syz [ 310.151660][ T9347] usb 4-1: SerialNumber: syz [ 310.355911][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.362285][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.374843][ T9347] usb 4-1: USB disconnect, device number 47 [ 310.706199][T10390] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 310.866843][ T30] audit: type=1800 audit(1765873679.918:715): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.902" name="bus" dev="ramfs" ino=34847 res=0 errno=0 [ 311.051178][ T9347] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 311.440568][ T9347] usb 8-1: Using ep0 maxpacket: 8 [ 311.670174][ T48] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 311.720340][ T9347] usb 8-1: config 0 has no interfaces? [ 311.742451][ T9347] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 311.778834][ T9347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.821194][ T9347] usb 8-1: Product: syz [ 311.831328][ T9347] usb 8-1: Manufacturer: syz [ 311.835935][ T9347] usb 8-1: SerialNumber: syz [ 311.864348][ T9347] usb 8-1: config 0 descriptor?? [ 311.890073][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 311.903478][ T48] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.938921][ T48] usb 6-1: config 0 has no interface number 0 [ 311.941472][T10413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.909'. [ 311.986107][ T48] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 312.012141][ T48] usb 6-1: config 0 interface 1 has no altsetting 0 [ 312.028472][ T48] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 312.052295][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.075886][ T48] usb 6-1: Product: syz [ 312.091428][ T48] usb 6-1: Manufacturer: syz [ 312.113943][ T48] usb 6-1: SerialNumber: syz [ 312.123261][ T6181] usb 8-1: USB disconnect, device number 15 [ 312.135139][ T48] usb 6-1: config 0 descriptor?? [ 312.223728][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.7.911'. [ 312.261166][ T5821] Bluetooth: Unexpected continuation frame (len 69) [ 312.262195][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.911'. [ 312.281134][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.911'. [ 312.429364][ T48] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 312.450974][ T6181] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 312.472682][ T48] cx231xx 6-1:0.1: Failed to read PCB config [ 312.479740][ T30] audit: type=1400 audit(1765873681.528:716): avc: denied { write } for pid=10424 comm="syz.7.912" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 312.520362][ T48] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 312.540794][ T48] usb 6-1: USB disconnect, device number 39 [ 312.556958][ T30] audit: type=1400 audit(1765873681.558:717): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.581711][ T30] audit: type=1400 audit(1765873681.558:718): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.606534][ T30] audit: type=1400 audit(1765873681.558:719): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.637533][ T6181] usb 9-1: device descriptor read/64, error -71 [ 312.730041][ T9347] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 312.892475][ T9347] usb 8-1: Using ep0 maxpacket: 8 [ 312.900272][ T6181] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 312.902594][ T9347] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.938581][ T9347] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 312.965089][ T9347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 312.996272][ T9347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.030915][ T9347] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.073206][ T6181] usb 9-1: device descriptor read/64, error -71 [ 313.125955][ T9347] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 313.145673][ T9347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.160010][ T9347] usb 8-1: Product: syz [ 313.167447][ T9347] usb 8-1: Manufacturer: syz [ 313.172130][ T9347] usb 8-1: SerialNumber: syz [ 313.200303][ T6181] usb usb9-port1: attempt power cycle [ 313.330469][ T9347] usb 8-1: config 0 descriptor?? [ 313.346177][ T9347] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input29 [ 313.380903][ T7097] wlan0: Trigger new scan to find an IBSS to join [ 313.555567][ T6181] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 313.712747][ T6181] usb 9-1: device descriptor read/8, error -71 [ 314.037789][ T30] audit: type=1400 audit(1765873683.088:720): avc: denied { ioctl } for pid=10465 comm="syz.1.923" path="socket:[34997]" dev="sockfs" ino=34997 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 314.063288][ T6181] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 314.088113][ T30] audit: type=1400 audit(1765873683.138:721): avc: denied { read } for pid=10465 comm="syz.1.923" lport=52253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.121800][ T6181] usb 9-1: device descriptor read/8, error -71 [ 314.200055][ T9347] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 314.220022][ T5818] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 314.251164][ T6181] usb usb9-port1: unable to enumerate USB device [ 314.265417][T10468] SELinux: failed to load policy [ 314.351147][ T9347] usb 6-1: Using ep0 maxpacket: 16 [ 314.357593][ T9347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.370121][ T5818] usb 4-1: device descriptor read/64, error -71 [ 314.370738][ T9347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.389414][ T9347] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.403001][ T9347] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 314.412097][ T9347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.421740][ T9347] usb 6-1: config 0 descriptor?? [ 314.550392][ T6181] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 314.610033][ T5818] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 314.700099][ T6181] usb 2-1: Using ep0 maxpacket: 32 [ 314.706901][ T6181] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.715451][ T6181] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.724230][ T6181] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.734390][ T6181] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.743297][ T5818] usb 4-1: device descriptor read/64, error -71 [ 314.751982][ T6181] usb 2-1: string descriptor 0 read error: -22 [ 314.758263][ T6181] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.767512][ T6181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.784214][ T6181] usb 2-1: 0:2 : does not exist [ 314.835102][ T9347] shield 0003:0955:7214.0017: unexpected long global item [ 314.844115][ T9347] shield 0003:0955:7214.0017: Parse failed [ 314.849929][ T9347] shield 0003:0955:7214.0017: probe with driver shield failed with error -22 [ 314.862421][ T5818] usb usb4-port1: attempt power cycle [ 314.981605][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.990327][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.998553][ T9347] usb 2-1: USB disconnect, device number 40 [ 315.211271][ T5818] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 315.296146][ T5818] usb 4-1: device descriptor read/8, error -71 [ 315.363175][ T9347] usb 6-1: USB disconnect, device number 40 [ 315.417192][ T5921] usb 8-1: USB disconnect, device number 16 [ 315.565390][ T5818] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 315.611670][ T5818] usb 4-1: device descriptor read/8, error -71 [ 315.636884][T10491] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 315.730573][ T5818] usb usb4-port1: unable to enumerate USB device [ 315.756414][ T30] audit: type=1400 audit(1765873684.808:722): avc: denied { nlmsg_read } for pid=10499 comm="syz.7.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 315.845523][T10507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42605 sclass=netlink_route_socket pid=10507 comm=syz.1.934 [ 315.860523][ T5921] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 316.010044][ T9347] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 316.020574][ T5921] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.030137][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.038192][ T5921] usb 9-1: Product: syz [ 316.042641][ T5921] usb 9-1: Manufacturer: syz [ 316.047259][ T5921] usb 9-1: SerialNumber: syz [ 316.162093][ T9347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.173225][ T9347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.183455][ T9347] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 316.193970][ T9347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.205830][ T9347] usb 8-1: config 0 descriptor?? [ 316.617840][ T9347] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 316.633117][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.811248][ T30] audit: type=1400 audit(1765873685.838:723): avc: denied { ioctl } for pid=10515 comm="syz.5.937" path="socket:[35947]" dev="sockfs" ino=35947 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.867343][ T9347] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0018/input/input30 [ 317.014786][ T9347] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 317.068043][ T9347] usb 8-1: USB disconnect, device number 17 [ 317.106504][ T5921] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 317.133527][ T5921] cdc_ncm 9-1:1.0: dwNtbInMaxSize=128 is too small. Using 2048 [ 317.156442][ T5921] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 317.163151][T10520] fido_id[10520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 317.307570][ T5921] cdc_ncm 9-1:1.0: setting tx_max = 48 [ 317.342697][ T5921] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 317.372834][ T5921] usb 9-1: USB disconnect, device number 9 [ 317.390834][ T5818] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 317.392254][ T5921] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 317.580107][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 317.616334][ T5818] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 317.633464][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.645288][ T30] audit: type=1400 audit(1765873686.698:724): avc: denied { create } for pid=10529 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 317.675092][ T5818] usb 6-1: Product: syz [ 317.679263][ T5818] usb 6-1: Manufacturer: syz [ 317.699385][ T5818] usb 6-1: SerialNumber: syz [ 317.716929][ T5818] r8152-cfgselector 6-1: Unknown version 0x0000 [ 317.724807][ T5818] r8152-cfgselector 6-1: config 0 descriptor?? [ 318.159062][ T5818] r8152-cfgselector 6-1: Needed 1 retries to read version [ 318.300205][ T4432] wlan0: Trigger new scan to find an IBSS to join [ 318.361507][T10522] netlink: 14 bytes leftover after parsing attributes in process `syz.5.938'. [ 318.826421][T10557] block nbd3: shutting down sockets [ 319.002971][T10567] fuse: Bad value for 'fd' [ 319.076732][T10522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.126575][T10522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.191070][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.948'. [ 319.232076][T10522] bond0 (unregistering): (slave team0): Releasing backup interface [ 319.257567][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.352380][T10522] bond0 (unregistering): Released all slaves [ 319.821216][ T5818] r8152-cfgselector 6-1: USB disconnect, device number 41 [ 320.110553][ T6658] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 320.271682][ T6658] usb 8-1: config 150 has an invalid interface number: 204 but max is 2 [ 320.290118][ T6658] usb 8-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 320.310225][ T6658] usb 8-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 320.319355][ T6658] usb 8-1: config 150 has no interface number 0 [ 320.332233][ T6658] usb 8-1: config 150 interface 204 has no altsetting 0 [ 320.349772][ T6658] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 320.379881][ T6658] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.391334][ T6658] usb 8-1: Product: syz [ 320.396042][ T6658] usb 8-1: Manufacturer: syz [ 320.403378][ T6658] usb 8-1: SerialNumber: syz [ 320.502603][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.960'. [ 320.528001][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21529 sclass=netlink_route_socket pid=10607 comm=syz.5.959 [ 320.647679][T10612] netlink: 'syz.5.962': attribute type 2 has an invalid length. [ 320.668538][ T30] audit: type=1400 audit(1765873689.718:725): avc: denied { create } for pid=10609 comm="syz.5.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 320.700061][ T9347] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 321.096473][ T30] audit: type=1400 audit(1765873689.718:726): avc: denied { getopt } for pid=10609 comm="syz.5.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 321.130014][ T5921] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 321.133494][ T6658] usb 8-1: USB disconnect, device number 18 [ 321.856714][T10617] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 322.950032][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 322.955261][ T9347] usb 4-1: Using ep0 maxpacket: 8 [ 322.970540][ T5921] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 322.978639][ T5921] usb 2-1: config 0 has no interface number 0 [ 322.987221][ T9347] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 323.030257][ T9347] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 323.042583][ T5921] usb 2-1: config 0 interface 29 has no altsetting 0 [ 323.074708][ T5921] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 323.085544][ T9347] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.107789][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.125944][ T9347] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.150138][ T5921] usb 2-1: Product: syz [ 323.154281][ T5921] usb 2-1: Manufacturer: syz [ 323.158839][ T5921] usb 2-1: SerialNumber: syz [ 323.190029][ T9347] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.199335][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.210461][ T5921] usb 2-1: config 0 descriptor?? [ 323.433503][ T30] audit: type=1400 audit(1765873692.488:727): avc: denied { accept } for pid=10632 comm="syz.8.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.435516][ T30] audit: type=1400 audit(1765873692.488:728): avc: denied { getopt } for pid=10632 comm="syz.8.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.435556][ T30] audit: type=1400 audit(1765873692.488:729): avc: denied { read } for pid=10632 comm="syz.8.968" path="socket:[36101]" dev="sockfs" ino=36101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.436189][ T30] audit: type=1400 audit(1765873692.488:730): avc: denied { ioctl } for pid=10632 comm="syz.8.968" path="socket:[36101]" dev="sockfs" ino=36101 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.474430][ T5921] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v102 fw v3.141.98 (2 channels) [ 323.489506][ T30] audit: type=1400 audit(1765873692.538:731): avc: denied { ioctl } for pid=10633 comm="syz.7.969" path="socket:[35595]" dev="sockfs" ino=35595 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.496265][ T9347] usb 4-1: usb_control_msg returned -71 [ 323.612938][ T9347] usbtmc 4-1:16.0: can't read capabilities [ 323.670141][ T9347] usb 4-1: USB disconnect, device number 52 [ 324.026818][ T5921] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 324.034820][ T5921] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 324.041784][ T5921] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 324.056073][ T30] audit: type=1400 audit(1765873693.078:732): avc: denied { create } for pid=10643 comm="syz.7.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 324.089553][ T30] audit: type=1400 audit(1765873693.078:733): avc: denied { write } for pid=10643 comm="syz.7.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 324.161398][ T5921] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 324.233001][ T30] audit: type=1400 audit(1765873693.288:734): avc: denied { write } for pid=10655 comm="syz.7.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.258932][ T30] audit: type=1400 audit(1765873693.288:735): avc: denied { mount } for pid=10653 comm="syz.8.973" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 324.360054][ T9347] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 324.514201][ T9347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.526788][ T9347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.538040][ T9347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.551214][ T9347] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 324.560939][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.571113][ T9347] usb 4-1: config 0 descriptor?? [ 324.580034][ T5921] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 324.620088][ T790] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 324.758955][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 324.774323][ T790] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 324.810788][ T790] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 324.836292][ T5921] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 324.851271][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.865278][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.889492][ T790] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 324.899904][ T5921] usb 8-1: config 0 descriptor?? [ 324.918243][ T5921] gspca_main: sunplus-2.14.0 probing 041e:400b [ 325.015896][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.054235][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.083423][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.110376][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.128166][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.625214][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.660563][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.688815][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.764575][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.775362][ T9347] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 325.802080][ T9347] hid-multitouch 0003:0457:07DA.0019: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 325.869113][ T9347] usb 4-1: USB disconnect, device number 53 [ 326.330318][ T5921] gspca_sunplus: reg_w_riv err -110 [ 326.343062][T10673] fido_id[10673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 326.391543][ T5921] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 326.441902][ T5921] usb 8-1: USB disconnect, device number 19 [ 326.500814][ T790] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -110 [ 326.510173][ T9347] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 326.542748][ T790] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 326.560124][ T790] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 326.650072][ T9347] usb 4-1: device descriptor read/64, error -71 [ 326.890125][ T9347] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 327.030061][ T9347] usb 4-1: device descriptor read/64, error -71 [ 327.319057][T10694] fuse: Unknown parameter 'rootmodeT½c»ßõ' [ 327.380851][ T9347] usb usb4-port1: attempt power cycle [ 327.437591][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.477656][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.699559][ T6658] usb 6-1: USB disconnect, device number 42 [ 327.740123][ T9347] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 327.780423][ T9347] usb 4-1: device descriptor read/8, error -71 [ 327.889219][ T30] audit: type=1400 audit(1765873696.938:736): avc: denied { ioctl } for pid=10707 comm="syz.5.988" path="socket:[36284]" dev="sockfs" ino=36284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 328.030149][ T9347] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 328.060891][ T9347] usb 4-1: device descriptor read/8, error -71 [ 328.271037][ T9347] usb usb4-port1: unable to enumerate USB device [ 328.422520][T10717] vlan0: entered promiscuous mode [ 328.630116][ T6658] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 328.810359][ T6658] usb 9-1: Using ep0 maxpacket: 32 [ 328.956578][ T6658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.004351][ T6658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.034025][ T6658] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 329.060864][ T6658] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.089610][ T6658] usb 9-1: config 0 descriptor?? [ 329.159062][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.166561][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.197171][T10739] comedi comedi1: pcl726: I/O port conflict (0x2,16) [ 329.358035][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.528293][ T6658] elo 0003:04E7:0009.001A: item fetching failed at offset 2/4 [ 329.540695][ T6658] elo 0003:04E7:0009.001A: parse failed [ 329.546910][ T6658] elo 0003:04E7:0009.001A: probe with driver elo failed with error -22 [ 329.631615][ T1079] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.671395][ T1079] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.709715][ T1079] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.746654][ T30] audit: type=1800 audit(1765873698.798:737): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.995" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 329.768750][ T1079] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.779517][ T30] audit: type=1400 audit(1765873698.808:738): avc: denied { getopt } for pid=10735 comm="syz.7.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 330.475221][T10759] kvm: pic: non byte read [ 330.489878][T10759] kvm: pic: non byte read [ 330.501778][T10759] kvm: pic: non byte read [ 330.512055][T10759] kvm: pic: non byte read [ 330.523201][T10759] kvm: pic: non byte read [ 331.037136][ T6181] usb 9-1: USB disconnect, device number 10 [ 331.216378][ T30] audit: type=1400 audit(1765873700.268:739): avc: denied { write } for pid=10767 comm="syz.8.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 331.439010][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1003'. [ 331.670242][ T9347] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 331.707944][T10778] binder_alloc: binder_alloc_mmap_handler: 10777 200000ffc000-200000fff000 already mapped failed -16 [ 331.743694][ T790] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 331.820104][ T9347] usb 4-1: Using ep0 maxpacket: 16 [ 331.829684][T10780] x_tables: duplicate underflow at hook 1 [ 331.855518][ T9347] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.875936][ T9347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.910845][ T9347] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 331.920205][ T790] usb 8-1: Using ep0 maxpacket: 16 [ 331.949741][ T790] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 331.995661][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.017404][ T790] usb 8-1: config 0 has no interface number 0 [ 332.065466][ T790] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 332.112856][ T9347] usb 4-1: config 0 descriptor?? [ 332.167481][ T790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.210508][ T790] usb 8-1: Product: syz [ 332.214756][ T790] usb 8-1: Manufacturer: syz [ 332.219465][ T790] usb 8-1: SerialNumber: syz [ 332.228826][ T790] usb 8-1: config 0 descriptor?? [ 332.242531][ T790] hub 8-1:0.132: bad descriptor, ignoring hub [ 332.248749][ T790] hub 8-1:0.132: probe with driver hub failed with error -5 [ 332.259786][ T790] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input31 [ 332.440206][ T790] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 332.558191][ T30] audit: type=1400 audit(1765873701.608:740): avc: denied { accept } for pid=10771 comm="syz.7.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 332.562307][ T5921] usb 8-1: USB disconnect, device number 20 [ 332.601122][ T790] usb 9-1: Using ep0 maxpacket: 16 [ 332.628569][ T790] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.646613][ T790] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.646986][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.665523][ T790] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.679787][ T790] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.690378][ T790] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.851029][ T790] usb 9-1: config 0 descriptor?? [ 332.879629][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.995484][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 333.391413][ T9347] hid (null): global environment stack underflow [ 333.399360][ T9347] hid (null): invalid report_size 1539557986 [ 333.419097][ T9347] hid_parser_main: 19 callbacks suppressed [ 333.419108][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.438486][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.450327][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.457373][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.473156][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.482395][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.489385][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.496491][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.504173][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.530488][ T9347] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 333.541898][ T9347] cougar 0003:060B:500A.001B: unexpected long global item [ 333.549673][ T9347] cougar 0003:060B:500A.001B: parse failed [ 333.559275][ T9347] cougar 0003:060B:500A.001B: probe with driver cougar failed with error -22 [ 333.621978][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.694162][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.710456][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.723345][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.809612][ T9347] usb 4-1: USB disconnect, device number 58 [ 333.838260][T10805] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1012'. [ 333.963607][ T790] usbhid 9-1:0.0: can't add hid device: -71 [ 333.978430][ T790] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 333.988707][ T790] usb 9-1: USB disconnect, device number 11 [ 334.185190][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'. [ 334.677389][T10812] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 334.730865][ T30] audit: type=1400 audit(1765873703.788:741): avc: denied { mounton } for pid=10818 comm="syz.5.1016" path="/152/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 334.951433][T10826] netlink: 'syz.1.1017': attribute type 13 has an invalid length. [ 334.972041][T10826] netlink: 'syz.1.1017': attribute type 17 has an invalid length. [ 335.102680][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.109854][T10826] bridge0: port 2(bridge_slave_1) entered listening state [ 335.187785][T10826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.128211][T10869] SELinux: security_context_str_to_sid () failed with errno=-22 [ 337.320077][ T9347] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 337.460076][ T9347] usb 8-1: device descriptor read/64, error -71 [ 337.740714][ T9347] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 337.906539][ T30] audit: type=1800 audit(1765873706.958:742): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1034" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 338.010034][ T9347] usb 8-1: device descriptor read/64, error -71 [ 338.130247][ T9347] usb usb8-port1: attempt power cycle [ 338.909612][ T9347] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 338.940671][ T9347] usb 8-1: device descriptor read/8, error -71 [ 338.971873][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1037'. [ 339.200132][ T9347] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 339.253310][ T9347] usb 8-1: device descriptor read/8, error -71 [ 339.380408][ T9347] usb usb8-port1: unable to enumerate USB device [ 339.479805][ T30] audit: type=1400 audit(1765873708.528:743): avc: denied { read write } for pid=6788 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.529913][ T30] audit: type=1400 audit(1765873708.558:744): avc: denied { open } for pid=6788 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.567581][ T30] audit: type=1400 audit(1765873708.558:745): avc: denied { ioctl } for pid=6788 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.648074][T10938] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1048'. [ 339.650373][ T30] audit: type=1400 audit(1765873708.568:746): avc: denied { read write } for pid=10933 comm="syz.3.1047" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.700234][ T6181] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 339.721969][ T30] audit: type=1400 audit(1765873708.568:747): avc: denied { open } for pid=10933 comm="syz.3.1047" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.790468][ T9347] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 339.948064][ T30] audit: type=1400 audit(1765873708.568:748): avc: denied { ioctl } for pid=10933 comm="syz.3.1047" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.985980][ T6181] usb 9-1: Using ep0 maxpacket: 32 [ 339.994749][ T30] audit: type=1400 audit(1765873708.578:749): avc: denied { prog_load } for pid=10936 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.006541][ T6181] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.016659][ T30] audit: type=1400 audit(1765873708.578:750): avc: denied { bpf } for pid=10936 comm="syz.5.1048" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.061103][ T6181] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 340.065848][ T30] audit: type=1400 audit(1765873708.578:751): avc: denied { perfmon } for pid=10936 comm="syz.5.1048" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.076730][ T6181] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.110624][ T9347] usb 4-1: Using ep0 maxpacket: 16 [ 340.131642][ T9347] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 340.146227][ T9347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.154334][ T6181] usb 9-1: Product: syz [ 340.154352][ T6181] usb 9-1: Manufacturer: syz [ 340.154366][ T6181] usb 9-1: SerialNumber: syz [ 340.180606][ T6181] usb 9-1: config 0 descriptor?? [ 340.203294][T10947] syzkaller1: entered promiscuous mode [ 340.204236][ T9347] usb 4-1: Product: syz [ 340.213259][ T9347] usb 4-1: Manufacturer: syz [ 340.220458][ T6181] kvaser_usb 9-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 340.232686][ T9347] usb 4-1: SerialNumber: syz [ 340.237345][T10947] syzkaller1: entered allmulticast mode [ 340.264128][ T9347] usb 4-1: config 0 descriptor?? [ 340.400665][T10948] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1052'. [ 340.628668][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1044'. [ 340.645536][T10964] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:21 [ 340.706810][ T9347] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 340.721546][ T9347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.732373][ T9347] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 340.743034][ T9347] usb 4-1: media controller created [ 340.773707][ T9347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.820445][ T6181] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 340.915437][ T9347] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 340.927495][ T9347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 340.996587][ T6181] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.022916][ T6181] usb 6-1: config 6 has an invalid interface number: 158 but max is 0 [ 341.049085][ T6181] usb 6-1: config 6 has no interface number 0 [ 341.070325][ T6181] usb 6-1: config 6 interface 158 has no altsetting 0 [ 341.093985][ T6181] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 341.107290][ T6181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.115585][ T6181] usb 6-1: Product: syz [ 341.121510][ T6181] usb 6-1: Manufacturer: syz [ 341.126263][ T6181] usb 6-1: SerialNumber: syz [ 341.246946][T10974] : entered promiscuous mode [ 341.378705][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1054'. [ 341.402223][T10963] vlan2: entered allmulticast mode [ 341.407556][T10963] veth0_to_bond: entered allmulticast mode [ 341.436628][ T6181] rtsx_usb 6-1:6.158: probe with driver rtsx_usb failed with error -22 [ 341.482624][ T6181] usb 6-1: USB disconnect, device number 43 [ 341.564453][T10978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1058'. [ 341.593314][T10978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1058'. [ 341.605073][T10978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1058'. [ 342.563555][ T6181] usb 9-1: USB disconnect, device number 12 [ 342.842360][T11004] usb usb8: usbfs: process 11004 (syz.7.1065) did not claim interface 0 before use [ 342.971136][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 342.971151][ T30] audit: type=1400 audit(1765873712.018:811): avc: denied { map_create } for pid=11003 comm="syz.7.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 343.026129][ T30] audit: type=1400 audit(1765873712.058:812): avc: denied { append } for pid=11003 comm="syz.7.1065" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.130129][ T6181] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 343.170043][ T30] audit: type=1400 audit(1765873712.218:813): avc: denied { unlink } for pid=11009 comm="syz.1.1066" name="#15" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.231467][ T30] audit: type=1400 audit(1765873712.278:814): avc: denied { read write } for pid=11009 comm="syz.1.1066" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.300579][ T30] audit: type=1400 audit(1765873712.288:815): avc: denied { open } for pid=11009 comm="syz.1.1066" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.324078][ T6181] usb 9-1: Using ep0 maxpacket: 16 [ 343.356925][ T6181] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.390682][ T6181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.420020][ T30] audit: type=1400 audit(1765873712.308:816): avc: denied { map } for pid=11009 comm="syz.1.1066" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.462663][ T6181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 343.480287][ T6181] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 343.500525][ T6181] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.508333][ T9347] usb 4-1: USB disconnect, device number 59 [ 343.553747][ T6181] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 343.592917][ T9347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 343.604528][ T30] audit: type=1400 audit(1765873712.658:817): avc: denied { map_read map_write } for pid=11012 comm="syz.5.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 343.641851][ T6181] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 343.662661][T11018] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 343.691102][ T6181] usb 9-1: Manufacturer: syz [ 343.715410][ T6181] usb 9-1: config 0 descriptor?? [ 343.740804][ T30] audit: type=1400 audit(1765873712.658:818): avc: denied { append } for pid=11015 comm="syz.1.1068" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.769188][T11019] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 343.796844][T11016] kvm: pic: non byte write [ 343.860171][T11016] kvm: pic: non byte write [ 343.865418][ T30] audit: type=1400 audit(1765873712.658:819): avc: denied { ioctl } for pid=11015 comm="syz.1.1068" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.897899][T11016] kvm: pic: non byte write [ 343.908385][T11016] kvm: pic: non byte write [ 343.916252][T11016] kvm: pic: non byte write [ 343.926425][T11016] kvm: pic: non byte write [ 343.932632][T11016] kvm: pic: non byte write [ 343.939043][ T30] audit: type=1400 audit(1765873712.708:820): avc: denied { execute } for pid=11012 comm="syz.5.1067" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 343.965900][T11016] kvm: pic: non byte write [ 343.972051][T11016] kvm: pic: non byte write [ 343.977843][T11016] kvm: pic: non byte write [ 344.039989][ T6181] rc_core: IR keymap rc-hauppauge not found [ 344.055597][ T6181] Registered IR keymap rc-empty [ 344.070850][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.111374][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.177463][ T6181] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 344.206945][T11036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.218704][ T6181] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input32 [ 344.238497][T11036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.255908][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.290374][ T9347] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 344.290685][ C1] mceusb 9-1:0.0: long-range (0x8d) receiver active [ 344.305150][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.330063][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.371025][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.400064][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.426323][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.493086][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.493775][T11044] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1074'. [ 344.654372][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.726223][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.773327][ T9347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.796413][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.820133][ T9347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.820210][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.831889][ T9347] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.935880][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.940031][ T6181] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 344.979094][ T9347] usb 4-1: config 0 descriptor?? [ 345.029673][ T6181] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 345.055095][ T6181] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x8d active) [ 345.073609][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.094125][ T6181] usb 9-1: USB disconnect, device number 13 [ 345.215092][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.284848][T11056] Invalid ELF header len 8 [ 345.291763][T11056] netlink: 'syz.5.1076': attribute type 23 has an invalid length. [ 345.448862][ T9347] hid_parser_main: 205 callbacks suppressed [ 345.448876][ T9347] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 345.492680][ T9347] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 345.647803][ T9347] cp2112 0003:10C4:EA90.001C: Part Number: 0x82 Device Version: 0xFE [ 345.940176][ T6181] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 346.181303][ T6181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.192827][ T6181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.204628][ T6181] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 346.273212][T11071] lo speed is unknown, defaulting to 1000 [ 346.279593][T11071] lo speed is unknown, defaulting to 1000 [ 346.289383][T11071] lo speed is unknown, defaulting to 1000 [ 346.327599][T11071] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 346.749927][T11071] lo speed is unknown, defaulting to 1000 [ 346.757131][T11071] lo speed is unknown, defaulting to 1000 [ 346.778517][ T6181] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.803526][T11071] lo speed is unknown, defaulting to 1000 [ 346.810530][T11071] lo speed is unknown, defaulting to 1000 [ 346.817279][T11071] lo speed is unknown, defaulting to 1000 [ 346.837794][ T6181] usb 9-1: config 0 descriptor?? [ 347.264297][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x1 [ 347.284960][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 347.293993][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 347.302357][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 347.320622][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 347.332523][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 347.343196][ T6181] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 347.353207][ T6181] konepure 0003:1E7D:2DBE.001D: hidraw1: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.8-1/input0 [ 347.462683][ T6181] usb 9-1: USB disconnect, device number 14 [ 347.876797][ T9347] cp2112 0003:10C4:EA90.001C: error reading lock byte: -71 [ 347.902359][ T9347] usb 4-1: USB disconnect, device number 60 [ 348.071711][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 348.071727][ T30] audit: type=1400 audit(1765873717.128:856): avc: denied { read } for pid=11091 comm="syz.1.1085" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 348.290258][T11095] netlink: 'syz.3.1084': attribute type 10 has an invalid length. [ 348.301748][T11095] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 348.310939][T11095] team0: Failed to send options change via netlink (err -105) [ 348.318405][T11095] team0: Port device netdevsim0 added [ 349.197643][ T30] audit: type=1400 audit(1765873717.158:857): avc: denied { open } for pid=11091 comm="syz.1.1085" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 349.241034][T11101] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1086'. [ 349.315106][ T30] audit: type=1400 audit(1765873717.178:858): avc: denied { ioctl } for pid=11091 comm="syz.1.1085" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 349.445384][ T6181] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 349.515681][ T30] audit: type=1400 audit(1765873717.188:859): avc: denied { read write } for pid=11091 comm="syz.1.1085" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 349.762529][ T6181] usb 4-1: Using ep0 maxpacket: 8 [ 349.937473][ T30] audit: type=1400 audit(1765873717.188:860): avc: denied { open } for pid=11091 comm="syz.1.1085" path="/dev/sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 350.116228][ T6181] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.122900][ T30] audit: type=1400 audit(1765873717.338:861): avc: denied { create } for pid=11089 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.151490][ T6181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.168891][ T6181] usb 4-1: Product: syz [ 350.243426][ T6181] usb 4-1: Manufacturer: syz [ 350.297284][ T6181] usb 4-1: SerialNumber: syz [ 350.385956][ T30] audit: type=1400 audit(1765873717.338:862): avc: denied { bind } for pid=11089 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.513017][ T6181] usb 4-1: config 0 descriptor?? [ 350.592158][ T30] audit: type=1400 audit(1765873717.338:863): avc: denied { setopt } for pid=11089 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.637277][ T30] audit: type=1400 audit(1765873718.548:864): avc: denied { execute } for pid=11106 comm="syz.5.1090" path="/171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 350.751310][ T30] audit: type=1400 audit(1765873718.648:865): avc: denied { shutdown } for pid=11102 comm="syz.7.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.793035][ T6181] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.980049][ T9347] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 350.994681][ T6181] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 351.372186][ T9347] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 351.410343][ T9347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.532183][ T9347] usb 6-1: Product: syz [ 351.536477][ T9347] usb 6-1: Manufacturer: syz [ 351.549625][ T9347] usb 6-1: SerialNumber: syz [ 352.307635][ T9347] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 352.347648][ T9347] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 352.490579][ T790] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 352.579414][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1098'. [ 352.601623][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1098'. [ 352.677857][ T790] usb 9-1: Using ep0 maxpacket: 32 [ 352.712837][ T790] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 352.736683][ T790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.779821][ T790] usb 9-1: Product: syz [ 352.785530][T11155] syzkaller0: entered promiscuous mode [ 352.791406][T11155] syzkaller0: entered allmulticast mode [ 352.795640][ T790] usb 9-1: Manufacturer: syz [ 352.817876][ T790] usb 9-1: SerialNumber: syz [ 352.840824][ T790] usb 9-1: config 0 descriptor?? [ 352.879482][ T790] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 353.064165][T11159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.079519][T11159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.129280][ T6181] usb 4-1: USB disconnect, device number 61 [ 353.330818][ T6658] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 353.412165][ T790] gspca_stk1135: reg_w 0x2 err -110 [ 353.440170][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.453827][ T790] gspca_stk1135: Sensor write failed [ 353.465432][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.484930][ T790] gspca_stk1135: Sensor write failed [ 353.497068][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.514969][ T790] gspca_stk1135: Sensor read failed [ 353.528523][ T6658] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.531116][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.556414][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1101'. [ 353.597302][ T790] gspca_stk1135: Sensor read failed [ 353.602155][ T6658] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.624068][ T790] gspca_stk1135: Detected sensor type unknown (0x0) [ 353.631961][ T6658] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.641900][ T6658] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.650287][ T6658] usb 8-1: SerialNumber: syz [ 353.695362][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.732063][ T790] gspca_stk1135: Sensor read failed [ 353.744721][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.771190][ T790] gspca_stk1135: Sensor read failed [ 353.780094][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.794970][ T790] gspca_stk1135: Sensor write failed [ 353.904923][ T790] gspca_stk1135: serial bus timeout: status=0x00 [ 353.907643][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 353.907657][ T30] audit: type=1400 audit(1765873722.958:889): avc: denied { bind } for pid=11156 comm="syz.7.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 353.918922][ T790] gspca_stk1135: Sensor write failed [ 354.261334][ T30] audit: type=1400 audit(1765873723.318:890): avc: denied { ioctl } for pid=11116 comm="syz.5.1092" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37812 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 354.473902][ T790] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110 [ 354.548431][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 354.961962][ T6658] usb 8-1: 0:2 : does not exist [ 355.008555][ T6658] usb 8-1: USB disconnect, device number 25 [ 355.170516][ T6181] usb 9-1: USB disconnect, device number 15 [ 355.322972][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.625859][ T30] audit: type=1400 audit(1765873724.548:891): avc: denied { create } for pid=11175 comm="syz.8.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.096119][ T30] audit: type=1400 audit(1765873724.548:892): avc: denied { setopt } for pid=11175 comm="syz.8.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.170350][T11178] netlink: 'syz.8.1103': attribute type 10 has an invalid length. [ 356.182626][T11178] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 356.237234][ T30] audit: type=1400 audit(1765873724.718:893): avc: denied { setopt } for pid=11172 comm="syz.1.1102" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 356.526880][T11183] Bluetooth: MGMT ver 1.23 [ 356.629450][ T30] audit: type=1400 audit(1765873725.248:894): avc: denied { connect } for pid=11175 comm="syz.8.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.896953][ T30] audit: type=1400 audit(1765873725.548:895): avc: denied { execute_no_trans } for pid=11180 comm="syz.7.1104" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 356.969350][ T30] audit: type=1400 audit(1765873725.568:896): avc: denied { connect } for pid=11180 comm="syz.7.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 357.014848][ T30] audit: type=1400 audit(1765873725.578:897): avc: denied { bind } for pid=11180 comm="syz.7.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.130427][ T30] audit: type=1400 audit(1765873725.578:898): avc: denied { write } for pid=11180 comm="syz.7.1104" path="socket:[37849]" dev="sockfs" ino=37849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.232852][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.255785][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.460257][ T6658] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 357.678009][ T6658] usb 4-1: config 2 has an invalid interface number: 240 but max is 0 [ 357.706572][ T6658] usb 4-1: config 2 has no interface number 0 [ 357.730045][ T6658] usb 4-1: config 2 interface 240 has no altsetting 0 [ 357.758420][ T6658] usb 4-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 357.780102][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.800056][ T6658] usb 4-1: Product: syz [ 357.842553][ T6658] usb 4-1: Manufacturer: syz [ 357.852615][ T6658] usb 4-1: SerialNumber: syz [ 357.906279][ T6658] usb-storage 4-1:2.240: USB Mass Storage device detected [ 357.946055][ T6658] usb-storage 4-1:2.240: Quirks match for vid 04e6 pid 0006: 1 [ 358.018818][ T9347] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 358.099313][ T9347] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 358.109796][ T6658] usb 4-1: USB disconnect, device number 62 [ 358.692514][ T9347] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 358.837839][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.884273][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.884516][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.947111][ T9347] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 359.045930][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.048089][ T9347] usb 6-1: USB disconnect, device number 44 [ 359.100079][ T976] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 359.290869][ T976] usb 8-1: Using ep0 maxpacket: 32 [ 359.317127][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 359.317142][ T30] audit: type=1400 audit(1765873728.368:907): avc: denied { read write } for pid=11234 comm="syz.3.1117" name="mouse0" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 359.410811][ T976] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 359.436841][ T976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.551646][ T976] usb 8-1: config 0 descriptor?? [ 359.600078][ T30] audit: type=1400 audit(1765873728.368:908): avc: denied { open } for pid=11234 comm="syz.3.1117" path="/dev/input/mouse0" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 359.650780][ T976] gspca_main: sq930x-2.14.0 probing 041e:403c [ 359.725657][ T976] gspca_sq930x: reg_r 001f failed -71 [ 359.763141][ T976] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 359.812100][ T976] usb 8-1: USB disconnect, device number 26 [ 359.886079][T11247] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.1118'. [ 360.191887][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.232357][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.270768][T11251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1120'. [ 360.312542][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 360.500237][ T9347] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 360.650046][ T48] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 360.701416][ T9347] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.728575][ T9347] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.769138][ T9347] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.805088][T11261] overlay: Unknown parameter 'pcr' [ 360.840322][ T9347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.851467][ T48] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 360.913160][ T48] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 360.976806][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.036965][ T48] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.048336][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.061344][ T48] usb 4-1: Product: syz [ 361.068682][ T48] usb 4-1: Manufacturer: syz [ 361.076675][ T48] usb 4-1: SerialNumber: syz [ 361.136201][ T9347] usb 9-1: usb_control_msg returned -32 [ 361.172808][ T9347] usbtmc 9-1:16.0: can't read capabilities [ 361.272469][ T30] audit: type=1400 audit(1765873730.288:909): avc: denied { write } for pid=11262 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.373120][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.512756][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.705630][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 361.838611][ T48] usb 4-1: 0:2 : does not exist [ 361.865298][ T48] usb 4-1: USB disconnect, device number 63 [ 361.914183][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.235620][ T30] audit: type=1400 audit(1765873731.248:910): avc: denied { mounton } for pid=11272 comm="syz.5.1126" path="/173/file1" dev="tmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 362.389608][ T30] audit: type=1400 audit(1765873731.388:911): avc: denied { setopt } for pid=11275 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.761937][ T30] audit: type=1400 audit(1765873731.388:912): avc: denied { accept } for pid=11275 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.894075][ T30] audit: type=1400 audit(1765873731.388:913): avc: denied { write } for pid=11275 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.926070][ T30] audit: type=1400 audit(1765873731.388:914): avc: denied { read } for pid=11275 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.948827][ T30] audit: type=1400 audit(1765873731.428:915): avc: denied { ioctl } for pid=11279 comm="syz.5.1128" path="socket:[39164]" dev="sockfs" ino=39164 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.994300][ T30] audit: type=1800 audit(1765873731.798:916): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.7.1123" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 363.194517][T11304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.206996][T11304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.220675][T11304] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 363.250173][T11304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.264319][T11304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.276963][T11304] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 363.320342][ T9347] usb 9-1: USB disconnect, device number 16 [ 363.390601][T11260] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 363.427878][T11260] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 363.499598][T11260] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 363.600129][ T976] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 363.775065][ T976] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 363.785616][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.810066][ T976] usb 6-1: Product: syz [ 363.814249][ T976] usb 6-1: Manufacturer: syz [ 363.818839][ T976] usb 6-1: SerialNumber: syz [ 363.842745][ T976] usb 6-1: config 0 descriptor?? [ 364.050212][T11324] fuse: Unknown parameter 'fdð:¾„x [ 364.050212][T11324] …ôf]£÷ìü5+ Iþ' [ 364.084920][ T976] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.533342][T11326] netlink: 'syz.8.1140': attribute type 8 has an invalid length. [ 364.813569][T11334] netlink: 'syz.8.1141': attribute type 2 has an invalid length. [ 365.100101][ T48] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 365.260774][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 365.534192][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 365.541619][ T48] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.594326][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 365.594341][ T30] audit: type=1400 audit(1765873734.648:920): avc: denied { connect } for pid=11342 comm="syz.7.1144" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.596069][ T976] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 365.607055][ T48] usb 4-1: config 0 has no interface number 0 [ 365.664356][ T976] usb 6-1: USB disconnect, device number 45 [ 365.761216][ T48] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.784515][ T48] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.828025][ T48] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 365.865685][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.880050][T11260] syz.7.1123 (11260) used greatest stack depth: 19880 bytes left [ 365.896142][ T48] usb 4-1: config 0 descriptor?? [ 366.110511][ T790] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 366.361402][ T790] usb 9-1: Using ep0 maxpacket: 16 [ 366.527473][ T790] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.559378][ T790] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.602261][ T790] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.629264][ T790] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.646290][ T48] uclogic 0003:28BD:0071.001E: pen parameters not found [ 366.660030][ T790] usb 9-1: SerialNumber: syz [ 366.662163][ T48] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 366.689396][ T48] usb 4-1: USB disconnect, device number 64 [ 366.966106][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.979290][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.992798][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.002875][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.296332][T11368] tipc: Started in network mode [ 367.307817][T11368] tipc: Node identity 62d822574768, cluster identity 4711 [ 367.410292][T11368] tipc: Enabled bearer , priority 0 [ 367.433421][T11369] tipc: Disabling bearer [ 367.455820][ T30] audit: type=1400 audit(1765873736.508:921): avc: denied { create } for pid=11370 comm="syz.7.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 367.513862][ T30] audit: type=1400 audit(1765873736.538:922): avc: denied { ioctl } for pid=11370 comm="syz.7.1152" path="socket:[38815]" dev="sockfs" ino=38815 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 367.693990][ T30] audit: type=1400 audit(1765873736.598:923): avc: denied { ioctl } for pid=11370 comm="syz.7.1152" path="socket:[38818]" dev="sockfs" ino=38818 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 368.028094][ T30] audit: type=1400 audit(1765873737.078:924): avc: denied { map } for pid=11378 comm="syz.3.1154" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 368.512523][ T30] audit: type=1400 audit(1765873737.108:925): avc: denied { execute } for pid=11378 comm="syz.3.1154" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 368.569611][ T790] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 368.615363][ T790] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 369.812526][ T790] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 369.815718][T11391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=11391 comm=syz.3.1157 [ 369.830279][ T30] audit: type=1400 audit(1765873737.228:926): avc: denied { create } for pid=11376 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 369.860178][ T790] usb 9-1: USB disconnect, device number 17 [ 369.907348][ T30] audit: type=1400 audit(1765873737.228:927): avc: denied { ioctl } for pid=11376 comm="syz.1.1153" path="socket:[38849]" dev="sockfs" ino=38849 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 369.976869][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.993093][ T30] audit: type=1400 audit(1765873737.238:928): avc: denied { connect } for pid=11376 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 370.020313][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.085547][T11400] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 370.109589][T11400] SELinux: failed to load policy [ 370.114969][ T30] audit: type=1400 audit(1765873737.238:929): avc: denied { remount } for pid=11376 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 370.401607][T11409] mkiss: ax0: crc mode is auto. [ 370.603749][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 370.603763][ T30] audit: type=1400 audit(1765873739.658:936): avc: denied { bind } for pid=11410 comm="syz.3.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.754195][ T30] audit: type=1400 audit(1765873739.808:937): avc: denied { write } for pid=11418 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.800011][ T30] audit: type=1400 audit(1765873739.808:938): avc: denied { getopt } for pid=11418 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.961675][ T30] audit: type=1400 audit(1765873740.018:939): avc: denied { mounton } for pid=11431 comm="syz.8.1169" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 370.985681][T11432] tmpfs: Bad value for 'mpol' [ 370.991403][ T5818] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 371.121283][ T30] audit: type=1400 audit(1765873740.178:940): avc: denied { append } for pid=11434 comm="syz.1.1170" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.200033][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 371.206895][ T5818] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 371.215482][ T5818] usb 4-1: config 1 has no interface number 0 [ 371.260070][ T5818] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 371.278298][ T5818] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 371.280723][ T790] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 371.289547][ T5818] usb 4-1: config 1 interface 105 has no altsetting 0 [ 371.305058][ T5818] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 371.359293][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.380672][ T5818] usb 4-1: Product: syz [ 371.388028][ T5818] usb 4-1: Manufacturer: syz [ 371.393658][ T5818] usb 4-1: SerialNumber: syz [ 371.410318][T11419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.417648][T11419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.491632][ T790] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 371.520050][ T976] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 371.622966][ T790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.731953][ T790] usb 8-1: config 0 descriptor?? [ 372.020093][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 372.035521][ T976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.056621][ T790] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 372.076897][ T976] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.104456][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.123175][ T976] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.153495][ T6181] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 372.153709][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.190541][ T976] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 372.199605][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.220111][ T30] audit: type=1400 audit(1765873741.268:941): avc: denied { create } for pid=11453 comm="syz.1.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 372.221633][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.272188][ T976] hub 6-1:1.0: bad descriptor, ignoring hub [ 372.274419][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.278151][ T976] hub 6-1:1.0: probe with driver hub failed with error -5 [ 372.286823][T11419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 372.313002][T11419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 372.360019][ T6181] usb 9-1: Using ep0 maxpacket: 32 [ 372.375999][ T976] cdc_wdm 6-1:1.0: skipping garbage [ 372.386916][ T6181] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.395305][ T976] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 372.405397][ T6181] usb 9-1: config 0 has no interface number 0 [ 372.416138][ T790] gspca_cpia1: usb_control_msg 03, error -32 [ 372.430048][ T6181] usb 9-1: config 0 interface 184 has no altsetting 0 [ 372.430281][ T790] gspca_cpia1: usb_control_msg 03, error -71 [ 372.443639][ T6181] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.443663][ T6181] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.461759][ T6181] usb 9-1: Product: syz [ 372.471680][ T6181] usb 9-1: Manufacturer: syz [ 372.476554][T11459] devpts: Unknown parameter 'usrquota' [ 372.482852][ T6181] usb 9-1: SerialNumber: syz [ 372.520652][ T6181] usb 9-1: config 0 descriptor?? [ 372.520847][ T790] gspca_cpia1: usb_control_msg 01, error -71 [ 372.548044][ T6181] smsc75xx v1.0.0 [ 372.551943][ T790] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 372.691999][ T790] usb 8-1: USB disconnect, device number 27 [ 373.271276][ T6181] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 373.288578][ T6181] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 373.411379][ T5818] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 373.440854][ T5818] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 373.452994][T11465] openvswitch: netlink: IP tunnel dst address not specified [ 373.470151][ T6181] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 373.494485][ T5818] aqc111 4-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:86:0f:df:14:d0 [ 373.522819][ T6181] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 373.531911][ T5921] usb 6-1: reset high-speed USB device number 46 using dummy_hcd [ 373.539857][ T5818] usb 4-1: USB disconnect, device number 65 [ 373.550027][ T6181] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 373.572067][ T30] audit: type=1400 audit(1765873742.628:942): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.576470][ T5818] aqc111 4-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 373.620473][ T6181] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 373.636285][ T6181] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 373.650047][ T30] audit: type=1400 audit(1765873742.628:943): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.770484][ T5818] aqc111 4-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 373.774488][ T30] audit: type=1400 audit(1765873742.628:944): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.801687][ T5818] aqc111 4-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 373.801780][ T5818] aqc111 4-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 373.913695][ T30] audit: type=1400 audit(1765873742.628:945): avc: denied { read } for pid=5482 comm="dhcpcd" name="n131" dev="tmpfs" ino=7269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.638857][ T5818] usb 9-1: USB disconnect, device number 18 [ 374.717560][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1182'. [ 374.860836][ T5923] usb 6-1: USB disconnect, device number 46 [ 375.115825][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1185'. [ 375.175560][ T5818] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 375.193905][T11505] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1184'. [ 375.240051][T11505] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1184'. [ 375.325236][T11502] lo speed is unknown, defaulting to 1000 [ 375.362139][ T5818] usb 9-1: Using ep0 maxpacket: 16 [ 375.439340][ T5818] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 375.486618][ T5818] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.525562][ T5818] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.568121][ T5818] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.607737][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.627951][ T5818] usb 9-1: Product: syz [ 375.639744][ T5818] usb 9-1: Manufacturer: syz [ 375.665861][ T5818] usb 9-1: SerialNumber: syz [ 376.111423][T11494] netlink: 'syz.8.1183': attribute type 1 has an invalid length. [ 376.138202][T11494] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1183'. [ 376.178912][ T5818] usb 9-1: 0:2 : does not exist [ 376.186743][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1183'. [ 376.847727][ T5818] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 376.873119][ T5818] usb 9-1: USB disconnect, device number 19 [ 376.950659][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.073026][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.083434][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.138018][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.450415][ T5923] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 378.669754][T11552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1192'. [ 378.688124][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 378.688153][ T30] audit: type=1400 audit(1765873747.708:960): avc: denied { mount } for pid=11545 comm="syz.5.1192" name="/" dev="autofs" ino=39676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 379.269737][ T30] audit: type=1400 audit(1765873747.788:961): avc: denied { bind } for pid=11551 comm="syz.7.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.354281][ T30] audit: type=1400 audit(1765873747.788:962): avc: denied { setopt } for pid=11551 comm="syz.7.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.389821][ T30] audit: type=1400 audit(1765873748.408:963): avc: denied { unmount } for pid=6788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 379.503404][ T30] audit: type=1400 audit(1765873748.558:964): avc: denied { ioctl } for pid=11562 comm="syz.5.1196" path="socket:[40249]" dev="sockfs" ino=40249 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.549420][ T30] audit: type=1400 audit(1765873748.598:965): avc: denied { getopt } for pid=11562 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.624176][T11563] batadv_slave_0: left promiscuous mode [ 379.645923][ T30] audit: type=1400 audit(1765873748.698:966): avc: denied { ioctl } for pid=11562 comm="syz.5.1196" path="socket:[39809]" dev="sockfs" ino=39809 ioctlcmd=0x3e03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 379.762469][ T30] audit: type=1400 audit(1765873748.758:967): avc: denied { mount } for pid=11564 comm="syz.7.1194" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 379.766043][T11571] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000040x000000000000000400000000000000000000' [ 379.803808][T11572] kvm: faulting far call emulation tainted memory [ 380.185993][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1199'. [ 380.786555][ T30] audit: type=1400 audit(1765873749.838:968): avc: denied { shutdown } for pid=11569 comm="syz.1.1197" lport=56422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.858909][ T30] audit: type=1400 audit(1765873749.898:969): avc: denied { read } for pid=11569 comm="syz.1.1197" lport=56422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.205774][T11597] netlink: 'syz.7.1203': attribute type 1 has an invalid length. [ 382.167659][T11598] openvswitch: netlink: IP tunnel dst address not specified [ 382.186923][T11607] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 382.242655][T11602] bond2: (slave bridge1): making interface the new active one [ 382.251014][T11602] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 382.272333][T11604] macvlan2: entered promiscuous mode [ 382.300362][T11604] macvlan2: entered allmulticast mode [ 382.352649][T11604] bond2: entered promiscuous mode [ 382.367906][T11604] bridge1: entered promiscuous mode [ 382.410500][T11604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.428114][T11604] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 382.462250][T11604] bond2: left promiscuous mode [ 382.477392][T11604] bridge1: left promiscuous mode [ 382.610114][ T6181] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 382.760229][ T6181] usb 9-1: Using ep0 maxpacket: 8 [ 382.770283][ T6181] usb 9-1: unable to get BOS descriptor or descriptor too short [ 382.779499][ T6181] usb 9-1: config 8 has an invalid interface number: 24 but max is 0 [ 382.846009][ T6181] usb 9-1: config 8 has no interface number 0 [ 382.870071][ T6181] usb 9-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 382.890300][ T6181] usb 9-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 382.920020][ T9347] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 383.060496][ T6181] usb 9-1: config 8 interface 24 has no altsetting 0 [ 383.080127][ T9347] usb 8-1: Using ep0 maxpacket: 32 [ 383.093262][ T9347] usb 8-1: config 0 has an invalid interface number: 209 but max is 0 [ 383.101786][ T9347] usb 8-1: config 0 has no interface number 0 [ 383.112264][ T6181] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 383.132326][ T6181] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 383.141805][ T9347] usb 8-1: config 0 interface 209 has no altsetting 0 [ 383.162728][ T9347] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 383.174319][ T9347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.174504][ T6181] usb 9-1: Product: syz [ 383.197262][ T9347] usb 8-1: Product: syz [ 383.203020][ T9347] usb 8-1: Manufacturer: syz [ 383.217479][ T9347] usb 8-1: SerialNumber: syz [ 383.231556][ T9347] usb 8-1: config 0 descriptor?? [ 383.509151][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1208'. [ 383.770045][ T6181] usb 9-1: Manufacturer: syz [ 383.774726][ T6181] usb 9-1: SerialNumber: syz [ 383.803604][T11612] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 383.831213][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.033891][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.055594][ T6181] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 384.090274][ T6181] usb 9-1: USB disconnect, device number 20 [ 384.132812][T11619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.154492][T11623] veth2: entered promiscuous mode [ 384.180081][T11623] veth2: entered allmulticast mode [ 384.262270][T11618] lo speed is unknown, defaulting to 1000 [ 384.310704][ T6658] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 384.440856][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 384.440876][ T30] audit: type=1400 audit(1765873753.488:974): avc: denied { connect } for pid=11628 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 384.467319][ T6658] usb 4-1: device descriptor read/64, error -71 [ 384.516369][ T6181] IPVS: starting estimator thread 0... [ 384.592539][ T9347] usb 8-1: USB disconnect, device number 28 [ 384.610123][T11631] IPVS: using max 43 ests per chain, 103200 per kthread [ 384.730850][ T6658] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 384.930232][ T6658] usb 4-1: device descriptor read/64, error -71 [ 384.978584][ T30] audit: type=1400 audit(1765873754.028:975): avc: denied { ioctl } for pid=11636 comm="syz.8.1213" path="socket:[41252]" dev="sockfs" ino=41252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.084795][ T6658] usb usb4-port1: attempt power cycle [ 385.430142][ T6658] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 385.549903][ T6658] usb 4-1: device descriptor read/8, error -71 [ 385.632131][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1214'. [ 385.843835][ T6658] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 385.971956][ T6658] usb 4-1: device descriptor read/8, error -71 [ 386.237539][ T6658] usb usb4-port1: unable to enumerate USB device [ 386.303949][T11654] Mount JFS Failure: -22 [ 386.308390][T11654] jfs_mount failed w/return code = -22 [ 386.482104][ T30] audit: type=1400 audit(1765873755.538:976): avc: denied { ioctl } for pid=11655 comm="syz.7.1216" path="socket:[41348]" dev="sockfs" ino=41348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 386.694246][T11665] netlink: 'syz.5.1217': attribute type 1 has an invalid length. [ 386.781174][T11665] bond0: entered promiscuous mode [ 386.793033][T11665] bond0: entered allmulticast mode [ 386.813751][ T30] audit: type=1400 audit(1765873755.868:977): avc: denied { mounton } for pid=11662 comm="syz.5.1217" path="/proc/739/task" dev="proc" ino=40400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 386.867947][ T30] audit: type=1400 audit(1765873755.898:978): avc: denied { ioctl } for pid=11662 comm="syz.5.1217" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 386.868201][T11665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.016343][T11671] macvlan2: entered promiscuous mode [ 387.029233][T11671] macvlan2: entered allmulticast mode [ 388.716177][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1224'. [ 388.806753][ T30] audit: type=1400 audit(1765873757.848:979): avc: denied { create } for pid=11679 comm="syz.1.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 388.950234][ T30] audit: type=1400 audit(1765873757.988:980): avc: denied { ioctl } for pid=11679 comm="syz.1.1222" path="socket:[40456]" dev="sockfs" ino=40456 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.217834][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1223'. [ 389.762797][T11701] netlink: 'syz.5.1227': attribute type 23 has an invalid length. [ 389.825427][ T30] audit: type=1400 audit(1765873758.878:981): avc: denied { read } for pid=11702 comm="syz.3.1228" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 389.854269][ T30] audit: type=1400 audit(1765873758.908:982): avc: denied { open } for pid=11702 comm="syz.3.1228" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 389.891565][ T30] audit: type=1400 audit(1765873758.938:983): avc: denied { ioctl } for pid=11702 comm="syz.3.1228" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 389.917248][ T30] audit: type=1400 audit(1765873758.938:984): avc: denied { write } for pid=11702 comm="syz.3.1228" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 390.958835][ T30] audit: type=1400 audit(1765873759.988:985): avc: denied { map } for pid=11712 comm="syz.8.1231" path="/dev/v4l-subdev6" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.080472][ T30] audit: type=1400 audit(1765873759.988:986): avc: denied { execute } for pid=11712 comm="syz.8.1231" path="/dev/v4l-subdev6" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.226834][ T30] audit: type=1400 audit(1765873760.278:987): avc: denied { bind } for pid=11738 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.250094][T11717] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1230'. [ 391.410808][ T30] audit: type=1400 audit(1765873760.448:988): avc: denied { create } for pid=11750 comm="syz.8.1240" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 391.532674][ T30] audit: type=1400 audit(1765873760.498:989): avc: denied { mounton } for pid=11750 comm="syz.8.1240" path="/87/file0" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 392.060168][ T30] audit: type=1400 audit(1765873760.838:990): avc: denied { read append } for pid=11756 comm="syz.7.1241" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 395.339999][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.347232][ C0] bridge0: topology change detected, propagating [ 496.959909][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 496.966871][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P790/1:b..l [ 496.975184][ C1] rcu: (detected by 1, t=10502 jiffies, g=44669, q=419 ncpus=2) [ 496.982890][ C1] task:kworker/0:2 state:R running task stack:21208 pid:790 tgid:790 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 496.997422][ C1] Workqueue: events team_mcast_rejoin_work [ 497.003249][ C1] Call Trace: [ 497.006518][ C1] [ 497.009442][ C1] ? __schedule+0x10b9/0x6150 [ 497.014113][ C1] __schedule+0x1139/0x6150 [ 497.018609][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.024774][ C1] ? __pfx___schedule+0x10/0x10 [ 497.029617][ C1] ? mark_held_locks+0x49/0x80 [ 497.034381][ C1] preempt_schedule_irq+0x51/0x90 [ 497.039397][ C1] irqentry_exit+0x1d8/0x8c0 [ 497.043986][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.049954][ C1] RIP: 0010:lock_is_held_type+0x107/0x150 [ 497.055665][ C1] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c f0 3a 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb [ 497.075266][ C1] RSP: 0000:ffffc90003a37748 EFLAGS: 00000286 [ 497.081328][ C1] RAX: 0000000000000046 RBX: ffff888025f2d500 RCX: 0000000000000001 [ 497.089286][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7ab3 RDI: ffffffff8bf2b300 [ 497.097247][ C1] RBP: ffffffff901419a8 R08: 0000000000000005 R09: 0000000000000000 [ 497.105204][ C1] R10: 0000000000000001 R11: ffff888025f2d4b0 R12: ffff888025f2c980 [ 497.113160][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000002 [ 497.121138][ C1] lockdep_rtnl_is_held+0x1b/0x40 [ 497.126159][ C1] inet_fill_link_af+0x13d/0x220 [ 497.131091][ C1] rtnl_fill_ifinfo.constprop.0+0x3253/0x4d80 [ 497.137159][ C1] ? __pfx_rtnl_fill_ifinfo.constprop.0+0x10/0x10 [ 497.143562][ C1] ? rcu_is_watching+0x12/0xc0 [ 497.148318][ C1] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 497.154901][ C1] ? __alloc_skb+0x186/0x410 [ 497.159484][ C1] ? rcu_watching_snap_stopped_since+0xb1/0x110 [ 497.165720][ C1] ? __build_skb_around+0x278/0x390 [ 497.170913][ C1] ? __alloc_skb+0x35d/0x410 [ 497.175501][ C1] ? rtnl_prop_list_size+0x295/0x2d0 [ 497.180779][ C1] rtmsg_ifinfo_build_skb+0x151/0x280 [ 497.186152][ C1] rtnetlink_event+0xf3/0x1f0 [ 497.190822][ C1] notifier_call_chain+0xbc/0x3e0 [ 497.195835][ C1] ? __pfx_rtnetlink_event+0x10/0x10 [ 497.201114][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 497.207005][ C1] call_netdevice_notifiers+0x7c/0xb0 [ 497.212370][ C1] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 497.218433][ C1] team_mcast_rejoin_work+0xf8/0x230 [ 497.223716][ C1] process_one_work+0x9ba/0x1b20 [ 497.228654][ C1] ? __pfx_team_mcast_rejoin_work+0x10/0x10 [ 497.234543][ C1] ? __pfx_process_one_work+0x10/0x10 [ 497.239915][ C1] ? assign_work+0x1a0/0x250 [ 497.244503][ C1] worker_thread+0x6c8/0xf10 [ 497.249099][ C1] ? __pfx_worker_thread+0x10/0x10 [ 497.254206][ C1] kthread+0x3c5/0x780 [ 497.258269][ C1] ? __pfx_kthread+0x10/0x10 [ 497.262852][ C1] ? rcu_is_watching+0x12/0xc0 [ 497.267605][ C1] ? __pfx_kthread+0x10/0x10 [ 497.272191][ C1] ret_from_fork+0x983/0xb10 [ 497.276776][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 497.281881][ C1] ? __switch_to+0x7af/0x10d0 [ 497.286555][ C1] ? __pfx_kthread+0x10/0x10 [ 497.291138][ C1] ret_from_fork_asm+0x1a/0x30 [ 497.295912][ C1] [ 497.298919][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g44669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 497.310096][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 497.320048][ C1] rcu: RCU grace-period kthread stack dump: [ 497.325915][ C1] task:rcu_preempt state:R running task stack:27936 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 497.339390][ C1] Call Trace: [ 497.342656][ C1] [ 497.345580][ C1] ? __schedule+0x10b9/0x6150 [ 497.350256][ C1] __schedule+0x1139/0x6150 [ 497.354766][ C1] ? __pfx___schedule+0x10/0x10 [ 497.359604][ C1] ? find_held_lock+0x2b/0x80 [ 497.364283][ C1] ? schedule+0x2d7/0x3a0 [ 497.368605][ C1] schedule+0xe7/0x3a0 [ 497.372673][ C1] schedule_timeout+0x123/0x290 [ 497.377516][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 497.382877][ C1] ? __pfx_process_timeout+0x10/0x10 [ 497.388157][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 497.393953][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 497.399406][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 497.404164][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 497.409441][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 497.414639][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 497.419588][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 497.424444][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 497.430257][ C1] rcu_gp_kthread+0x26d/0x380 [ 497.434935][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 497.440129][ C1] ? rcu_is_watching+0x12/0xc0 [ 497.444884][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 497.450076][ C1] ? __kthread_parkme+0x19e/0x250 [ 497.455092][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 497.460282][ C1] kthread+0x3c5/0x780 [ 497.464346][ C1] ? __pfx_kthread+0x10/0x10 [ 497.468930][ C1] ? rcu_is_watching+0x12/0xc0 [ 497.473687][ C1] ? __pfx_kthread+0x10/0x10 [ 497.478269][ C1] ret_from_fork+0x983/0xb10 [ 497.482854][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 497.487959][ C1] ? __switch_to+0x7af/0x10d0 [ 497.492629][ C1] ? __pfx_kthread+0x10/0x10 [ 497.497214][ C1] ret_from_fork_asm+0x1a/0x30 [ 497.501987][ C1] [ 497.504992][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 497.511303][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.521792][ C1] Tainted: [L]=SOFTLOCKUP [ 497.526098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.536139][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 497.541764][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 497.561362][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 497.567418][ C1] RAX: 00000000020a8037 RBX: 0000000000000001 RCX: ffffffff8b7806d9 [ 497.575378][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdb2d RDI: ffffffff8bf2b300 [ 497.583334][ C1] RBP: ffffed1003b59498 R08: 0000000000000001 R09: ffffed10170a673d [ 497.591295][ C1] R10: ffff8880b85339eb R11: ffff88801dacaff0 R12: 0000000000000001 [ 497.599254][ C1] R13: ffff88801daca4c0 R14: ffffffff9088aed0 R15: 0000000000000000 [ 497.607217][ C1] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 497.616157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.622753][ C1] CR2: 00007fa8a90bdf98 CR3: 0000000077ec9000 CR4: 00000000003526f0 [ 497.630728][ C1] Call Trace: [ 497.634000][ C1] [ 497.636923][ C1] default_idle+0x13/0x20 [ 497.641256][ C1] default_idle_call+0x6c/0xb0 [ 497.646017][ C1] do_idle+0x38d/0x510 [ 497.650087][ C1] ? __pfx_do_idle+0x10/0x10 [ 497.654681][ C1] cpu_startup_entry+0x4f/0x60 [ 497.659449][ C1] start_secondary+0x21d/0x2d0 [ 497.664217][ C1] ? __pfx_start_secondary+0x10/0x10 [ 497.669513][ C1] common_startup_64+0x13e/0x148 [ 497.674468][ C1]