last executing test programs: 26m14.130396595s ago: executing program 2 (id=102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x40, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newchain={0x2c, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xc, 0x6}, {0x9, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c00028038000380", @ANYRESDEC], 0x68}}, 0xa040) 26m13.81849306s ago: executing program 2 (id=105): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x1}, 0xfffffffffffffdd8) write(r0, &(0x7f0000000080)="29000300010003", 0x7) 26m13.563757013s ago: executing program 2 (id=107): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0) creat(0x0, 0xecf86c37d530496c) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) socket(0x1a020257981a00ca, 0x0, 0x401) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r3, 0x0, 0x0) syz_io_uring_complete(r2, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 26m12.979643877s ago: executing program 2 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@var, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x8e}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) 26m11.469907208s ago: executing program 2 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0x20d4ea, 0x10000, 0x0, 0x3}) io_uring_enter(r2, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[], 0x86) dup3(0xffffffffffffffff, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) r5 = fsmount(0xffffffffffffffff, 0x0, 0x87) fchdir(r5) 26m10.646706219s ago: executing program 2 (id=116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="e904000005000008001b00000000000500100005000000080028002945000000"], 0x38}, 0x1, 0xffffa888}, 0x20000884) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(0xffffffffffffffff, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'caif0\x00', {}, 0xd164}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="000002000a0002008f4c1e94dcc000000600050002000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0x86f0, 0x0, 0x4, 0xfffffffb}) epoll_create1(0x80000) 26m10.406422243s ago: executing program 32 (id=116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="e904000005000008001b00000000000500100005000000080028002945000000"], 0x38}, 0x1, 0xffffa888}, 0x20000884) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(0xffffffffffffffff, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'caif0\x00', {}, 0xd164}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="000002000a0002008f4c1e94dcc000000600050002000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0x86f0, 0x0, 0x4, 0xfffffffb}) epoll_create1(0x80000) 25m23.861052478s ago: executing program 1 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x18}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000000800054000000001080003400000000008000240000000040900010073797a3000da00000900020073797a32"], 0x8c}}, 0x4000) connect$inet(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) 25m22.031986102s ago: executing program 1 (id=253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], &(0x7f0000000340)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 25m20.562550827s ago: executing program 1 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 25m20.342429611s ago: executing program 1 (id=258): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002) 25m19.882672823s ago: executing program 1 (id=259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newchain={0x2c, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xc, 0x6}, {0x9, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25m19.535235328s ago: executing program 1 (id=260): r0 = openat$kvm(0x0, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2dfd, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x4}) 25m19.114267481s ago: executing program 33 (id=260): r0 = openat$kvm(0x0, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2dfd, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x4}) 25m10.961784454s ago: executing program 3 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0x20d4ea, 0x10000, 0x0, 0x3}) io_uring_enter(r2, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) execve(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) r6 = fsmount(0xffffffffffffffff, 0x0, 0x87) fchdir(r6) 25m10.124465043s ago: executing program 3 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESOCT=r2, @ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380), &(0x7f00000001c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000004d6fd68d5547252cfd8e01d5e60500000a140000000c0a010100000000000000000a00000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2ffd, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, 0x0, 0xfffffffffffffffd) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$sg(0x0, 0x8000, 0x38182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x270000, &(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000240), {0x31}, &(0x7f00000002c0)=""/205, 0xcd, &(0x7f00000003c0)=""/15, &(0x7f0000000400)=[r8, r8, r8, r8, r8, r8], 0x6, {r6}}, 0x58) getpgrp(r9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0xf5c5d000) 25m9.175718877s ago: executing program 3 (id=282): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000180), 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) 25m8.759280428s ago: executing program 3 (id=285): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) 25m8.468538803s ago: executing program 3 (id=286): socket$alg(0x26, 0x5, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) madvise(&(0x7f0000f99000/0x3000)=nil, 0x3000, 0xd) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100008, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @mcast1, 0x8}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip_tables_matches\x00') pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/164, 0xa4}], 0x1) 25m6.846462691s ago: executing program 3 (id=292): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) r0 = socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000014}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$msr(r1, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32], 0x18c0}}, 0x0) 25m6.160859556s ago: executing program 34 (id=292): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) r0 = socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000014}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$msr(r1, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32], 0x18c0}}, 0x0) 1m45.275787687s ago: executing program 0 (id=5367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) geteuid() epoll_create(0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @broadcast, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r3, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40) 1m43.931869735s ago: executing program 0 (id=5369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000070f06010100000000000000000116000206000b0000000000050001"], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) 1m43.801889435s ago: executing program 0 (id=5370): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='stat\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pread64(r2, &(0x7f0000000500)=""/240, 0xf0, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, &(0x7f0000000800)=[{&(0x7f0000000600)=""/42, 0x2a}], 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@nodevmap}, {@mmap}, {@cache_mmap}, {@access_uid={'access', 0x3d, r5}}, {@cache_loose}], [{@fsname={'fsname', 0x3d, 'mounts\x00'}}, {@obj_user={'obj_user', 0x3d, '$:-@([(:'}}, {@uid_gt={'uid>', 0xee00}}, {@measure}]}}) socket$inet_udp(0x2, 0x2, 0x0) getrlimit(0xc, &(0x7f0000000000)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/652], 0x310) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m43.311497375s ago: executing program 0 (id=5371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1533d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(0xffffffffffffffff) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) syz_emit_ethernet(0x36, &(0x7f0000000140)={@remote, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m42.046493393s ago: executing program 0 (id=5376): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001114010026bd7000fddbdf25080003000400000010004a0002000000080001000100000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000b00)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x401, 0x3f) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@local, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x2, 0x0, 0x0, 0x3e}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x4004040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_control_io(r2, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x3, 0x9c, {0x9c, 0x10, "93b351d412b73bc8288384b9a29f4f7c0041942180f30ece934c1bad0a4ea0956f399ba0cb5781c350b2cbc18c7f55e0002ca2050cf11c7a62747a055e550e08bbbb16d6f7dd2e2e0cf44ccebafc693ae81eaa67012969bbb89b9a731de45943b28dc2162eefe48f573af2efb44ca3939717a8fb1af2505f88981c71a4a5b853edad89477f6fd14dda71af1c46426b9aaf5194a11805478e0874"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000700)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x2, 0xf000, 0x444, [0xff00, 0x1e]}, @ss_container_id={0x14, 0x10, 0x4, 0x70, "5f8e2e3d5a5930387c00a9a09cc11a8e"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x18, 0x80, 0xd, "68927556", "f5969c83"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x42, 0x80, 0x0, 0x3, 0x3, 0x6, 0x8000}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000840)={0x40, 0x10, 0xc2, "a8ce2a4663c79a6fc43440ee4ff111dfff1bfe1a31243bb0f7947b83b3bd7636c209d475dc98d3be56f10c73abd3d0d5ba0319476d96add99d0e2a196c56cd1484c126c4a83b88602c03ff7ec3c30487d228b9aea6ec61c135d1c8e485ed2f24b9cb37ecbb131bcfcc89ab7d298163e86404cb33d2711e88a71c4c2d0528ba11cdf4a24083e982bea5daf656ef710b28a737e3a5017b032aab682b1fb3968b1a102e2d0398c21264519296518275cb533580bef1ee17f8716ec30c9e8ce07b22922a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x0, 0x1, [0x0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "7f15"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xafd}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, '6|'}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x8}}) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) 1m39.350780818s ago: executing program 0 (id=5385): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) (async) fsmount(0xffffffffffffffff, 0x0, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00v\xf2\xf8*\x8e\x02\x9e\xb7N-\bx\xbf~mM\xe9$;\\N\xb7\xd9\x89\x00\x00\x00\x00', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) (async) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0xa002, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000400)) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x54b256aa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) (async) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x54b256aa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000000190300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbc34f01a24001280110001006272696467655f736c617665000000000c0005800500070001000000141a030062723f7a67655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x200001c1}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) 1m23.982065092s ago: executing program 35 (id=5385): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) (async) fsmount(0xffffffffffffffff, 0x0, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00v\xf2\xf8*\x8e\x02\x9e\xb7N-\bx\xbf~mM\xe9$;\\N\xb7\xd9\x89\x00\x00\x00\x00', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) (async) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0xa002, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000400)) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x54b256aa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) (async) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x54b256aa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000000190300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbc34f01a24001280110001006272696467655f736c617665000000000c0005800500070001000000141a030062723f7a67655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x200001c1}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) 11.619266732s ago: executing program 5 (id=5690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x482) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) 9.374128851s ago: executing program 5 (id=5694): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x8000, 0x0, 0x2}, 0x18) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a40102030109021b000142d8000a0904"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) capset(0x0, 0x0) 8.617743635s ago: executing program 7 (id=5699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x482) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) write$UHID_INPUT(r6, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) 8.533388599s ago: executing program 4 (id=5700): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffff0700000000000000000000114242030001"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="5e000006000000000000000000000000f7ff0000"]) 8.303414544s ago: executing program 4 (id=5701): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.631023914s ago: executing program 4 (id=5703): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x8}, 0x6, 0x4, 0x101, 0x751268ea, 0x0, 0x0, 0x101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x2, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0xffffffffffffffce}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xa, 0xd9], "de0a65bdb241041a65c783326c2b715c2cd3f93cac128d7a37d49b821b0cc62ab63c563b5c771f2efa7d09b35e7be479fc4b5e2be4396fd0ceac51749b33a8ae5feb8d7ab918af9639034e8d9929be55b0896732b8c4b53a988a6ef1e44d3f975b12e8cebd5dca6bcff13c9ff38149a8b52fc307fe3dccf6a12c4f70ed9a003d8a7de94f6a1ea96a3fc836dea8760f13c504342fec97ce7617c7824be2e174c1eef08457373be6c1b4e03fac7d60102fb8523509fdd2acdc52fbed228cd313b62a0e715633977bbab23a7c5b895e26f634302d88536e200873f6aed913cd4d78a3b8"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b9b3b037b87e"}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}}}}}}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201100100000040ef174760400000020301090224000101ff50090904000d020301020009210100050122b10f09058103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900"], 0xfce) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x7, 0xc, 0x28f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000340)=0xe8) setuid(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000000140)={&(0x7f0000000080)='.&\x00', &(0x7f0000000100)='\x00', 0x5}) 7.489743932s ago: executing program 5 (id=5704): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000300)={r3, r4}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x4, 0x8, 0x901, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x14}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x895}, 0xfc3a046906c6aebb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c152082e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.565063168s ago: executing program 5 (id=5706): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x80000000000009, 0x14d080) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'caif0\x00', 0x8}, 0xffffffffffffff3b) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x2000000000000003}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 5.795302677s ago: executing program 6 (id=5709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x5, 0x800, 0x3a) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000100000008000300", @ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 5.257541669s ago: executing program 7 (id=5710): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000340)=[{0x6, 0xc010, 0x0, 0x0}], 0x1}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088ee20104f100400c3c60102030109022b0001000000000904000002b6b33c000905000000000000000705940a"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "96b24e2389907a94"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x700, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048000}, 0x2000801) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000280)=0x7fff, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) io_pgetevents(0x0, 0x5, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 4.709949723s ago: executing program 6 (id=5711): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x38}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) sendmsg$kcm(r3, &(0x7f0000000ac0)={&(0x7f0000000440)=@qipcrtr={0x2a, 0xffffffff, 0x706ef3c420239d97}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="8eefb7d181a28bbf661389842c0e0b269aed5e8baa8e86664212004c3b66354e1239349b4f0fbb1bb947b910dcb1681ae6d97f4ff0a340b3204cf7713a2398b980148b9fdf242bdaff80d035e48b11de5329054d6061e845c6006efa7597114e7c53ce5fc46680be767b616e4d018a9ae2cc7b60f2e9305102286fa80a1146350fad2fa2173b280366a2f8d16e039d268983e4a26bd5404c88c54e14538c4a4c76d0554eb73346a1f94c39ca8292f678", 0xb0}], 0x1, &(0x7f0000000640)=[{0x48, 0x103, 0x1, "2765827ebd490996c412fecc1a3d9bc8810ff99ea661dce5602cfb850bfe27b134050c074123216e6dcfb8465e3fdb29fadf"}, {0xa8, 0x3a, 0x6, "88b65c7e93d14045fadd99f90eb1e3f16607d0605ab82763057f1a9333d73072e9143df095cc151d0347d8d084cfe44715be8574ae1df76608de93813e86e6f97698593553171473e735ce01965788ebcbd766e75adffddc724db752d526ee57cc1740f77b59124776233d75819fdc63fd0e851f0ac8c9b646e61639297d47e27028d3b93cc53513d66a5efb6667467ef9fda1ff1da804"}, {0xb0, 0x110, 0x0, "3d37b5b92820b9c35196899cc7f9aa7741ccbaabe6801f89f54b2589a37623a3848373aef2f9b7ede0fa3e938038a7385353dd26a5099c44c6c2ad6620d257cbeae864550411e8593b2ff38cd64700bad9b9688e311aba1e8599aad893494e0535232de2bd9089bb187829c1cc9e024a41f5c161f81c7a658aa67e1220a622e54fdbf693eb2348c2b06221e8c056e9e0326bcad13bfa41f0254bdf68"}, {0x10, 0x108, 0x1000}, {0x90, 0x102, 0x3, "ec8512a0808616dbe6c5b1bb1d4a6e88f5d612b07f7efe0c1e655eaa1b66d83edbe5dae5bcd5fc89808781eb18c9335c98593f6418c50102d081e38d2393d843b993bc1426b6161e7e485dd980a292b62113a847e3db1e768660a9054e7dae1c8adfbe75811bab975d8a0bc16e418890480e7945458509b3c2a1eb11c4242e1f"}, {0x98, 0x1e, 0x6, "638b554721d76cc929505ef2405b691172e73aa77dbe9a88b8b9daeb9b8c05263039e380d1ee652692f6125dcbe1fbad7191f32c60a1d305ef15c2b6d12ab0c4737faa02b33e788873984fbb6fa3f5497a9df5c709a9eeabe82ce7e8071de63f720bf45d68afbfdd913da8474d8b0e3ce36a8aedd5adf96f1a8c59a8b781434414bec5589b5e1f0f"}, {0x88, 0x3a, 0x49, "b6ff999240f596d1932fa4c9d4a8faf7e904aecd0d4f6bc901d64fa70bb550a56df75983415767dc03bced0e97d1a730fb5b8417b4d6d049a458087a11011185ba3193704bac4f01d165bda698e3f106eca4582018fc676ebf7cc7a89a11d7308c2b9c43dd3fe8cd81edf8e75c2b753d2855ff1a9964"}, {0x20, 0x10c, 0x9, "3abd5e4ca2f9b94f8f7e921e"}, {0x90, 0x29, 0x2, "b28562dc58bfd116ba0209c7398bb0356d350150646f5c638aab19419c11986f4d69ee247e8dea19894747790125ee946ba787598c599f7fafdd2045d9e137be74e7a3e1d74ecda425af7cee486ab62486f64d82af3b1fa0fb14a9ed252230e62b5bf2f87605a50ddb3fbd25059e21093eca8971011062ced147386661ba7a"}, {0x60, 0x108, 0xf210, "8d367973fdf874705e68ffdc6e4b5aae875b528532c3c93cda93aa7128b612366adc6691ee9312e1fd5124b19003b83eb2d6aa576a67aaa4998b72c8addbe82dd8a89ae87f37f3d95f02da76f0f58d"}], 0x470}, 0x4000) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'vlan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x400002, @loopback, 0xfffffffd}}, 0x0, 0x8, 0x300, 0x0, 0x54, 0x4}, 0x9c) r7 = geteuid() r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x400000001, {0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x5, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r9, r10, 0x501, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r7, r10) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0x401) 4.583675511s ago: executing program 5 (id=5713): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) close_range(r8, 0xffffffffffffffff, 0x0) 4.499169943s ago: executing program 6 (id=5714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x2b, 0x1, 0x1) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f00000003c0)={{0x7, 0x1, 0x200, 0x5}, [{0x2, 0x3, 0x4, 0x3}, {0x4, 0x1, 0x6}, {0x56b2, 0x1, 0x8, 0x5}, {0x1, 0x7, 0x5a}, {0xf, 0x8001, 0x55}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={r6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000901, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.432157544s ago: executing program 6 (id=5715): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) gettid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.359412798s ago: executing program 4 (id=5716): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) gettid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.636315114s ago: executing program 6 (id=5717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000", 0x37}, {&(0x7f0000000140)="e8c0a85cd3351f43a118767a631e20d8616bd56dbfbd924835d93da09483316120e9293466", 0x25}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.473214528s ago: executing program 7 (id=5718): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unshare(0x6200001e) 3.318866408s ago: executing program 4 (id=5719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x149900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x20000850) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.783176708s ago: executing program 8 (id=5720): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffd0e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknod$loop(0x0, 0xfff, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0xc0ae, 'syz0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x37}, [@IFA_RT_PRIORITY={0x8, 0xa, 0x80}]}, 0x20}, 0x1, 0x0, 0x0, 0x6bddc2c2db483bf4}, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000500)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x3, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x8, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x20000005, 0x6, 0x8, 0x10000, 0xfffffff4]}) 2.106790474s ago: executing program 7 (id=5721): r0 = openat$comedi(0xffffff9c, &(0x7f0000001200)='/dev/comedi4\x00', 0x20840, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=@newtclass={0x46c, 0x28, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1001f, 0x10}, {0x9, 0xf}, {0xa}}, [@c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xff, 0x8, 0xc, 0x9, 0x6, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7f, 0x2, 0x10, 0x0, 0x3, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x2, 0x17, 0x6, 0x8, 0xfffffd13, 0xffffffff, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x456, 0x8, 0x9, 0x9, 0x4, 0x52d034b2, 0x3e6, 0x8, 0x1000, 0x4a4, 0x2, 0xffff0000, 0x2, 0x2e, 0x3, 0x9, 0xee6, 0x400, 0x8, 0x7, 0x447, 0x8, 0x3, 0x100, 0x0, 0x6, 0x7, 0x4, 0xa59, 0x7fff, 0xffff, 0x8, 0x2, 0xf, 0x6, 0x2, 0xae6, 0x92, 0x7fff, 0x0, 0x0, 0x69, 0x80000000, 0x7314, 0x5, 0x86, 0x400, 0x1, 0x0, 0x2, 0x8, 0x400, 0xf7b9, 0x5, 0x401, 0xffff, 0xfffffffa, 0x2, 0x6, 0x4, 0x7f, 0x81, 0x8, 0x0, 0x8, 0xe294, 0x8, 0x74, 0x8, 0x7, 0x2, 0xffffffff, 0x6, 0xfffffffb, 0x613c, 0x1, 0x7, 0x0, 0x3, 0x4, 0x6, 0x21b, 0x2, 0x7, 0x1, 0x7317, 0x7fff, 0x4, 0x2, 0xb2000, 0x40, 0x5b, 0x7f, 0xd, 0x3, 0x7f, 0x3, 0x5, 0xd1fe, 0x93d, 0x1, 0xf1, 0x3, 0x2, 0xb, 0xfffffffa, 0x7fffffff, 0x4, 0x4699, 0x2, 0xa4, 0x0, 0x4, 0x3, 0xa, 0x5, 0x9, 0x1, 0x89, 0x55f4, 0x6, 0x6, 0x1, 0x6, 0x2, 0x1f54, 0x3, 0x691ee0e5, 0x4, 0x1, 0x9, 0xffff, 0x7, 0x5, 0xb, 0x4, 0x101, 0x8, 0x1000, 0xfffffffc, 0x1315, 0xada, 0xfffff3c5, 0x8e, 0x3, 0x1, 0x9, 0xb66, 0xfff, 0x4, 0xcc, 0x629, 0x3, 0x9, 0x42b, 0x7fff, 0xc0f, 0x2, 0x6, 0x37a, 0x9, 0x4, 0x12000, 0xffffffff, 0x1ff, 0x5, 0x0, 0x7fff, 0x6, 0xc, 0xfffffffa, 0x8000000, 0x1, 0xfffffffd, 0x2, 0x3, 0xd, 0x4, 0x5586, 0x7, 0x4, 0x0, 0x0, 0x9, 0x7fffffff, 0xe8, 0x9c1, 0x80000001, 0xff800000, 0xdd81, 0xffff977f, 0x3bc, 0xec0, 0x4, 0x7fff, 0x80000001, 0x1, 0x5, 0x0, 0x3, 0x8, 0x2, 0xa, 0x4, 0x3, 0x4, 0x5, 0x8, 0x8, 0x45, 0x5, 0x8, 0x3, 0x7, 0xfd, 0x0, 0x5, 0x8, 0x3, 0x401, 0x8, 0x3ff, 0x9, 0x3, 0x3, 0x6, 0xccd1, 0x2, 0x3, 0xfffff19d, 0x5, 0x3, 0x20000000, 0x4, 0x7, 0x7f, 0x2, 0x0, 0x4, 0x0, 0x800, 0x81, 0x5, 0x0, 0x2, 0x2, 0x5, 0x7fff, 0x8001, 0xffff6ba3, 0xfffffb4b, 0xfff, 0x7f, 0x81, 0x7, 0x4]}]}}]}, 0x46c}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001240)={'dt2814\x00', [0x0, 0x4, 0x2, 0x10001, 0x2, 0x0, 0x2, 0xfffffff0, 0x34, 0x9, 0x400, 0x4, 0x10, 0x7f, 0x7, 0x5, 0x1, 0x7210, 0x4, 0x3ff, 0x36, 0xfffffffe, 0x7fffffff, 0x10000, 0x60, 0x5, 0x8, 0x3, 0x5, 0x8, 0x1000]}) 1.890293252s ago: executing program 8 (id=5722): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r0, 0x28, 0x3c, 0x0, 0x0) 1.692972426s ago: executing program 6 (id=5723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x40f, &(0x7f0000000000)={0x1}) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) socket$inet(0x2, 0x2, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x0, 0x9}) 1.678527986s ago: executing program 8 (id=5724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES64], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x8000) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026c07000fcdbdf251c6d47000e0001007d657464657673696d0000000f0001f56e657464657673696d30000003000b00f7000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x3, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r8, 0x0, 0x26, &(0x7f0000002ac0)=""/4096, &(0x7f00000000c0)=0x1000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r9) 1.626609523s ago: executing program 5 (id=5725): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unshare(0x62000000) syz_emit_ethernet(0x3e, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc00, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() listen(0xffffffffffffffff, 0x100) r3 = dup(0xffffffffffffffff) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x48040) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.616387903s ago: executing program 4 (id=5726): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001114010026bd7000fddbdf25080003000400000010004a0002000000080001000100000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000b00)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x401, 0x3f) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@local, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x2, 0x0, 0x0, 0x3e}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x4004040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_control_io(r2, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x3, 0x9c, {0x9c, 0x10, "93b351d412b73bc8288384b9a29f4f7c0041942180f30ece934c1bad0a4ea0956f399ba0cb5781c350b2cbc18c7f55e0002ca2050cf11c7a62747a055e550e08bbbb16d6f7dd2e2e0cf44ccebafc693ae81eaa67012969bbb89b9a731de45943b28dc2162eefe48f573af2efb44ca3939717a8fb1af2505f88981c71a4a5b853edad89477f6fd14dda71af1c46426b9aaf5194a11805478e0874"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000700)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x2, 0xf000, 0x444, [0xff00, 0x1e]}, @ss_container_id={0x14, 0x10, 0x4, 0x70, "5f8e2e3d5a5930387c00a9a09cc11a8e"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x18, 0x80, 0xd, "68927556", "f5969c83"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x42, 0x80, 0x0, 0x3, 0x3, 0x6, 0x8000}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000840)={0x40, 0x10, 0xc2, "a8ce2a4663c79a6fc43440ee4ff111dfff1bfe1a31243bb0f7947b83b3bd7636c209d475dc98d3be56f10c73abd3d0d5ba0319476d96add99d0e2a196c56cd1484c126c4a83b88602c03ff7ec3c30487d228b9aea6ec61c135d1c8e485ed2f24b9cb37ecbb131bcfcc89ab7d298163e86404cb33d2711e88a71c4c2d0528ba11cdf4a24083e982bea5daf656ef710b28a737e3a5017b032aab682b1fb3968b1a102e2d0398c21264519296518275cb533580bef1ee17f8716ec30c9e8ce07b22922a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x0, 0x1, [0x0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "7f15"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xafd}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, '6|'}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x8}}) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) 1.579994892s ago: executing program 7 (id=5727): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) gettid() r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 578.968692ms ago: executing program 7 (id=5728): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f00000023c0)}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setrlimit(0x2, &(0x7f0000000380)={0x7, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120101028e5ea810880c2100c5cc0102030109021b0001010110040904995d0109"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102400, 0x19000) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x40040a1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7ffffffe) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd25, 0xff, {0x39, 0x1, 0x2, r4, 0x9, 0x400, 0x200000, 0x9, 0x0, 0x1000, 0xf}, ["", "", "", "", ""]}, 0x3c}}, 0x20011042) mount(0x0, 0x0, 0x0, 0x2100000, 0x0) 451.852732ms ago: executing program 8 (id=5729): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x0, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f8002761a8544fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba1906007772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x403]}}) mmap(&(0x7f0000411000/0x3000)=nil, 0x3000, 0x8, 0x31, r0, 0x3f07b000) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r3 = syz_open_dev$media(&(0x7f0000000240), 0x1, 0x100) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ccb000/0x9000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00009e9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xffff}}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000016c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd700300dbdf250e000000180001801400020076657468305f746f5f626174616476000800028004000380"], 0x34}, 0x1, 0x0, 0x0, 0x400}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000100)={0x5, 0x0, [{0x80000007, 0x7ec106f1, 0x1, 0x7422, 0x7, 0xffff84f3, 0x2}, {0x6, 0x1, 0x4, 0x0, 0x3a, 0x7, 0x3b}, {0x2, 0x10, 0x4, 0x6, 0x6, 0x3, 0x8}, {0xc0000001, 0x69d1, 0x0, 0x3, 0x8, 0x2, 0x4}, {0x6, 0xa0, 0x0, 0x80000000, 0x2, 0x4, 0x4}]}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) open(0x0, 0x4c27e, 0x2) ioctl$TCXONC(r4, 0x540a, 0x1) mremap(&(0x7f0000d5c000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000091c000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 224.526422ms ago: executing program 8 (id=5730): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000000006, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r2, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x8202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x12, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 0s ago: executing program 8 (id=5731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x74, 0x0, &(0x7f0000000540)=[@increfs_done={0x40106308, 0x2}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) kernel console output (not intermixed with test programs): face number 0 [ 1548.544271][T18244] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 1548.553898][T18244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.562507][T18244] usb 6-1: Product: syz [ 1548.566825][T18244] usb 6-1: Manufacturer: syz [ 1548.575011][T18244] usb 6-1: SerialNumber: syz [ 1548.658562][ T10] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1548.793292][T26074] netlink: 'syz.5.5257': attribute type 1 has an invalid length. [ 1548.812480][T18244] appletouch 6-1:7.208: Could not find int-in endpoint [ 1548.831604][T18244] appletouch 6-1:7.208: probe with driver appletouch failed with error -5 [ 1548.842832][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1548.855656][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.867785][T18244] usbhid 6-1:7.208: couldn't find an input interrupt endpoint [ 1548.881012][T26089] netlink: 'syz.4.5263': attribute type 4 has an invalid length. [ 1548.903388][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.918495][T18244] usb 6-1: USB disconnect, device number 48 [ 1548.927083][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1548.947174][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1548.958401][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.996145][ T10] usb 8-1: config 0 descriptor?? [ 1549.497473][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0013/input/input50 [ 1549.511626][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1549.874865][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0013/input/input51 [ 1550.026065][T26110] netlink: 'syz.6.5271': attribute type 74 has an invalid length. [ 1550.053186][ T10] kye 0003:0458:5011.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 1550.108593][T26110] fuse: fd is not a fuse device [ 1550.252211][T26114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5272'. [ 1550.818848][ C0] kye 0003:0458:5011.0013: usb_submit_urb(ctrl) failed: -1 [ 1550.957772][T26126] netlink: 'syz.6.5276': attribute type 4 has an invalid length. [ 1551.743337][ T10] usb 8-1: USB disconnect, device number 49 [ 1552.645333][T26158] netlink: 'syz.5.5289': attribute type 4 has an invalid length. [ 1552.874214][T26171] netlink: 'syz.7.5293': attribute type 4 has an invalid length. [ 1552.889885][ T10] IPVS: starting estimator thread 0... [ 1552.895957][T26171] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1552.978329][T19386] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1552.988628][T26172] IPVS: using max 76 ests per chain, 182400 per kthread [ 1553.153734][T19386] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1553.174848][T19386] usb 1-1: config 0 has no interface number 0 [ 1553.190250][T19386] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1553.220603][T19386] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1553.240238][T19386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.261507][T19386] usb 1-1: Product: syz [ 1553.268336][T19386] usb 1-1: Manufacturer: syz [ 1553.276824][T19386] usb 1-1: SerialNumber: syz [ 1553.292830][T19386] usb 1-1: config 0 descriptor?? [ 1553.311391][T19386] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1553.321812][ T5938] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1553.521146][ T5938] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1553.540717][ T5938] usb 8-1: config 0 has no interface number 0 [ 1553.564234][ T5938] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1553.624178][ T5938] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1553.896299][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.983847][ T5938] usb 8-1: Product: syz [ 1553.988465][ T5938] usb 8-1: Manufacturer: syz [ 1553.993106][ T5938] usb 8-1: SerialNumber: syz [ 1554.013148][ T5938] usb 8-1: config 0 descriptor?? [ 1554.046356][ T5938] yurex 8-1:0.50: USB YUREX device now attached to Yurex #1 [ 1554.182412][T26181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'. [ 1554.576721][T26191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5294'. [ 1555.251023][ T29] audit: type=1804 audit(1776418511.680:1377): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.5298" name="/newroot/216/file0" dev="tmpfs" ino=1142 res=1 errno=0 [ 1555.715626][T26201] netlink: 'syz.5.5301': attribute type 4 has an invalid length. [ 1556.662694][T18244] usb 8-1: USB disconnect, device number 50 [ 1556.687154][ T5882] usb 1-1: USB disconnect, device number 25 [ 1556.706799][T18244] yurex 8-1:0.50: USB YUREX #1 now disconnected [ 1556.723056][ T5882] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1556.907668][T26220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 1556.939865][T26224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5307'. [ 1557.168153][T19386] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1557.198337][T18244] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1557.343370][T19386] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1557.365464][T19386] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.381049][T18244] usb 8-1: Using ep0 maxpacket: 32 [ 1557.393332][T19386] usb 6-1: config 0 has no interface number 0 [ 1557.409822][T19386] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1557.429895][T26231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5308'. [ 1557.453268][T19386] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1557.453662][T18244] usb 8-1: config 7 has an invalid interface number: 208 but max is 0 [ 1557.472892][T18244] usb 8-1: config 7 has no interface number 0 [ 1557.488305][T19386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.489069][T18244] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 1557.509415][T19386] usb 6-1: Product: syz [ 1557.521803][T19386] usb 6-1: Manufacturer: syz [ 1557.533905][T19386] usb 6-1: SerialNumber: syz [ 1557.545931][T18244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.573722][T19386] usb 6-1: config 0 descriptor?? [ 1557.591690][T18244] usb 8-1: Product: syz [ 1557.599252][T19386] yurex 6-1:0.50: Could not find endpoints [ 1557.674365][T18244] usb 8-1: Manufacturer: syz [ 1557.723278][T18244] usb 8-1: SerialNumber: syz [ 1557.985046][T26219] netlink: 'syz.7.5306': attribute type 1 has an invalid length. [ 1558.003614][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5305'. [ 1558.038621][T18244] appletouch 8-1:7.208: Could not find int-in endpoint [ 1558.051746][T18244] appletouch 8-1:7.208: probe with driver appletouch failed with error -5 [ 1558.082628][T18244] usbhid 8-1:7.208: couldn't find an input interrupt endpoint [ 1558.116302][T18244] usb 8-1: USB disconnect, device number 51 [ 1558.578804][ T29] audit: type=1400 audit(1776418515.010:1378): avc: denied { recv } for pid=26250 comm="syz.4.5315" saddr=10.128.0.169 src=45076 daddr=10.128.0.156 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1559.032561][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5316'. [ 1559.659929][ T29] audit: type=1400 audit(1776418516.090:1379): avc: denied { read write } for pid=26265 comm="syz.7.5320" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1559.686402][T26271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5320'. [ 1559.772298][ T29] audit: type=1400 audit(1776418516.110:1380): avc: denied { ioctl open } for pid=26265 comm="syz.7.5320" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1559.896722][ T5938] usb 6-1: USB disconnect, device number 49 [ 1560.368735][T18244] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1560.530353][T18244] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.573128][T18244] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1560.606536][T18244] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1560.632422][T18244] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1560.651458][T18244] usb 6-1: Product: syz [ 1560.666595][T18244] usb 6-1: Manufacturer: syz [ 1560.684658][T18244] usb 6-1: SerialNumber: syz [ 1560.705431][T18244] usb 6-1: config 0 descriptor?? [ 1561.180896][T26300] NILFS (nullb0): couldn't find nilfs on the device [ 1561.627980][ T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1561.635694][ T5938] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1561.808440][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 1561.812013][ T10] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1561.835438][ T10] usb 8-1: config 0 has no interface number 0 [ 1561.860191][ T10] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1561.862534][ T5938] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1561.933527][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.982087][ T5938] usb 1-1: config 0 descriptor?? [ 1561.997852][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1562.035783][ T5938] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1562.055980][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.094685][ T10] usb 8-1: Product: syz [ 1562.114689][ T10] usb 8-1: Manufacturer: syz [ 1562.140107][ T10] usb 8-1: SerialNumber: syz [ 1562.172581][ T10] usb 8-1: config 0 descriptor?? [ 1562.219292][ T10] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1562.598728][ T5938] gspca_vc032x: reg_r err -110 [ 1562.604428][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.624022][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.658791][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.768932][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.774282][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.780042][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.786456][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.792964][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.798795][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.806043][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.811549][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.817542][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.823471][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.830268][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.840659][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.864060][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.876516][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.894131][ T5938] gspca_vc032x: I2c Bus Busy Wait 00 [ 1562.917478][ T5938] gspca_vc032x: Unknown sensor... [ 1562.958271][ T5938] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1563.090016][T18244] usb 6-1: USB disconnect, device number 50 [ 1563.202531][T26315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5330'. [ 1563.870574][T19386] usb 1-1: USB disconnect, device number 26 [ 1564.083145][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5337'. [ 1565.058940][T26348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1565.102364][ T10] usb 8-1: USB disconnect, device number 52 [ 1565.467762][ T10] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1567.258721][T19912] block nbd0: Possible stuck request ffff8880284c7000: control (read@0,1024B). Runtime 240 seconds [ 1567.269846][T19912] block nbd0: Possible stuck request ffff8880284c71c0: control (read@1024,1024B). Runtime 240 seconds [ 1567.280843][T19912] block nbd0: Possible stuck request ffff8880284c7380: control (read@2048,1024B). Runtime 240 seconds [ 1567.292409][T19912] block nbd0: Possible stuck request ffff8880284c7540: control (read@3072,1024B). Runtime 240 seconds [ 1567.633679][T26385] netlink: 'syz.5.5353': attribute type 74 has an invalid length. [ 1567.897989][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1568.078035][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1568.091371][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1568.117110][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.131688][ T10] usb 6-1: Product: syz [ 1568.138985][ T10] usb 6-1: Manufacturer: syz [ 1568.144123][ T10] usb 6-1: SerialNumber: syz [ 1568.157933][T26395] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5358'. [ 1568.160284][ T10] usb 6-1: config 0 descriptor?? [ 1568.234977][T26400] syz_tun: entered allmulticast mode [ 1568.243350][T26400] syz_tun: left allmulticast mode [ 1568.428413][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1568.622243][ T10] airspy 6-1:0.0: Board ID: 00 [ 1568.662575][ T10] airspy 6-1:0.0: Firmware version: [ 1569.535893][T26385] fuse: Invalid rootmode [ 1569.757385][ T10] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 1569.767048][ T5882] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1569.779415][ T10] airspy 6-1:0.0: Registered as swradio24 [ 1569.785331][ T10] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1569.807565][ T10] usb 6-1: USB disconnect, device number 51 [ 1569.960955][ T5882] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.971604][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.982000][ T5882] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1569.992792][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.007503][ T5882] usb 8-1: config 0 descriptor?? [ 1570.024559][ T5882] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1570.352739][T26421] netlink: 'syz.7.5363': attribute type 10 has an invalid length. [ 1570.400085][T26421] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1570.594916][T26426] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1570.777962][ T5882] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1570.957313][ T5882] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1570.979212][ T5882] usb 6-1: config 0 has no interface number 0 [ 1570.995340][ T5882] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1571.029592][ T5882] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1571.051830][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.069391][ T5882] usb 6-1: Product: syz [ 1571.081728][ T5882] usb 6-1: Manufacturer: syz [ 1571.095625][ T5882] usb 6-1: SerialNumber: syz [ 1571.146362][ T5882] usb 6-1: config 0 descriptor?? [ 1571.200046][ T5882] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1571.816754][T26439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5366'. [ 1572.564220][T26421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.602638][ T10] usb 8-1: USB disconnect, device number 53 [ 1572.762308][T26446] netlink: 'syz.0.5371': attribute type 10 has an invalid length. [ 1572.773590][T26448] syz_tun: entered allmulticast mode [ 1572.795177][T26448] syz_tun: left allmulticast mode [ 1572.949814][T26446] team0: Port device dummy0 added [ 1573.876173][T26458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51233 sclass=netlink_route_socket pid=26458 comm=syz.6.5374 [ 1573.956455][T26457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5375'. [ 1573.971034][T26461] netlink: 'syz.0.5376': attribute type 74 has an invalid length. [ 1574.092268][ T5938] usb 6-1: USB disconnect, device number 52 [ 1574.121916][ T5938] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1574.240343][ T5882] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1574.438696][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 1574.448050][T18244] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1574.464254][ T5882] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1574.484801][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.502298][ T5882] usb 1-1: Product: syz [ 1574.512011][ T5882] usb 1-1: Manufacturer: syz [ 1574.521590][ T5882] usb 1-1: SerialNumber: syz [ 1574.534315][ T5882] usb 1-1: config 0 descriptor?? [ 1574.608608][ T5938] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1574.630959][T18244] usb 8-1: Using ep0 maxpacket: 32 [ 1574.641751][T18244] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1574.659003][T18244] usb 8-1: config 0 has no interface number 0 [ 1574.670022][T18244] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1574.690576][T18244] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1574.708909][T18244] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1574.722866][T18244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.740788][T18244] usb 8-1: Product: syz [ 1574.752546][T18244] usb 8-1: Manufacturer: syz [ 1574.762208][T18244] usb 8-1: SerialNumber: syz [ 1574.781540][T18244] usb 8-1: config 0 descriptor?? [ 1574.791269][ T5938] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1574.797194][T18244] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1574.824020][T18244] em28xx 8-1:0.89: Video interface 89 found: [ 1574.835727][ T5938] usb 6-1: config 0 has no interface number 0 [ 1574.853643][ T5938] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1574.881144][T26473] netlink: 'syz.6.5380': attribute type 1 has an invalid length. [ 1574.883118][ T5938] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1574.912663][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.927162][T26473] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1574.944030][ T5938] usb 6-1: Product: syz [ 1574.951563][ T5882] airspy 1-1:0.0: Board ID: 00 [ 1574.956626][ T5882] airspy 1-1:0.0: Firmware version: [ 1574.956688][ T5938] usb 6-1: Manufacturer: syz [ 1574.972018][T26473] bond8: entered promiscuous mode [ 1574.988597][ T5938] usb 6-1: SerialNumber: syz [ 1575.008862][ T5938] usb 6-1: config 0 descriptor?? [ 1575.030997][ T5938] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1575.406592][T18244] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1575.454436][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5378'. [ 1575.597497][T26482] netlink: 'syz.6.5382': attribute type 4 has an invalid length. [ 1575.762486][T26461] fuse: Invalid rootmode [ 1575.828099][T18244] em28xx 8-1:0.89: AC97 command still being executed: not handled properly! [ 1575.994279][ T5882] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 1576.003233][ T5882] airspy 1-1:0.0: Registered as swradio24 [ 1576.010180][ T5882] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1576.026427][T18244] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1576.035259][ T5882] usb 1-1: USB disconnect, device number 27 [ 1576.045737][T18244] em28xx 8-1:0.89: board has no eeprom [ 1576.327938][T18244] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1576.335280][T18244] em28xx 8-1:0.89: analog set to bulk mode. [ 1576.352018][ T5882] em28xx 8-1:0.89: Registering V4L2 extension [ 1576.362172][T18244] usb 8-1: USB disconnect, device number 54 [ 1576.369450][T18244] em28xx 8-1:0.89: Disconnecting em28xx [ 1576.422638][ T5882] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1576.432238][ T5882] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1576.439368][ T5882] em28xx 8-1:0.89: No AC97 audio processor [ 1576.461615][ T5882] usb 8-1: Decoder not found [ 1576.466230][ T5882] em28xx 8-1:0.89: failed to create media graph [ 1576.475140][ T5882] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1576.490594][ T5882] em28xx 8-1:0.89: Registering snapshot button... [ 1576.529206][ T5882] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input52 [ 1576.593863][ T5882] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1576.615462][T18244] em28xx 8-1:0.89: Closing input extension [ 1576.656927][T18244] em28xx 8-1:0.89: Deregistering snapshot button [ 1576.707330][ T29] audit: type=1400 audit(1776418533.130:1381): avc: denied { ioctl } for pid=26491 comm="syz.0.5385" path="socket:[115000]" dev="sockfs" ino=115000 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1576.794991][T26499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5386'. [ 1576.881701][T18244] em28xx 8-1:0.89: Freeing device [ 1577.256409][ T5938] usb 6-1: USB disconnect, device number 53 [ 1577.276568][ T5938] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1577.688098][ T29] audit: type=1400 audit(1776418534.040:1382): avc: denied { write } for pid=26505 comm="syz.5.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1578.033290][T26514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63521 sclass=netlink_route_socket pid=26514 comm=syz.6.5390 [ 1578.298453][ T5938] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1578.474726][ T5938] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1578.486662][ T5938] usb 8-1: config 0 has no interface number 0 [ 1578.494025][ T5938] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1578.521848][ T5938] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1578.531865][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.547517][ T5938] usb 8-1: Product: syz [ 1578.564001][ T5938] usb 8-1: Manufacturer: syz [ 1578.586319][ T5938] usb 8-1: SerialNumber: syz [ 1578.618975][ T5938] usb 8-1: config 0 descriptor?? [ 1578.646225][ T5938] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1578.993510][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5392'. [ 1579.032837][T26526] netlink: 'syz.5.5393': attribute type 10 has an invalid length. [ 1579.114525][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5389'. [ 1579.155243][T26526] team0: Port device dummy0 added [ 1579.281597][T26535] fuse: Bad value for 'group_id' [ 1579.290434][T26534] sctp: [Deprecated]: syz.4.5394 (pid 26534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1579.290434][T26534] Use struct sctp_sack_info instead [ 1579.321666][T26535] fuse: Bad value for 'group_id' [ 1579.423779][T26539] tipc: Enabling of bearer rejected, failed to enable media [ 1579.708024][ T5938] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1579.870064][ T5938] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1579.881813][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.979697][ T5938] usb 6-1: selecting invalid altsetting 3 [ 1579.991263][ T5938] comedi comedi4: could not set alternate setting 3 in high speed [ 1579.999555][ T5938] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1580.035088][ T5938] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1580.994336][ T5938] usb 8-1: USB disconnect, device number 55 [ 1581.006231][ T5938] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1581.518599][T26564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43553 sclass=netlink_route_socket pid=26564 comm=syz.4.5402 [ 1581.803961][T26566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5403'. [ 1581.864078][T26568] netlink: 'syz.4.5404': attribute type 1 has an invalid length. [ 1581.892257][T26568] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1581.915943][T26568] bond13: entered promiscuous mode [ 1581.977447][T26571] netlink: 'syz.6.5405': attribute type 1 has an invalid length. [ 1582.296304][T26571] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1582.308682][T22119] usb 6-1: USB disconnect, device number 54 [ 1582.314798][T26578] bond9: entered promiscuous mode [ 1582.392353][T26580] tipc: Enabling of bearer rejected, failed to enable media [ 1582.405916][T26580] syzkaller0: entered promiscuous mode [ 1582.420154][T26580] syzkaller0: entered allmulticast mode [ 1582.475460][T26582] syz_tun: entered allmulticast mode [ 1582.482596][T26582] syz_tun: left allmulticast mode [ 1582.980554][ T5938] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1583.177566][ T5938] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1583.189569][T26599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45089 sclass=netlink_route_socket pid=26599 comm=syz.6.5413 [ 1583.205821][ T5938] usb 6-1: config 0 has no interface number 0 [ 1583.219093][ T5938] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1583.272963][ T5938] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1583.301975][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.330472][ T5938] usb 6-1: Product: syz [ 1583.349154][ T5938] usb 6-1: Manufacturer: syz [ 1583.367369][ T5938] usb 6-1: SerialNumber: syz [ 1583.404931][ T5938] usb 6-1: config 0 descriptor?? [ 1583.473682][ T5938] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1583.592160][T26603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5415'. [ 1583.720360][T26605] team0 (unregistering): Port device team_slave_0 removed [ 1583.745596][T26605] team0 (unregistering): Port device team_slave_1 removed [ 1583.764160][T26605] team0 (unregistering): Port device dummy0 removed [ 1583.782449][T26607] netlink: 'syz.4.5417': attribute type 74 has an invalid length. [ 1583.811942][T26607] fuse: fd is not a fuse device [ 1583.879929][T26609] netlink: 'syz.7.5418': attribute type 74 has an invalid length. [ 1583.964100][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5409'. [ 1584.137963][ T5938] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1584.297999][ T5938] usb 8-1: Using ep0 maxpacket: 32 [ 1584.306160][ T5938] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1584.316954][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.325391][ T5938] usb 8-1: Product: syz [ 1584.331630][ T5938] usb 8-1: Manufacturer: syz [ 1584.336280][ T5938] usb 8-1: SerialNumber: syz [ 1584.343764][ T5938] usb 8-1: config 0 descriptor?? [ 1584.383455][T26614] tipc: Enabling of bearer rejected, failed to enable media [ 1584.474473][T26618] netlink: 'syz.4.5421': attribute type 1 has an invalid length. [ 1584.495681][T26618] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1584.507317][T26618] bond14: entered promiscuous mode [ 1584.761839][ T5938] airspy 8-1:0.0: Board ID: 00 [ 1584.767112][ T5938] airspy 8-1:0.0: Firmware version: [ 1584.966215][T26631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1585.358582][T26635] lo speed is unknown, defaulting to 1000 [ 1585.366704][T26635] lo speed is unknown, defaulting to 1000 [ 1585.380370][T26635] lo speed is unknown, defaulting to 1000 [ 1585.389389][T26635] smbdirect: ib_dev[sy0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1585.403978][T26635] smbdirect: ib_dev[sy0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1585.421510][T26635] smbdirect: ib_dev[sy0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1585.489984][T26635] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 1585.595235][T26635] lo speed is unknown, defaulting to 1000 [ 1585.602209][T26635] lo speed is unknown, defaulting to 1000 [ 1585.608869][T26635] lo speed is unknown, defaulting to 1000 [ 1585.615348][T26635] lo speed is unknown, defaulting to 1000 [ 1585.622044][T26635] lo speed is unknown, defaulting to 1000 [ 1585.628862][T26635] lo speed is unknown, defaulting to 1000 [ 1585.720449][ T5817] usb 6-1: USB disconnect, device number 55 [ 1585.740837][ T5817] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1585.860041][T26609] fuse: Invalid rootmode [ 1586.127772][ T5938] airspy 8-1:0.0: usb_control_msg() failed -71 request 10 [ 1586.146097][ T5938] airspy 8-1:0.0: Registered as swradio24 [ 1586.157171][T26644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45089 sclass=netlink_route_socket pid=26644 comm=syz.5.5429 [ 1586.170767][ T5938] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1586.184896][ T5938] usb 8-1: USB disconnect, device number 56 [ 1586.762863][T26660] syz_tun: entered allmulticast mode [ 1586.770827][T26660] syz_tun: left allmulticast mode [ 1586.988036][ T5938] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1587.150271][ T5938] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1587.159179][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.169662][ T5938] usb 6-1: config 0 has no interface number 0 [ 1587.178458][ T5938] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1587.208017][ T5938] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1587.233530][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.243738][ T5938] usb 6-1: Product: syz [ 1587.249523][ T5938] usb 6-1: Manufacturer: syz [ 1587.254680][ T5938] usb 6-1: SerialNumber: syz [ 1587.264414][ T5938] usb 6-1: config 0 descriptor?? [ 1587.273023][ T5938] yurex 6-1:0.50: Could not find endpoints [ 1587.377707][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5438'. [ 1587.388283][ T5817] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1587.548205][ T5817] usb 8-1: Using ep0 maxpacket: 32 [ 1587.559717][ T5817] usb 8-1: config 7 has an invalid interface number: 208 but max is 0 [ 1587.577717][ T5817] usb 8-1: config 7 has no interface number 0 [ 1587.590644][T26671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5433'. [ 1587.604859][ T5817] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 1587.617292][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.628840][ T5817] usb 8-1: Product: syz [ 1587.634705][ T5817] usb 8-1: Manufacturer: syz [ 1587.644500][ T5817] usb 8-1: SerialNumber: syz [ 1587.872772][T26666] netlink: 'syz.7.5437': attribute type 1 has an invalid length. [ 1587.922564][T26666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1587.951579][T26673] bond8: entered promiscuous mode [ 1587.978868][ T5817] appletouch 8-1:7.208: Could not find int-in endpoint [ 1587.994366][ T5817] appletouch 8-1:7.208: probe with driver appletouch failed with error -5 [ 1588.010938][ T5817] usbhid 8-1:7.208: couldn't find an input interrupt endpoint [ 1588.030582][ T5817] usb 8-1: USB disconnect, device number 57 [ 1589.252740][T26692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48161 sclass=netlink_route_socket pid=26692 comm=syz.6.5443 [ 1589.678691][T18244] usb 6-1: USB disconnect, device number 56 [ 1589.887824][ T29] audit: type=1400 audit(1776418546.310:1383): avc: denied { bind } for pid=26699 comm="syz.5.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1590.695094][T26694] input: syz1 as /devices/virtual/input/input53 [ 1591.005038][T26724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5452'. [ 1591.418160][ T5938] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1591.605519][ T5938] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1591.641424][ T5938] usb 6-1: config 0 has no interface number 0 [ 1591.652675][T26741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38433 sclass=netlink_route_socket pid=26741 comm=syz.7.5457 [ 1591.668881][ T5938] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1591.692346][ T5938] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1591.718827][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.752277][ T5938] usb 6-1: Product: syz [ 1591.763674][ T5938] usb 6-1: Manufacturer: syz [ 1591.781101][ T5938] usb 6-1: SerialNumber: syz [ 1591.806990][ T5938] usb 6-1: config 0 descriptor?? [ 1591.846221][ T5938] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1592.384375][T23417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1592.406205][T23417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1592.417020][T23417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1592.425554][T23417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1592.444354][T23417] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1592.484694][ T29] audit: type=1400 audit(1776418548.910:1384): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1592.511614][T26743] lo speed is unknown, defaulting to 1000 [ 1592.540418][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5455'. [ 1594.102555][T26743] chnl_net:caif_netlink_parms(): no params data found [ 1594.461878][T26743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.485452][T26743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.494940][T26743] bridge_slave_0: entered allmulticast mode [ 1594.532329][ T5821] Bluetooth: hci4: command tx timeout [ 1594.549251][T26743] bridge_slave_0: entered promiscuous mode [ 1594.598418][ T5938] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1594.623968][T26743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.669289][T26743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.709222][T26743] bridge_slave_1: entered allmulticast mode [ 1594.722790][T22119] usb 6-1: USB disconnect, device number 57 [ 1594.750805][T26743] bridge_slave_1: entered promiscuous mode [ 1594.774270][T22119] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1594.793424][ T5938] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1594.804801][ T5938] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.827107][ T5938] usb 8-1: config 0 has no interface number 0 [ 1594.838608][ T5938] usb 8-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1594.880565][T26743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.913928][T26743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.993813][T26743] team0: Port device team_slave_0 added [ 1595.022076][ T5938] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1595.035250][T26743] team0: Port device team_slave_1 added [ 1595.073385][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.110210][ T5938] usb 8-1: Product: syz [ 1595.120240][ T5938] usb 8-1: Manufacturer: syz [ 1595.121562][T26743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.130906][ T5938] usb 8-1: SerialNumber: syz [ 1595.145403][T26743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.181404][ T5938] usb 8-1: config 0 descriptor?? [ 1595.192564][ T5938] yurex 8-1:0.50: Could not find endpoints [ 1595.214799][T26743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.295421][T26743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.318861][T26743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.385498][T26743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.664831][T26795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5461'. [ 1595.721142][T26743] hsr_slave_0: entered promiscuous mode [ 1595.734254][T26743] hsr_slave_1: entered promiscuous mode [ 1595.751368][T26743] debugfs: 'hsr0' already exists in 'hsr' [ 1595.761355][T26743] Cannot create hsr debugfs directory [ 1596.608677][ T5821] Bluetooth: hci4: command tx timeout [ 1596.722753][T26743] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1596.770042][T26743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1596.809252][T26743] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1596.853360][T26743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1596.890359][T26743] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1596.932621][T26743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1596.954144][T26743] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1596.992206][T26743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1597.257537][T26743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.305348][T26743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.333611][T19912] block nbd0: Possible stuck request ffff8880284c7000: control (read@0,1024B). Runtime 270 seconds [ 1597.344401][T19912] block nbd0: Possible stuck request ffff8880284c71c0: control (read@1024,1024B). Runtime 270 seconds [ 1597.355632][T19912] block nbd0: Possible stuck request ffff8880284c7380: control (read@2048,1024B). Runtime 270 seconds [ 1597.367584][T19912] block nbd0: Possible stuck request ffff8880284c7540: control (read@3072,1024B). Runtime 270 seconds [ 1597.394017][T24250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.401146][T24250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.493384][ T5938] usb 8-1: USB disconnect, device number 58 [ 1597.522659][T24250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.529818][T24250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.666517][T26743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1597.709082][T26743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1597.926225][ T29] audit: type=1400 audit(1776418554.350:1385): avc: denied { mount } for pid=26828 comm="syz.4.5476" name="/" dev="autofs" ino=116945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1597.993379][ T5938] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1598.051946][T26743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.158036][ T5938] usb 8-1: device descriptor read/64, error -71 [ 1598.687971][ T5821] Bluetooth: hci4: command tx timeout [ 1598.799878][ T5938] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1598.950866][ T5938] usb 8-1: device descriptor read/64, error -71 [ 1598.959882][T26743] veth0_vlan: entered promiscuous mode [ 1598.990821][T26743] veth1_vlan: entered promiscuous mode [ 1599.060179][T26743] veth0_macvtap: entered promiscuous mode [ 1599.081570][ T5938] usb usb8-port1: attempt power cycle [ 1599.084982][T26743] veth1_macvtap: entered promiscuous mode [ 1599.141769][T26743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.169398][T26743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.212199][T21376] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.280701][T21376] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.317573][T21376] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.427486][T21376] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.458306][ T5938] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1599.519618][ T5938] usb 8-1: device descriptor read/8, error -71 [ 1599.785080][T24250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.807690][T24250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.858279][ T5938] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1599.869743][T21376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.880561][T21376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.921583][ T29] audit: type=1400 audit(1776418556.350:1386): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/root/syzkaller.rk2qIc/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1599.951172][T26872] netlink: 'syz.5.5484': attribute type 74 has an invalid length. [ 1600.003935][ T5938] usb 8-1: device descriptor read/8, error -71 [ 1600.014410][ T29] audit: type=1400 audit(1776418556.440:1387): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/root/syzkaller.rk2qIc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1600.044156][ T29] audit: type=1400 audit(1776418556.450:1388): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/root/syzkaller.rk2qIc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=116204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1600.082945][ T29] audit: type=1400 audit(1776418556.500:1389): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1600.108861][ T29] audit: type=1400 audit(1776418556.500:1390): avc: denied { mount } for pid=26743 comm="syz-executor" name="/" dev="gadgetfs" ino=7366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1600.128304][ T5938] usb usb8-port1: unable to enumerate USB device [ 1600.134770][ T29] audit: type=1400 audit(1776418556.500:1391): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1600.238571][T19386] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1600.249998][ T29] audit: type=1400 audit(1776418556.680:1392): avc: denied { append } for pid=26877 comm="syz.8.5458" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1600.276582][T26878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8213 sclass=netlink_route_socket pid=26878 comm=syz.8.5458 [ 1600.299365][ T29] audit: type=1400 audit(1776418556.700:1393): avc: denied { bind } for pid=26877 comm="syz.8.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1600.349772][T26882] netlink: 'syz.6.5485': attribute type 10 has an invalid length. [ 1600.390215][T19386] usb 6-1: Using ep0 maxpacket: 32 [ 1600.410586][T19386] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1600.422673][T19386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.504142][T26886] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5486'. [ 1600.573738][T26887] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5486'. [ 1600.630496][T24249] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.689430][T24249] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.737241][T24249] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.796128][ T5821] Bluetooth: hci4: command tx timeout [ 1600.830018][T24249] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.812256][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.108392][T19386] usb 6-1: Product: syz [ 1602.862909][T19386] usb 6-1: Manufacturer: syz [ 1602.870674][T19386] usb 6-1: SerialNumber: syz [ 1602.881745][T19386] usb 6-1: config 0 descriptor?? [ 1603.296643][T19386] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 1603.333578][T19386] airspy 6-1:0.0: Could not detect board [ 1603.361033][T19386] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1603.386588][T19386] usb 6-1: USB disconnect, device number 58 [ 1603.456866][T26902] syz_tun: entered allmulticast mode [ 1603.465056][T26902] syz_tun: left allmulticast mode [ 1603.928942][T26916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44577 sclass=netlink_route_socket pid=26916 comm=syz.7.5495 [ 1603.981849][T26920] netlink: 'syz.4.5497': attribute type 10 has an invalid length. [ 1604.012524][T26920] team0: Device dummy0 failed to register rx_handler [ 1604.577651][T26932] netlink: 'syz.5.5500': attribute type 74 has an invalid length. [ 1604.642000][T26935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1604.858425][ T5817] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1606.026439][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 1606.042631][ T5817] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1606.083244][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.093879][ T5817] usb 6-1: Product: syz [ 1606.098966][ T5817] usb 6-1: Manufacturer: syz [ 1606.103646][ T5817] usb 6-1: SerialNumber: syz [ 1606.114790][ T5817] usb 6-1: config 0 descriptor?? [ 1606.260804][T26955] syz_tun: entered allmulticast mode [ 1606.271666][T26955] syz_tun: left allmulticast mode [ 1606.646372][ T5817] airspy 6-1:0.0: Board ID: 00 [ 1606.659305][ T5817] airspy 6-1:0.0: Firmware version: [ 1606.758086][T19386] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1606.918041][T19386] usb 8-1: Using ep0 maxpacket: 16 [ 1606.947728][T19386] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1606.999721][T19386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.009353][T19386] usb 8-1: Product: syz [ 1607.013607][T19386] usb 8-1: Manufacturer: syz [ 1607.020769][T19386] usb 8-1: SerialNumber: syz [ 1607.031448][T19386] usb 8-1: config 0 descriptor?? [ 1607.141422][T26967] fuse: fd is not a fuse device [ 1607.158729][T26967] fuse: fd is not a fuse device [ 1607.451299][T19386] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1607.462121][T26932] fuse: Unknown parameter 'use00000000000000000000' [ 1607.488149][T19386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1607.501191][T19386] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1607.513117][T19386] usb 8-1: media controller created [ 1607.528355][T19386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1607.640561][T26979] netlink: 'syz.6.5515': attribute type 1 has an invalid length. [ 1607.662573][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.683048][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.722866][ T5817] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 1607.735453][T26979] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1607.746719][ T5817] airspy 6-1:0.0: Registered as swradio24 [ 1607.753209][ T5817] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1607.771760][T26979] bond10: entered promiscuous mode [ 1607.777655][T19386] zl10353_read_register: readreg error (reg=127, ret==0) [ 1607.786543][ T5817] usb 6-1: USB disconnect, device number 59 [ 1607.797714][T19386] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1607.816854][T19386] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1607.832468][T19386] usb 8-1: USB disconnect, device number 63 [ 1607.890583][T19386] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1607.928004][ T5938] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1608.078085][ T5938] usb 9-1: Using ep0 maxpacket: 16 [ 1608.086194][ T5938] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1608.095636][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.104236][ T5938] usb 9-1: Product: syz [ 1608.108518][ T5938] usb 9-1: Manufacturer: syz [ 1608.113162][ T5938] usb 9-1: SerialNumber: syz [ 1608.119570][ T5938] usb 9-1: config 0 descriptor?? [ 1608.270172][T26990] syz_tun: entered allmulticast mode [ 1608.276887][T26990] syz_tun: left allmulticast mode [ 1608.595509][ T29] audit: type=1400 audit(1776418565.020:1394): avc: denied { write } for pid=26999 comm="syz.7.5523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1608.604391][ T5938] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1608.616189][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1608.616344][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1608.616428][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1608.616513][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1608.616593][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1608.616673][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5523'. [ 1608.669171][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1608.699361][ T5938] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1608.707737][ T5938] usb 9-1: media controller created [ 1608.740204][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1608.827081][T26982] FAULT_INJECTION: forcing a failure. [ 1608.827081][T26982] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.852934][T26982] CPU: 1 UID: 0 PID: 26982 Comm: syz.8.5517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1608.852964][T26982] Tainted: [L]=SOFTLOCKUP [ 1608.852970][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1608.852981][T26982] Call Trace: [ 1608.852987][T26982] [ 1608.852994][T26982] dump_stack_lvl+0x100/0x190 [ 1608.853023][T26982] should_fail_ex.cold+0x5/0xa [ 1608.853048][T26982] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1608.853072][T26982] should_failslab+0xc2/0x120 [ 1608.853099][T26982] __kmalloc_noprof+0xe0/0x850 [ 1608.853122][T26982] ? kfree+0x1dd/0x6c0 [ 1608.853146][T26982] tomoyo_realpath_from_path+0xb6/0x690 [ 1608.853176][T26982] tomoyo_path_number_perm+0x23c/0x580 [ 1608.853196][T26982] ? tomoyo_path_number_perm+0x22e/0x580 [ 1608.853219][T26982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1608.853239][T26982] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1608.853290][T26982] ? find_held_lock+0x2b/0x80 [ 1608.853315][T26982] ? __fget_files+0x215/0x3d0 [ 1608.853329][T26982] ? hook_file_ioctl_common+0x149/0x410 [ 1608.853354][T26982] ? __fget_files+0x215/0x3d0 [ 1608.853379][T26982] ? __fget_files+0x21f/0x3d0 [ 1608.853399][T26982] security_file_ioctl+0xd3/0x230 [ 1608.853421][T26982] __x64_sys_ioctl+0xb7/0x210 [ 1608.853465][T26982] do_syscall_64+0x10b/0xf80 [ 1608.853482][T26982] ? clear_bhb_loop+0x40/0x90 [ 1608.853504][T26982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.853527][T26982] RIP: 0033:0x7fe56799c819 [ 1608.853543][T26982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.853560][T26982] RSP: 002b:00007fe5687cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1608.853578][T26982] RAX: ffffffffffffffda RBX: 00007fe567c15fa0 RCX: 00007fe56799c819 [ 1608.853589][T26982] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 1608.853600][T26982] RBP: 00007fe5687cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.853610][T26982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.853621][T26982] R13: 00007fe567c16038 R14: 00007fe567c15fa0 R15: 00007ffd3930a8f8 [ 1608.853646][T26982] [ 1608.853752][T26982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1609.147320][ T5938] zl10353_read_register: readreg error (reg=127, ret==0) [ 1609.359404][ T5938] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1609.370807][ T5938] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1609.417113][ T5938] usb 9-1: USB disconnect, device number 2 [ 1609.484967][ T5938] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1609.720347][T27025] netlink: 'syz.6.5529': attribute type 74 has an invalid length. [ 1609.737010][T27025] fuse: fd is not a fuse device [ 1609.811923][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5527'. [ 1609.891359][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5528'. [ 1610.098011][ T5938] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1610.288744][ T5938] usb 9-1: Using ep0 maxpacket: 16 [ 1610.310257][ T5938] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1610.335539][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.488009][ T29] audit: type=1400 audit(1776418566.860:1395): avc: denied { connect } for pid=27032 comm="syz.5.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1610.762712][ T5938] usb 9-1: Product: syz [ 1610.781730][ T5938] usb 9-1: Manufacturer: syz [ 1610.792791][ T29] audit: type=1400 audit(1776418566.870:1396): avc: denied { setopt } for pid=27032 comm="syz.5.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1610.813241][ T5938] usb 9-1: SerialNumber: syz [ 1610.826593][ T5938] usb 9-1: config 0 descriptor?? [ 1610.851705][ T29] audit: type=1400 audit(1776418566.880:1397): avc: denied { accept } for pid=27032 comm="syz.5.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1610.878780][ T29] audit: type=1400 audit(1776418567.250:1398): avc: denied { accept } for pid=27036 comm="syz.6.5532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1611.315972][ T5938] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1611.430865][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1611.455625][ T5938] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1611.516063][ T5938] usb 9-1: media controller created [ 1611.530291][T27031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.543325][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1611.568432][T27031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.636229][ T5938] zl10353_read_register: readreg error (reg=127, ret==0) [ 1611.660766][ T5938] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1611.685324][ T5938] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1611.823343][ T5938] usb 9-1: USB disconnect, device number 3 [ 1612.004879][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5536'. [ 1613.023244][T27055] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1613.037950][T27055] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1613.054962][T27055] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1613.069027][T27055] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1613.168385][ T5938] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1613.405366][T27060] syzkaller0: entered promiscuous mode [ 1613.440146][T27060] syzkaller0: entered allmulticast mode [ 1613.822205][T27068] netlink: 'syz.6.5542': attribute type 74 has an invalid length. [ 1613.853936][T27068] fuse: fd is not a fuse device [ 1613.935177][ T29] audit: type=1400 audit(1776418570.360:1399): avc: denied { read } for pid=27071 comm="syz.5.5543" path="socket:[117808]" dev="sockfs" ino=117808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1614.237987][T18244] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1614.419793][T18244] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1614.450518][T18244] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.571083][T18244] usb 8-1: config 0 has no interface number 0 [ 1614.595927][T27088] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5548'. [ 1614.629214][T18244] usb 8-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1614.962233][T18244] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1614.993673][T18244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.025579][T18244] usb 8-1: Product: syz [ 1615.047645][T18244] usb 8-1: Manufacturer: syz [ 1615.067337][T18244] usb 8-1: SerialNumber: syz [ 1615.100684][T18244] usb 8-1: config 0 descriptor?? [ 1615.222110][T27097] fuse: fd is not a fuse device [ 1615.229709][T18244] yurex 8-1:0.50: Could not find endpoints [ 1616.532324][T27097] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1617.230446][ T29] audit: type=1400 audit(1776418573.660:1400): avc: denied { shutdown } for pid=27104 comm="syz.5.5553" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1617.313602][T27114] netlink: 'syz.4.5556': attribute type 1 has an invalid length. [ 1617.418121][T27116] 9p: Bad value for 'rfdno' [ 1617.786767][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5541'. [ 1617.835030][T27114] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1617.899743][T27120] bond15: entered promiscuous mode [ 1617.962331][T27127] netlink: 'syz.5.5558': attribute type 74 has an invalid length. [ 1618.008197][ T5817] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1618.148047][ T5817] usb 9-1: device descriptor read/64, error -71 [ 1618.218113][T22119] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1618.398305][ T5817] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1618.407918][T22119] usb 6-1: Using ep0 maxpacket: 32 [ 1618.420626][T22119] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1618.430755][T22119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.439137][T22119] usb 6-1: Product: syz [ 1618.455659][T22119] usb 6-1: Manufacturer: syz [ 1618.467990][T22119] usb 6-1: SerialNumber: syz [ 1618.500194][T22119] usb 6-1: config 0 descriptor?? [ 1618.546170][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5560'. [ 1618.578635][ T5817] usb 9-1: device descriptor read/64, error -71 [ 1618.698411][ T5817] usb usb9-port1: attempt power cycle [ 1618.923368][T22119] airspy 6-1:0.0: Board ID: 00 [ 1618.945185][T22119] airspy 6-1:0.0: Firmware version: [ 1619.043638][T19386] usb 8-1: USB disconnect, device number 64 [ 1619.058571][ T5817] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1619.139187][ T5817] usb 9-1: device descriptor read/8, error -71 [ 1619.388309][ T5817] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1619.422982][ T5817] usb 9-1: device descriptor read/8, error -71 [ 1619.548270][ T5817] usb usb9-port1: unable to enumerate USB device [ 1619.739253][T27127] fuse: Unknown parameter 'user_i00000000000000000000' [ 1619.957045][T27138] netlink: 'syz.7.5562': attribute type 1 has an invalid length. [ 1620.026200][T22119] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 1620.137076][T22119] airspy 6-1:0.0: Registered as swradio24 [ 1620.156541][T22119] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1620.564798][T22119] usb 6-1: USB disconnect, device number 60 [ 1620.715683][T27150] fuse: Bad value for 'group_id' [ 1620.726157][T27150] fuse: Bad value for 'group_id' [ 1620.766454][T27151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1621.015505][T27165] syzkaller0: entered promiscuous mode [ 1621.026351][T27165] syzkaller0: entered allmulticast mode [ 1621.039101][T22119] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1621.434630][T22119] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1621.446435][T22119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.463092][T22119] usb 6-1: selecting invalid altsetting 3 [ 1621.470087][T22119] comedi comedi4: could not set alternate setting 3 in high speed [ 1621.481357][T22119] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1621.496389][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5570'. [ 1621.508296][T22119] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1623.318576][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5576'. [ 1623.328193][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5576'. [ 1623.748153][T19386] usb 6-1: USB disconnect, device number 61 [ 1624.082887][T27202] overlayfs: missing 'lowerdir' [ 1624.266917][ T29] audit: type=1326 audit(1776418580.660:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1624.461757][T22119] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1624.475860][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1624.717523][ T29] audit: type=1326 audit(1776418580.660:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1624.757981][T22119] usb 6-1: device descriptor read/64, error -32 [ 1624.785520][ T29] audit: type=1326 audit(1776418580.660:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1624.965069][ T29] audit: type=1326 audit(1776418580.660:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.028496][ T29] audit: type=1326 audit(1776418580.660:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.098974][T22119] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1625.116488][ T29] audit: type=1326 audit(1776418580.660:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.189765][ T29] audit: type=1326 audit(1776418580.660:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.262752][ T29] audit: type=1326 audit(1776418580.660:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.288890][T18244] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1625.303246][ T29] audit: type=1326 audit(1776418580.660:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.327574][ T29] audit: type=1326 audit(1776418580.660:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59cb9c819 code=0x7ffc0000 [ 1625.328892][T22119] usb 6-1: device descriptor read/64, error -71 [ 1625.472919][T22119] usb usb6-port1: attempt power cycle [ 1625.523157][T18244] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1625.583903][T18244] usb 9-1: config 0 has no interface number 0 [ 1625.628080][T18244] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1626.158757][T18244] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1626.168478][T18244] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1626.176803][T18244] usb 9-1: Manufacturer: syz [ 1626.182550][T18244] usb 9-1: SerialNumber: syz [ 1626.193776][T18244] usb 9-1: config 0 descriptor?? [ 1626.334323][T23417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1626.382714][T23417] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1626.394099][T23417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1626.411895][T23417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1626.426224][T23417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1626.438814][T22119] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1626.486290][T18244] usbtouchscreen 9-1:0.214: Failed to read FW rev: -71 [ 1626.495856][T18244] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1626.511282][T22119] usb 6-1: device descriptor read/8, error -71 [ 1626.674032][T27227] lo speed is unknown, defaulting to 1000 [ 1626.688648][T18244] usb 9-1: USB disconnect, device number 8 [ 1627.158453][T22119] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1627.337393][T20521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.402266][T27238] netlink: 'syz.8.5590': attribute type 4 has an invalid length. [ 1627.413294][T19912] block nbd0: Possible stuck request ffff8880284c7000: control (read@0,1024B). Runtime 300 seconds [ 1627.424356][T19912] block nbd0: Possible stuck request ffff8880284c71c0: control (read@1024,1024B). Runtime 300 seconds [ 1627.435375][T19912] block nbd0: Possible stuck request ffff8880284c7380: control (read@2048,1024B). Runtime 300 seconds [ 1627.447188][T19912] block nbd0: Possible stuck request ffff8880284c7540: control (read@3072,1024B). Runtime 300 seconds [ 1627.461208][T27238] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5590'. [ 1627.478399][ T5882] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 1627.486948][T27239] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5590'. [ 1627.642778][T22119] usb 6-1: device descriptor read/8, error -71 [ 1627.691436][ T5882] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.704831][ T5882] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1627.716203][ T5882] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1627.727002][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1627.736976][ T5882] usb 8-1: Product: syz [ 1627.741562][ T5882] usb 8-1: Manufacturer: syz [ 1627.746236][ T5882] usb 8-1: SerialNumber: syz [ 1627.759495][T22119] usb usb6-port1: unable to enumerate USB device [ 1627.796548][ T5882] usb 8-1: config 0 descriptor?? [ 1628.317438][T20521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.537952][T23417] Bluetooth: hci6: command tx timeout [ 1628.730134][T27254] NILFS (nullb0): couldn't find nilfs on the device [ 1629.109488][T20521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.178693][T27227] chnl_net:caif_netlink_parms(): no params data found [ 1629.292879][T20521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.360615][T27261] audit_log_lost: 32 callbacks suppressed [ 1629.360627][T27261] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1629.413003][T27261] audit: out of memory in audit_log_start [ 1629.431018][T27227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.440559][T27227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.448191][T27227] bridge_slave_0: entered allmulticast mode [ 1629.459739][T27227] bridge_slave_0: entered promiscuous mode [ 1629.477575][T27227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.498379][T27227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.508494][T27227] bridge_slave_1: entered allmulticast mode [ 1629.516075][T27227] bridge_slave_1: entered promiscuous mode [ 1629.574201][T27227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.587175][T27227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.671572][T27227] team0: Port device team_slave_0 added [ 1629.683546][T27227] team0: Port device team_slave_1 added [ 1629.771419][T27227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.779464][T27227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.812804][T27227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.853691][T27227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.861273][T27227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.889537][T27227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.040148][T27227] hsr_slave_0: entered promiscuous mode [ 1630.054763][T27227] hsr_slave_1: entered promiscuous mode [ 1630.065597][T27227] debugfs: 'hsr0' already exists in 'hsr' [ 1630.077970][T27227] Cannot create hsr debugfs directory [ 1630.140177][ T5882] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 1630.234852][T18244] usb 8-1: USB disconnect, device number 65 [ 1630.342499][ T5882] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1630.366554][ T5882] usb 6-1: config 172 has an invalid interface number: 182 but max is 1 [ 1630.409369][ T5882] usb 6-1: config 172 contains an unexpected descriptor of type 0x2, skipping [ 1630.438336][ T5882] usb 6-1: config 172 has an invalid descriptor of length 30, skipping remainder of the config [ 1630.457598][T20521] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1630.473290][ T5882] usb 6-1: config 172 has 1 interface, different from the descriptor's value: 2 [ 1630.502140][ T5882] usb 6-1: config 172 has no interface number 0 [ 1630.512003][ T5882] usb 6-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8 [ 1630.524525][T20521] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1630.535243][T20521] geneve2 (unregistering): left promiscuous mode [ 1630.542178][ T5882] usb 6-1: config 172 interface 182 has no altsetting 0 [ 1630.559411][ T5882] usb 6-1: string descriptor 0 read error: -22 [ 1630.592421][ T5882] usb 6-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 1630.624532][T23417] Bluetooth: hci6: command tx timeout [ 1630.711412][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.907214][ T5882] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 1631.053754][ T5882] usb 6-1: USB disconnect, device number 66 [ 1631.143337][T20521] bond1 (unregistering): Released all slaves [ 1631.157936][T19386] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1631.191183][T20521] bond2 (unregistering): Released all slaves [ 1631.223362][T20521] bond3 (unregistering): Released all slaves [ 1631.266372][T20521] bond4 (unregistering): Released all slaves [ 1631.292309][T20521] bond5 (unregistering): Released all slaves [ 1631.315777][T20521] bond0 (unregistering): Released all slaves [ 1631.324726][T19386] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1631.346284][T19386] usb 8-1: config 0 has no interface number 0 [ 1631.349598][T20521] bond6 (unregistering): Released all slaves [ 1631.384085][T20521] bond7 (unregistering): Released all slaves [ 1631.390245][T19386] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1631.436872][T19386] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1631.458601][T19386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.475800][T19386] usb 8-1: Product: syz [ 1631.487608][T19386] usb 8-1: Manufacturer: syz [ 1631.497607][T20521] bond8 (unregistering): Released all slaves [ 1631.506351][T19386] usb 8-1: SerialNumber: syz [ 1631.534457][T20521] bond9 (unregistering): Released all slaves [ 1631.555725][T19386] usb 8-1: config 0 descriptor?? [ 1631.557774][T20521] bond10 (unregistering): Released all slaves [ 1631.631894][T19386] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1631.663758][T20521] bond11 (unregistering): Released all slaves [ 1631.867033][T20521] bond12 (unregistering): Released all slaves [ 1631.886219][ T29] audit: type=1326 audit(1776418588.310:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1631.929593][ T5938] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1631.946913][T20521] bond13 (unregistering): Released all slaves [ 1631.963869][T20521] bond14 (unregistering): Released all slaves [ 1631.991454][T20521] bond15 (unregistering): Released all slaves [ 1632.047615][ T29] audit: type=1326 audit(1776418588.310:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.182237][ T5938] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1632.193080][ T29] audit: type=1326 audit(1776418588.310:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.222773][ T5938] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.245540][ T5938] usb 9-1: config 0 has no interface number 0 [ 1632.263692][ T5938] usb 9-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1632.280991][ T29] audit: type=1326 audit(1776418588.310:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.353504][ T29] audit: type=1326 audit(1776418588.310:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.397395][ T29] audit: type=1326 audit(1776418588.310:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.452721][ T29] audit: type=1326 audit(1776418588.310:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.491311][ T29] audit: type=1326 audit(1776418588.310:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27288 comm="syz.5.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc26d9c819 code=0x7ffc0000 [ 1632.649937][ T5938] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1632.677675][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.686129][ T5938] usb 9-1: Product: syz [ 1632.694203][T20521] tipc: Left network mode [ 1632.734740][T27303] netlink: 'syz.5.5604': attribute type 10 has an invalid length. [ 1632.769631][T23417] Bluetooth: hci6: command tx timeout [ 1632.797947][ T5938] usb 9-1: Manufacturer: syz [ 1632.802847][ T5938] usb 9-1: SerialNumber: syz [ 1632.826311][T20521] IPVS: stopping master sync thread 19007 ... [ 1632.842306][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5600'. [ 1632.850759][ T5938] usb 9-1: config 0 descriptor?? [ 1632.985018][ T5938] yurex 9-1:0.50: Could not find endpoints [ 1633.279052][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5606'. [ 1633.618947][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5601'. [ 1634.264932][T20521] hsr_slave_0: left promiscuous mode [ 1634.302552][T20521] hsr_slave_1: left promiscuous mode [ 1634.336025][T20521] dummy0: left promiscuous mode [ 1634.543947][T27336] fuse: fd is not a fuse device [ 1634.848540][T23417] Bluetooth: hci6: command tx timeout [ 1635.002516][ T5882] usb 8-1: USB disconnect, device number 66 [ 1635.050563][ T5882] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1635.058243][ T47] smbdirect: ib_dev[sy0] removed [ 1635.130595][T22119] usb 9-1: USB disconnect, device number 9 [ 1635.879042][T27227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1635.895248][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1635.926859][T27227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1635.954658][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1635.963458][T27227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1636.001070][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1636.013395][T27227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1636.030266][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1636.040384][T27349] syz_tun: entered allmulticast mode [ 1636.083894][T27349] syz_tun: left allmulticast mode [ 1636.375616][T20521] IPVS: stop unused estimator thread 0... [ 1636.551415][T27227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.600107][T27375] mac80211_hwsim hwsim32 O3ãc¤±: renamed from wlan1 (while UP) [ 1636.602322][T27376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5617'. [ 1636.650942][T27227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.677623][T21376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.684862][T21376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.701854][T24249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.708973][T24249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.869557][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1636.933266][T27227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.029832][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1637.036769][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1637.046704][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.085230][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1637.260065][T27227] veth0_vlan: entered promiscuous mode [ 1637.282187][T27227] veth1_vlan: entered promiscuous mode [ 1637.379302][T27227] veth0_macvtap: entered promiscuous mode [ 1637.402682][T27227] veth1_macvtap: entered promiscuous mode [ 1637.479400][T27227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1637.496767][T27227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.579259][T24253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.596400][T24253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.627446][T24253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.657341][T24253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.711369][T27395] FAULT_INJECTION: forcing a failure. [ 1637.711369][T27395] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.751879][T27395] CPU: 0 UID: 0 PID: 27395 Comm: syz.8.5619 Tainted: G L syzkaller #0 PREEMPT(full) [ 1637.751910][T27395] Tainted: [L]=SOFTLOCKUP [ 1637.751916][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1637.751925][T27395] Call Trace: [ 1637.751932][T27395] [ 1637.751939][T27395] dump_stack_lvl+0x100/0x190 [ 1637.751964][T27395] should_fail_ex.cold+0x5/0xa [ 1637.751987][T27395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1637.752015][T27395] should_failslab+0xc2/0x120 [ 1637.752042][T27395] __kmalloc_noprof+0xe0/0x850 [ 1637.752068][T27395] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1637.752100][T27395] genl_family_rcv_msg_doit+0xc7/0x300 [ 1637.752129][T27395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1637.752163][T27395] ? bpf_lsm_capable+0x9/0x10 [ 1637.752179][T27395] ? security_capable+0x80/0x260 [ 1637.752198][T27395] ? ns_capable+0xd2/0xf0 [ 1637.752222][T27395] genl_rcv_msg+0x560/0x800 [ 1637.752252][T27395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1637.752278][T27395] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1637.752306][T27395] ? try_to_wake_up+0x5ec/0x1900 [ 1637.752334][T27395] netlink_rcv_skb+0x159/0x420 [ 1637.752357][T27395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1637.752383][T27395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1637.752403][T27395] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1637.752433][T27395] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1637.752459][T27395] genl_rcv+0x28/0x40 [ 1637.752479][T27395] netlink_unicast+0x585/0x850 [ 1637.752503][T27395] ? __pfx_netlink_unicast+0x10/0x10 [ 1637.752536][T27395] netlink_sendmsg+0x8b0/0xda0 [ 1637.752561][T27395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1637.752580][T27395] ? __might_fault+0x40/0x140 [ 1637.752606][T27395] ____sys_sendmsg+0x9e1/0xb70 [ 1637.752625][T27395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1637.752647][T27395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1637.752675][T27395] ___sys_sendmsg+0x190/0x1e0 [ 1637.752697][T27395] ? __pfx____sys_sendmsg+0x10/0x10 [ 1637.752743][T27395] __sys_sendmsg+0x170/0x220 [ 1637.752760][T27395] ? __pfx___sys_sendmsg+0x10/0x10 [ 1637.752786][T27395] ? rcu_is_watching+0x12/0xc0 [ 1637.752808][T27395] do_syscall_64+0x10b/0xf80 [ 1637.752822][T27395] ? clear_bhb_loop+0x40/0x90 [ 1637.752840][T27395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.752856][T27395] RIP: 0033:0x7fe56799c819 [ 1637.752870][T27395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.752886][T27395] RSP: 002b:00007fe5687cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.752903][T27395] RAX: ffffffffffffffda RBX: 00007fe567c15fa0 RCX: 00007fe56799c819 [ 1637.752912][T27395] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1637.752921][T27395] RBP: 00007fe5687cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.752929][T27395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.752938][T27395] R13: 00007fe567c16038 R14: 00007fe567c15fa0 R15: 00007ffd3930a8f8 [ 1637.752958][T27395] [ 1638.457794][T27405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5620'. [ 1638.557046][T21376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.565061][T21376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.681029][T21376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.702882][T21376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.749379][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1638.749394][ T29] audit: type=1400 audit(1776418595.180:1477): avc: denied { append } for pid=27407 comm="syz.7.5623" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1638.783181][T27408] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5623'. [ 1638.809938][ T29] audit: type=1400 audit(1776418595.210:1478): avc: denied { read } for pid=27407 comm="syz.7.5623" dev="sockfs" ino=119847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1638.907278][ T29] audit: type=1400 audit(1776418595.260:1479): avc: denied { ioctl } for pid=27407 comm="syz.7.5623" path="socket:[120864]" dev="sockfs" ino=120864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1638.913695][T27375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5616'. [ 1638.952937][ T29] audit: type=1400 audit(1776418595.260:1480): avc: denied { setopt } for pid=27407 comm="syz.7.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1638.995898][T27375] ipvlan2: entered allmulticast mode [ 1639.007651][T27375] batadv0: entered allmulticast mode [ 1639.041874][T27375] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1639.229031][ T24] gspca_nw80x: reg_w err -110 [ 1639.234447][ T24] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 1639.352245][ T24] usb 6-1: USB disconnect, device number 67 [ 1639.536921][T27426] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5624'. [ 1640.159071][T27437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5628'. [ 1640.893522][T27441] fuse: Bad value for 'group_id' [ 1640.923142][T27441] fuse: Bad value for 'group_id' [ 1641.298355][T26867] usb 8-1: new full-speed USB device number 67 using dummy_hcd [ 1641.481499][T26867] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1641.492807][T26867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.526138][T26867] usb 8-1: selecting invalid altsetting 3 [ 1641.541166][T26867] comedi comedi4: could not set alternate setting 3 in high speed [ 1641.566794][T26867] usbduxsigma 8-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1641.582126][T26867] usbduxsigma 8-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1641.992908][T27457] netlink: 'syz.6.5634': attribute type 10 has an invalid length. [ 1643.268555][ T5938] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 1643.402552][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5636'. [ 1643.553194][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5639'. [ 1643.618268][ T5938] usb 6-1: Invalid ep0 maxpacket: 64 [ 1643.757946][ T5938] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 1643.903331][T22119] usb 8-1: USB disconnect, device number 67 [ 1643.927986][ T5938] usb 6-1: Invalid ep0 maxpacket: 64 [ 1643.946147][ T5938] usb usb6-port1: attempt power cycle [ 1644.298013][ T5938] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1644.307826][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5641'. [ 1644.389762][ T5938] usb 6-1: Invalid ep0 maxpacket: 64 [ 1644.530148][ T5938] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 1644.569303][ T5938] usb 6-1: Invalid ep0 maxpacket: 64 [ 1644.590119][ T5938] usb usb6-port1: unable to enumerate USB device [ 1645.176512][T27504] netlink: 'syz.8.5646': attribute type 10 has an invalid length. [ 1645.275386][T27504] team0: Port device dummy0 added [ 1646.140714][T27515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5648'. [ 1646.995947][ T29] audit: type=1400 audit(1776418603.420:1481): avc: denied { read write } for pid=22011 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1647.082653][ T29] audit: type=1400 audit(1776418603.420:1482): avc: denied { open } for pid=22011 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1647.268277][ T29] audit: type=1400 audit(1776418603.420:1483): avc: denied { ioctl } for pid=22011 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1647.295947][ T29] audit: type=1400 audit(1776418603.450:1484): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.156 dest=47286 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1647.331735][ T29] audit: type=1400 audit(1776418603.550:1485): avc: denied { execmem } for pid=27523 comm="syz.5.5650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1647.392295][ T29] audit: type=1400 audit(1776418603.720:1486): avc: denied { create } for pid=27523 comm="syz.5.5650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1647.465164][ T29] audit: type=1400 audit(1776418603.750:1487): avc: denied { read write } for pid=27523 comm="syz.5.5650" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1647.549943][ T29] audit: type=1400 audit(1776418603.750:1488): avc: denied { open } for pid=27523 comm="syz.5.5650" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1647.637879][T27535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5652'. [ 1647.659136][ T29] audit: type=1400 audit(1776418603.750:1489): avc: denied { ioctl } for pid=27523 comm="syz.5.5650" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1647.785684][ T29] audit: type=1400 audit(1776418603.750:1490): avc: denied { create } for pid=27523 comm="syz.5.5650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1648.207134][T27527] binder: 27524:27527 ioctl c0306201 200000001a80 returned -14 [ 1649.621448][T27560] netlink: 'syz.4.5659': attribute type 74 has an invalid length. [ 1649.764916][T27566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5658'. [ 1650.268746][T22119] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1650.418663][T26867] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1650.457010][T22119] usb 5-1: Using ep0 maxpacket: 32 [ 1650.535728][T22119] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1650.548249][T22119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.556352][T22119] usb 5-1: Product: syz [ 1650.561102][T22119] usb 5-1: Manufacturer: syz [ 1650.566280][T22119] usb 5-1: SerialNumber: syz [ 1650.600321][T26867] usb 8-1: Using ep0 maxpacket: 16 [ 1650.605793][T22119] usb 5-1: config 0 descriptor?? [ 1650.684202][T26867] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1650.709180][T26867] usb 8-1: config 1 has no interface number 0 [ 1650.756485][T26867] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1650.789838][T26867] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1650.871082][T26867] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1650.887779][T26867] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1650.905357][T26867] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1650.923971][T26867] usb 8-1: Product: syz [ 1650.932442][T26867] usb 8-1: Manufacturer: syz [ 1650.957404][T26867] usb 8-1: SerialNumber: syz [ 1651.055520][T22119] airspy 5-1:0.0: Board ID: 00 [ 1651.063998][T27569] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1651.087100][T22119] airspy 5-1:0.0: Firmware version: [ 1651.116159][T27569] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1651.433609][T26867] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 1651.525095][T26867] usb 8-1: USB disconnect, device number 68 [ 1651.899184][T27560] fuse: Unknown parameter 'user_id00000000000000000000' [ 1651.928235][ T24] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1652.013875][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1652.013891][ T29] audit: type=1400 audit(1776418608.430:1547): avc: denied { accept } for pid=27591 comm="syz.6.5666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1652.057198][ T29] audit: type=1400 audit(1776418608.490:1548): avc: denied { ioctl } for pid=27587 comm="syz.8.5665" path="socket:[120164]" dev="sockfs" ino=120164 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1652.104557][ T29] audit: type=1400 audit(1776418608.510:1549): avc: denied { create } for pid=27587 comm="syz.8.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1652.158315][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1652.164156][T22119] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 1652.166288][ T29] audit: type=1400 audit(1776418608.590:1550): avc: denied { ioctl } for pid=27587 comm="syz.8.5665" path="socket:[121268]" dev="sockfs" ino=121268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1652.201982][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7 [ 1652.213866][T22119] airspy 5-1:0.0: Registered as swradio24 [ 1652.214437][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42942, setting to 1024 [ 1652.230859][T22119] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1652.239414][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1652.266073][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.281369][T22119] usb 5-1: USB disconnect, device number 46 [ 1652.312075][ T24] usb 6-1: Product: syz [ 1652.336631][ T24] usb 6-1: Manufacturer: syz [ 1652.348504][ T24] usb 6-1: SerialNumber: syz [ 1652.666202][ T29] audit: type=1400 audit(1776418609.090:1551): avc: denied { write } for pid=27575 comm="syz.5.5663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1653.024498][T27614] FAULT_INJECTION: forcing a failure. [ 1653.024498][T27614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1653.054782][T27614] CPU: 0 UID: 0 PID: 27614 Comm: syz.4.5668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1653.054811][T27614] Tainted: [L]=SOFTLOCKUP [ 1653.054816][T27614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1653.054826][T27614] Call Trace: [ 1653.054832][T27614] [ 1653.054839][T27614] dump_stack_lvl+0x100/0x190 [ 1653.054864][T27614] should_fail_ex.cold+0x5/0xa [ 1653.054884][T27614] ? prepare_alloc_pages+0x16d/0x5f0 [ 1653.054905][T27614] should_fail_alloc_page+0xeb/0x140 [ 1653.054932][T27614] prepare_alloc_pages+0x1f0/0x5f0 [ 1653.054952][T27614] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1653.054974][T27614] ? bpf_ksym_find+0x128/0x1c0 [ 1653.054990][T27614] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1653.055010][T27614] ? is_bpf_text_address+0x94/0x1a0 [ 1653.055024][T27614] ? kernel_text_address+0x8d/0x100 [ 1653.055041][T27614] ? __kernel_text_address+0xd/0x30 [ 1653.055061][T27614] ? unwind_get_return_address+0x59/0xa0 [ 1653.055085][T27614] ? arch_stack_walk+0xa6/0xf0 [ 1653.055115][T27614] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1653.055136][T27614] ? _parse_integer_limit+0x17f/0x1d0 [ 1653.055152][T27614] ? __pfx__kstrtoull+0x10/0x10 [ 1653.055167][T27614] ? look_up_lock_class+0x55/0x120 [ 1653.055178][T27614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1653.055194][T27614] ? policy_nodemask+0xed/0x4f0 [ 1653.055223][T27614] alloc_pages_mpol+0x1fb/0x540 [ 1653.055247][T27614] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1653.055270][T27614] ? __import_iovec+0x1d2/0x640 [ 1653.055287][T27614] ? avc_policy_seqno+0x9/0x20 [ 1653.055304][T27614] ? selinux_file_permission+0x8f/0x6d0 [ 1653.055321][T27614] alloc_pages_noprof+0x1a/0x160 [ 1653.055334][T27614] get_free_pages_noprof+0x10/0xb0 [ 1653.055359][T27614] sel_read_avc_hash_stats+0x26/0xa0 [ 1653.055386][T27614] ? __pfx_sel_read_avc_hash_stats+0x10/0x10 [ 1653.055409][T27614] vfs_readv+0x5d8/0x8d0 [ 1653.055430][T27614] ? __pfx_vfs_readv+0x10/0x10 [ 1653.055446][T27614] ? find_held_lock+0x2b/0x80 [ 1653.055465][T27614] ? ksys_write+0x190/0x250 [ 1653.055502][T27614] ? __fget_files+0x21f/0x3d0 [ 1653.055524][T27614] ? do_readv+0x13e/0x340 [ 1653.055544][T27614] do_readv+0x13e/0x340 [ 1653.055562][T27614] ? __pfx_do_readv+0x10/0x10 [ 1653.055578][T27614] ? rcu_is_watching+0x12/0xc0 [ 1653.055596][T27614] do_syscall_64+0x10b/0xf80 [ 1653.055607][T27614] ? clear_bhb_loop+0x40/0x90 [ 1653.055624][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.055642][T27614] RIP: 0033:0x7fd92939c819 [ 1653.055657][T27614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.055672][T27614] RSP: 002b:00007fd92a2d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1653.055688][T27614] RAX: ffffffffffffffda RBX: 00007fd929616090 RCX: 00007fd92939c819 [ 1653.055697][T27614] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005 [ 1653.055704][T27614] RBP: 00007fd92a2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.055710][T27614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.055717][T27614] R13: 00007fd929616128 R14: 00007fd929616090 R15: 00007ffcfa8614e8 [ 1653.055738][T27614] [ 1653.446624][T27602] binder: 27598:27602 ioctl c0306201 200000001a80 returned -14 [ 1654.417534][ T29] audit: type=1400 audit(1776418610.840:1552): avc: denied { map } for pid=27619 comm="syz.4.5670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=120190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1654.470308][ T29] audit: type=1400 audit(1776418610.870:1553): avc: denied { read write } for pid=27619 comm="syz.4.5670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=120190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1654.747952][T26867] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1654.966492][T26867] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1654.985855][T26867] usb 8-1: config 0 has no interface number 0 [ 1654.996933][T26867] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1655.125171][T26867] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1655.134867][T26867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.143527][T26867] usb 8-1: Product: syz [ 1655.150460][T26867] usb 8-1: Manufacturer: syz [ 1655.160171][T26867] usb 8-1: SerialNumber: syz [ 1655.228047][T26867] usb 8-1: config 0 descriptor?? [ 1655.336093][T26867] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1655.655932][ T29] audit: type=1400 audit(1776418612.070:1554): avc: denied { read } for pid=27615 comm="syz.7.5669" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1655.735499][ T29] audit: type=1400 audit(1776418612.160:1555): avc: denied { open } for pid=27615 comm="syz.7.5669" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1656.059014][ T29] audit: type=1400 audit(1776418612.450:1556): avc: denied { create } for pid=27615 comm="syz.7.5669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1656.079165][T27626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5669'. [ 1657.308276][T27577] syzkaller0: entered promiscuous mode [ 1657.324851][T27590] tipc: Enabling of bearer rejected, failed to enable media [ 1657.415914][ T24] usb 6-1: unit 206 not found! [ 1657.490528][T19912] block nbd0: Possible stuck request ffff8880284c7000: control (read@0,1024B). Runtime 330 seconds [ 1657.502396][T19912] block nbd0: Possible stuck request ffff8880284c71c0: control (read@1024,1024B). Runtime 330 seconds [ 1657.513981][T19912] block nbd0: Possible stuck request ffff8880284c7380: control (read@2048,1024B). Runtime 330 seconds [ 1657.525380][T19912] block nbd0: Possible stuck request ffff8880284c7540: control (read@3072,1024B). Runtime 330 seconds [ 1657.573286][ T29] audit: type=1400 audit(1776418614.000:1557): avc: denied { mount } for pid=27637 comm="syz.4.5674" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1657.615155][ T24] usb 6-1: USB disconnect, device number 72 [ 1657.662577][T21539] udevd[21539]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1657.704860][ T29] audit: type=1400 audit(1776418614.120:1558): avc: denied { create } for pid=27637 comm="syz.4.5674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1657.882861][ T29] audit: type=1400 audit(1776418614.310:1559): avc: denied { name_bind } for pid=27637 comm="syz.4.5674" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1657.955507][ T29] audit: type=1400 audit(1776418614.310:1560): avc: denied { ioctl } for pid=27637 comm="syz.4.5674" path="socket:[120220]" dev="sockfs" ino=120220 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1658.430590][T26867] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1658.579517][T26867] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1658.579546][T26867] usb 5-1: config 1 has no interface number 0 [ 1658.579584][T26867] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 1658.579632][T26867] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 1658.595920][T26867] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1658.595939][T26867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.595951][T26867] usb 5-1: Product: syz [ 1658.595960][T26867] usb 5-1: Manufacturer: syz [ 1658.595968][T26867] usb 5-1: SerialNumber: syz [ 1658.600908][T27641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1658.600979][T27641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1658.602236][T26867] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1658.837397][T26867] usb 5-1: USB disconnect, device number 47 [ 1659.067148][T27638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1661.287972][ T29] audit: type=1400 audit(1776418617.710:1561): avc: denied { getopt } for pid=27662 comm="syz.8.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1661.523601][T18244] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1661.740790][T18244] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1661.770130][T18244] usb 9-1: config 172 has an invalid interface number: 182 but max is 1 [ 1661.778609][T18244] usb 9-1: config 172 contains an unexpected descriptor of type 0x2, skipping [ 1661.801290][T18244] usb 9-1: config 172 has an invalid descriptor of length 30, skipping remainder of the config [ 1661.812116][T18244] usb 9-1: config 172 has 1 interface, different from the descriptor's value: 2 [ 1661.835930][T18244] usb 9-1: config 172 has no interface number 0 [ 1661.842338][T18244] usb 9-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8 [ 1661.864245][T18244] usb 9-1: config 172 interface 182 has no altsetting 0 [ 1661.874211][T18244] usb 9-1: string descriptor 0 read error: -22 [ 1661.880735][T18244] usb 9-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 1661.890395][T18244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.912810][T18244] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 1662.129247][T18244] usb 9-1: USB disconnect, device number 10 [ 1662.981123][T27669] FAULT_INJECTION: forcing a failure. [ 1662.981123][T27669] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.995716][T27669] CPU: 0 UID: 0 PID: 27669 Comm: syz.8.5681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1662.995744][T27669] Tainted: [L]=SOFTLOCKUP [ 1662.995750][T27669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1662.995759][T27669] Call Trace: [ 1662.995765][T27669] [ 1662.995771][T27669] dump_stack_lvl+0x100/0x190 [ 1662.995794][T27669] should_fail_ex.cold+0x5/0xa [ 1662.995816][T27669] ? lsm_blob_alloc+0x68/0x90 [ 1662.995842][T27669] should_failslab+0xc2/0x120 [ 1662.995866][T27669] __kmalloc_noprof+0xe0/0x850 [ 1662.995886][T27669] ? trace_kmalloc+0xe3/0x110 [ 1662.995913][T27669] lsm_blob_alloc+0x68/0x90 [ 1662.995936][T27669] security_sk_alloc+0x2d/0x290 [ 1662.995954][T27669] sk_prot_alloc+0x12a/0x2a0 [ 1662.995977][T27669] sk_alloc+0x36/0xe80 [ 1662.995994][T27669] bpf_prog_test_run_skb+0x4db/0x3540 [ 1662.996029][T27669] ? find_held_lock+0x2b/0x80 [ 1662.996053][T27669] ? __fget_files+0x121/0x3d0 [ 1662.996073][T27669] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1662.996097][T27669] ? fput+0x79/0x100 [ 1662.996115][T27669] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1662.996136][T27669] __sys_bpf+0x1725/0x4b90 [ 1662.996162][T27669] ? __pfx___sys_bpf+0x10/0x10 [ 1662.996182][T27669] ? proc_fail_nth_write+0x9f/0x220 [ 1662.996204][T27669] ? find_held_lock+0x2b/0x80 [ 1662.996231][T27669] ? find_held_lock+0x2b/0x80 [ 1662.996252][T27669] ? ksys_write+0x190/0x250 [ 1662.996273][T27669] ? ksys_write+0x190/0x250 [ 1662.996298][T27669] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1662.996315][T27669] ? kernel_write+0x643/0x6c0 [ 1662.996336][T27669] ? __fget_files+0x215/0x3d0 [ 1662.996362][T27669] ? fput+0x79/0x100 [ 1662.996379][T27669] ? ksys_write+0x1ac/0x250 [ 1662.996400][T27669] ? __pfx_ksys_write+0x10/0x10 [ 1662.996426][T27669] __x64_sys_bpf+0x7b/0xc0 [ 1662.996448][T27669] ? lockdep_hardirqs_on+0x78/0x100 [ 1662.996463][T27669] do_syscall_64+0x10b/0xf80 [ 1662.996477][T27669] ? clear_bhb_loop+0x40/0x90 [ 1662.996497][T27669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.996513][T27669] RIP: 0033:0x7fe56799c819 [ 1662.996527][T27669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.996542][T27669] RSP: 002b:00007fe5687cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1662.996559][T27669] RAX: ffffffffffffffda RBX: 00007fe567c15fa0 RCX: 00007fe56799c819 [ 1662.996570][T27669] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 1662.996580][T27669] RBP: 00007fe5687cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.996590][T27669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.996599][T27669] R13: 00007fe567c16038 R14: 00007fe567c15fa0 R15: 00007ffd3930a8f8 [ 1662.996621][T27669] [ 1663.280813][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.305595][T22119] usb 8-1: USB disconnect, device number 69 [ 1663.313934][T22119] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1663.429380][ T29] audit: type=1400 audit(1776418619.860:1562): avc: denied { name_bind } for pid=27672 comm="syz.5.5684" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1663.458001][ T29] audit: type=1400 audit(1776418619.860:1563): avc: denied { node_bind } for pid=27672 comm="syz.5.5684" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1663.520957][T27679] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5684'. [ 1663.590940][ T29] audit: type=1400 audit(1776418620.020:1564): avc: denied { unmount } for pid=27227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1663.898142][T22119] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1663.932808][ T29] audit: type=1400 audit(1776418620.360:1565): avc: denied { setopt } for pid=27682 comm="syz.8.5686" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1663.964171][T27692] pim6reg: entered allmulticast mode [ 1664.038488][T22119] usb 5-1: device descriptor read/64, error -71 [ 1664.291448][T22119] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1664.327406][ T29] audit: type=1400 audit(1776418620.750:1566): avc: denied { create } for pid=27693 comm="syz.7.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1664.550172][T27699] netlink: 'syz.7.5689': attribute type 9 has an invalid length. [ 1664.558447][T27699] netlink: 'syz.7.5689': attribute type 7 has an invalid length. [ 1664.568344][T27699] netlink: 'syz.7.5689': attribute type 8 has an invalid length. [ 1665.446693][T22119] usb 5-1: device descriptor read/64, error -71 [ 1665.737291][T22119] usb usb5-port1: attempt power cycle [ 1665.747795][ T29] audit: type=1400 audit(1776418620.780:1567): avc: denied { connect } for pid=27693 comm="syz.7.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1666.039818][ T29] audit: type=1400 audit(1776418620.780:1568): avc: denied { ioctl } for pid=27693 comm="syz.7.5689" path="socket:[120270]" dev="sockfs" ino=120270 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1666.048400][ T29] audit: type=1400 audit(1776418621.020:1569): avc: denied { read } for pid=27693 comm="syz.7.5689" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1666.048652][ T29] audit: type=1400 audit(1776418621.020:1570): avc: denied { open } for pid=27693 comm="syz.7.5689" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1666.048846][ T29] audit: type=1400 audit(1776418621.040:1571): avc: denied { ioctl } for pid=27693 comm="syz.7.5689" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1666.347976][T22119] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1666.388082][T22119] usb 5-1: device descriptor read/8, error -71 [ 1666.628236][T22119] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1666.671833][T22119] usb 5-1: device descriptor read/8, error -71 [ 1666.798078][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1666.799529][T22119] usb usb5-port1: unable to enumerate USB device [ 1666.848350][ T5938] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1666.969142][ T24] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1666.998530][ T24] usb 9-1: config 0 has no interface number 0 [ 1667.009607][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1667.018619][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5697'. [ 1667.044520][ T24] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1667.062001][ T5938] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.079505][T27721] netlink: 'syz.6.5697': attribute type 30 has an invalid length. [ 1667.093129][ T24] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1667.103769][T27721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5697'. [ 1667.125171][ T5938] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1667.140348][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.154351][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.168443][ T24] usb 9-1: Product: syz [ 1667.209886][ T24] usb 9-1: Manufacturer: syz [ 1667.214632][ T5938] usb 6-1: Product: syz [ 1667.221865][T27721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5697'. [ 1667.233693][ T5938] usb 6-1: Manufacturer: syz [ 1667.239012][ T24] usb 9-1: SerialNumber: syz [ 1667.243824][ T5938] usb 6-1: SerialNumber: syz [ 1667.249916][ T24] usb 9-1: config 0 descriptor?? [ 1667.282983][ T24] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 1667.497624][ T5938] ati_remote2 6-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1667.535801][ T5938] usb 6-1: USB disconnect, device number 73 [ 1668.077113][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5693'. [ 1668.119850][T27739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5701'. [ 1668.159083][T27742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5701'. [ 1668.470881][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1668.470899][ T29] audit: type=1400 audit(1776418624.900:1597): avc: denied { write } for pid=27745 comm="syz.5.5704" path="socket:[121440]" dev="sockfs" ino=121440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1668.657987][T26867] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1668.819454][T26867] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.850028][T26867] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.895120][T26867] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1668.958701][T26867] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1669.006016][T26867] usb 5-1: string descriptor 0 read error: -22 [ 1669.017306][T26867] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1669.027127][T26867] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1669.470343][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.515119][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.542248][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.580944][ T29] audit: type=1400 audit(1776418625.990:1598): avc: denied { create } for pid=27753 comm="syz.5.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1669.625471][ T5938] usb 9-1: USB disconnect, device number 11 [ 1669.668880][ T5938] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 1669.688039][ T29] audit: type=1400 audit(1776418626.050:1599): avc: denied { bind } for pid=27753 comm="syz.5.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1669.711064][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.724646][T27756] netlink: 'syz.5.5706': attribute type 1 has an invalid length. [ 1669.748292][T27756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1669.771052][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.794085][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.940503][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.949948][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.965154][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1669.976208][ T29] audit: type=1400 audit(1776418626.400:1600): avc: denied { write } for pid=27753 comm="syz.5.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1670.021192][T26867] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1670.128890][ T29] audit: type=1400 audit(1776418626.560:1601): avc: denied { create } for pid=27765 comm="syz.6.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1670.207379][T26867] lenovo 0003:17EF:6047.0014: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1670.477550][T27770] syzkaller1: entered promiscuous mode [ 1670.503942][T27770] syzkaller1: entered allmulticast mode [ 1670.565307][ T29] audit: type=1400 audit(1776418626.990:1602): avc: denied { ioctl } for pid=27743 comm="syz.4.5703" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=121477 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1670.725587][T26867] lenovo 0003:17EF:6047.0014: Fn-lock setting failed: -71 [ 1670.772395][T26867] lenovo 0003:17EF:6047.0014: Sensitivity setting failed: -71 [ 1670.796162][T26867] usb 5-1: USB disconnect, device number 52 [ 1670.949369][ T10] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1671.030765][T27766] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1671.118455][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1671.127385][ T10] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1671.146808][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.165923][ T10] usb 8-1: Product: syz [ 1671.173875][ T10] usb 8-1: Manufacturer: syz [ 1671.183126][ T10] usb 8-1: SerialNumber: syz [ 1671.193781][ T10] usb 8-1: config 0 descriptor?? [ 1671.332904][ T29] audit: type=1400 audit(1776418627.760:1603): avc: denied { write } for pid=27775 comm="syz.6.5711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1671.612101][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1671.654296][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1671.668705][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1671.678170][ T10] usb 8-1: media controller created [ 1671.696204][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1671.811417][T27773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.824768][T27773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.876140][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1671.894264][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1671.914499][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1671.965818][ T10] usb 8-1: USB disconnect, device number 70 [ 1672.033980][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1672.343730][ T29] audit: type=1400 audit(1776418628.770:1604): avc: denied { mount } for pid=27796 comm="syz.6.5717" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1672.526516][ T29] audit: type=1400 audit(1776418628.800:1605): avc: denied { remount } for pid=27796 comm="syz.6.5717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1672.560823][T27801] netlink: 'syz.6.5717': attribute type 29 has an invalid length. [ 1673.019095][T27804] tipc: Started in network mode [ 1673.040858][T27804] tipc: Node identity 520e86e09307, cluster identity 4711 [ 1673.074506][T27804] tipc: Enabled bearer , priority 0 [ 1673.106696][T27797] netlink: 'syz.6.5717': attribute type 29 has an invalid length. [ 1673.115362][ T29] audit: type=1400 audit(1776418629.550:1606): avc: denied { ioctl } for pid=27806 comm="syz.8.5720" path="socket:[120407]" dev="sockfs" ino=120407 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1673.239061][T27801] netlink: 508 bytes leftover after parsing attributes in process `syz.6.5717'. [ 1673.257237][T27805] syzkaller0: entered promiscuous mode [ 1673.262841][T27805] syzkaller0: entered allmulticast mode [ 1673.781998][T27810] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1673.795502][T27804] tipc: Resetting bearer [ 1673.841997][T27803] tipc: Resetting bearer [ 1674.090817][T27803] tipc: Disabling bearer [ 1674.184467][T26867] tipc: Node number set to 3238627040 [ 1674.357421][T27827] netlink: 'syz.4.5726': attribute type 74 has an invalid length. [ 1674.551067][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5724'. [ 1675.239724][T22119] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1675.418124][T22119] usb 5-1: Using ep0 maxpacket: 32 [ 1675.429680][T22119] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1675.442304][T22119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.468489][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1675.468505][ T29] audit: type=1400 audit(1776418631.890:1609): avc: denied { read write } for pid=27840 comm="syz.8.5729" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1675.543102][T22119] usb 5-1: Product: syz [ 1675.547479][T27841] Invalid logical block size (2) [ 1675.553260][T22119] usb 5-1: Manufacturer: syz [ 1675.560713][T22119] usb 5-1: SerialNumber: syz [ 1675.574559][T22119] usb 5-1: config 0 descriptor?? [ 1675.584627][ T29] audit: type=1400 audit(1776418631.890:1610): avc: denied { open } for pid=27840 comm="syz.8.5729" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1675.610378][ T5938] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1675.715795][ T29] audit: type=1400 audit(1776418631.970:1611): avc: denied { append } for pid=27840 comm="syz.8.5729" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1675.777698][ T29] audit: type=1400 audit(1776418632.070:1612): avc: denied { mounton } for pid=27840 comm="syz.8.5729" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1675.805003][ T5938] usb 8-1: Using ep0 maxpacket: 16 [ 1675.822241][ T5938] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1675.837006][ T29] audit: type=1400 audit(1776418632.070:1613): avc: denied { mount } for pid=27840 comm="syz.8.5729" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1675.862020][ T5938] usb 8-1: config 1 has an invalid interface number: 153 but max is 0 [ 1675.870767][ T5938] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.881802][ T5938] usb 8-1: config 1 has no interface number 0 [ 1675.918280][ T5938] usb 8-1: config 1 interface 153 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1675.942520][ T29] audit: type=1400 audit(1776418632.370:1614): avc: denied { set_context_mgr } for pid=27846 comm="syz.8.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1675.963099][ T5938] usb 8-1: config 1 interface 153 has no altsetting 0 [ 1675.970710][ T29] audit: type=1400 audit(1776418632.370:1615): avc: denied { listen } for pid=27846 comm="syz.8.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1675.992543][ T29] audit: type=1400 audit(1776418632.370:1616): avc: denied { accept } for pid=27846 comm="syz.8.5731" lport=54644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1676.024773][ T5938] usb 8-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=cc.c5 [ 1676.034039][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.040869][T22119] airspy 5-1:0.0: Board ID: 00 [ 1676.042301][ T5938] usb 8-1: Product: syz [ 1676.052354][ T30] INFO: task udevd:21575 blocked for more than 143 seconds. [ 1676.067119][ T30] Tainted: G L syzkaller #0 [ 1676.083966][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1676.095929][ T5938] usb 8-1: Manufacturer: syz [ 1676.102288][ T5938] usb 8-1: SerialNumber: syz [ 1676.106999][ T30] task:udevd state:D stack:22416 pid:21575 tgid:21575 ppid:5186 task_flags:0x400140 flags:0x00080002 [ 1676.120517][T22119] airspy 5-1:0.0: Firmware version: [ 1676.120851][ T30] Call Trace: [ 1676.132601][ T30] [ 1676.136411][ T30] __schedule+0x10e9/0x6820 [ 1676.149776][ T30] ? __pfx___schedule+0x10/0x10 [ 1676.154921][ T30] ? find_held_lock+0x2b/0x80 [ 1676.160360][ T30] ? schedule+0x2bf/0x390 [ 1676.167277][ T30] schedule+0xdd/0x390 [ 1676.172436][ T30] io_schedule+0x8a/0xf0 [ 1676.176868][ T30] folio_wait_bit_common+0x414/0xa70 [ 1676.182519][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 1676.190556][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1676.199639][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1676.206491][ T30] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 1676.219089][ T30] do_read_cache_folio+0x3bc/0x6b0 [ 1676.224623][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1676.232080][ T30] read_part_sector+0xd1/0x370 [ 1676.237433][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1676.244371][ T30] adfspart_check_POWERTEC+0x8a/0x630 [ 1676.250959][ T29] audit: type=1400 audit(1776418632.670:1617): avc: denied { bind } for pid=27849 comm="syz.8.5732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1676.271524][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1676.277743][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1676.284770][ T29] audit: type=1400 audit(1776418632.680:1618): avc: denied { listen } for pid=27849 comm="syz.8.5732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1676.308712][ T30] bdev_disk_changed+0x7a3/0x1250 [ 1676.313928][ T30] ? nbd_open+0x320/0x700 [ 1676.325625][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1676.331878][ T30] blkdev_get_whole+0x187/0x290 [ 1676.455117][ T30] bdev_open+0x2c7/0xe40 [ 1676.467990][ T30] blkdev_open+0x34e/0x4f0 [ 1676.474868][ T30] do_dentry_open+0x6d8/0x1660 [ 1676.953998][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1676.964518][ T30] vfs_open+0x82/0x3f0 [ 1676.974781][ T30] path_openat+0x208c/0x31a0 [ 1677.146064][T27827] fuse: Unknown parameter '0x0000000000000008' [ 1677.176080][ T30] ? __pfx_path_openat+0x10/0x10 [ 1677.182420][ T30] do_file_open+0x20e/0x430 [ 1677.188076][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1677.195831][ T30] ? alloc_fd+0x476/0x790 [ 1677.200365][ T30] ? do_getname+0x191/0x390 [ 1677.204946][ T30] do_sys_openat2+0x10d/0x1e0 [ 1677.448644][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1677.462413][ T30] ? __sys_recvmsg+0x18c/0x220 [ 1677.502076][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 1677.525156][T22119] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 1677.532408][ T30] __x64_sys_openat+0x12d/0x210 [ 1677.541095][T22119] airspy 5-1:0.0: Registered as swradio24 [ 1677.548437][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1677.561866][T22119] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1677.577913][ T30] ? rcu_is_watching+0x12/0xc0 [ 1677.582834][ T30] do_syscall_64+0x10b/0xf80 [ 1677.592893][ T30] ? clear_bhb_loop+0x40/0x90 [ 1677.603134][T22119] usb 5-1: USB disconnect, device number 53 [ 1677.611645][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.636873][ T30] RIP: 0033:0x7f496c4a7407 [ 1677.650398][ T30] RSP: 002b:00007ffddc5a6a60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1677.674417][ T30] RAX: ffffffffffffffda RBX: 00007f496cba9880 RCX: 00007f496c4a7407 [ 1677.695991][ T30] RDX: 00000000000a0800 RSI: 0000562e0f212180 RDI: ffffffffffffff9c [ 1677.724960][ T30] RBP: 0000562e0efbc2c0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.743124][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562e0f215cb0 [ 1677.770277][ T30] R13: 0000562e0f1f78d0 R14: 0000000000000000 R15: 0000562e0f215cb0 [ 1677.791505][ T30] [ 1677.796136][ T30] [ 1677.796136][ T30] Showing all locks held in the system: [ 1677.806482][ T30] 1 lock held by khungtaskd/30: [ 1677.808677][ T5938] hub 8-1:1.153: bad descriptor, ignoring hub [ 1677.814122][ T30] #0: ffffffff8e7e6ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1677.830232][ T30] 2 locks held by getty/5572: [ 1677.834653][ T5938] hub 8-1:1.153: probe with driver hub failed with error -5 [ 1677.834952][ T30] #0: ffff8880343400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1677.845757][ T5938] usb 8-1: palm_os_4_probe - error -71 getting connection info [ 1677.854813][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1677.862431][ T5938] visor 8-1:1.153: Handspring Visor / Palm OS converter detected [ 1677.872320][ T30] 10 locks held by kworker/1:7/5938: [ 1677.881874][ T5938] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1677.884861][ T30] 4 locks held by udevd/21539: [ 1677.900846][ T5938] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1677.901537][ T30] #0: ffff88803687f638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1677.922974][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2d69/0x6820 [ 1677.935776][ T30] #2: ffffffff9b223e48 (&____s->seqcount#2){----}-{0:0}, at: clockevents_program_event+0x23e/0x7e0 [ 1677.941580][ T5938] usb 8-1: USB disconnect, device number 71 [ 1677.974550][ T30] #3: ffffffff8e7e6ee0 (rcu_read_lock){....}-{1:3}, at: ep_pm_stay_awake_rcu+0x21/0x270 [ 1677.975627][ T5938] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1677.984577][ T30] 1 lock held by udevd/21575: [ 1677.984594][ T30] #0: ffff888027f86350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1677.984669][ T30] 2 locks held by syz.0.5385/26493: [ 1677.984679][ T30] #0: ffff88802bc5e0d8 (&type->s_umount_key#96/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1677.984739][ T30] #1: ffff888027f86350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1677.984793][ T30] 3 locks held by kworker/0:6/26867: [ 1677.984804][ T30] #0: ffff88813feaf140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1677.984851][ T30] #1: ffffc9000f03fd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1677.984903][ T30] #2: ffffffff8e7f28f8 (rcu_state.barrier_mutex){+.+.}-{4:4} [ 1678.001771][ T5938] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1678.010398][ T30] , at: rcu_barrier+0x48/0x6d0 [ 1678.083898][ T30] [ 1678.086928][ T30] ============================================= [ 1678.086928][ T30] [ 1678.122489][ T5938] visor 8-1:1.153: device disconnected [ 1678.152764][ T30] NMI backtrace for cpu 0 [ 1678.152782][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1678.152816][ T30] Tainted: [L]=SOFTLOCKUP [ 1678.152821][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1678.152831][ T30] Call Trace: [ 1678.152838][ T30] [ 1678.152844][ T30] dump_stack_lvl+0x100/0x190 [ 1678.152867][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1678.152888][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1678.152910][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1678.152932][ T30] sys_info+0x141/0x190 [ 1678.152949][ T30] watchdog+0xd18/0x1040 [ 1678.152971][ T30] ? __pfx_watchdog+0x10/0x10 [ 1678.152986][ T30] ? __kthread_parkme+0x18c/0x230 [ 1678.153010][ T30] ? kthread+0x13a/0x450 [ 1678.153025][ T30] ? __pfx_watchdog+0x10/0x10 [ 1678.153041][ T30] kthread+0x370/0x450 [ 1678.153056][ T30] ? __pfx_kthread+0x10/0x10 [ 1678.153076][ T30] ret_from_fork+0x72b/0xd50 [ 1678.153103][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1678.153125][ T30] ? __switch_to+0x800/0x1100 [ 1678.153150][ T30] ? __pfx_kthread+0x10/0x10 [ 1678.153169][ T30] ret_from_fork_asm+0x1a/0x30 [ 1678.153204][ T30] [ 1678.153210][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1678.280857][ C1] NMI backtrace for cpu 1 [ 1678.280873][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1678.280892][ C1] Tainted: [L]=SOFTLOCKUP [ 1678.280896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1678.280904][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1678.280929][ C1] Code: 96 8a 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 cc 15 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1678.280942][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 1678.280954][ C1] RAX: 0000000008bfb793 RBX: ffff88801e6f2500 RCX: ffffffff8b95c045 [ 1678.280963][ C1] RDX: 0000000000000000 RSI: ffffffff8df4de55 RDI: ffffffff8c1be760 [ 1678.280971][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67ad [ 1678.280979][ C1] R10: ffff8880b8533d6b R11: 0000000000000000 R12: 0000000000000001 [ 1678.280987][ C1] R13: ffffed1003cde4a0 R14: 0000000000000001 R15: ffffffff90db9010 [ 1678.280996][ C1] FS: 0000000000000000(0000) GS:ffff8881243f8000(0000) knlGS:0000000000000000 [ 1678.281010][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1678.281019][ C1] CR2: 00007fd9295e92f8 CR3: 000000002a661000 CR4: 00000000003526f0 [ 1678.281027][ C1] Call Trace: [ 1678.281033][ C1] [ 1678.281038][ C1] default_idle+0x9/0x10 [ 1678.281052][ C1] default_idle_call+0x6c/0xb0 [ 1678.281065][ C1] do_idle+0x464/0x590 [ 1678.281086][ C1] ? __pfx_do_idle+0x10/0x10 [ 1678.281102][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 1678.281124][ C1] cpu_startup_entry+0x4f/0x60 [ 1678.281142][ C1] start_secondary+0x21d/0x2d0 [ 1678.281156][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1678.281172][ C1] common_startup_64+0x13e/0x148 [ 1678.281194][ C1] [ 1678.467734][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1678.474605][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1678.485258][ T30] Tainted: [L]=SOFTLOCKUP [ 1678.489570][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1678.499598][ T30] Call Trace: [ 1678.502857][ T30] [ 1678.505764][ T30] dump_stack_lvl+0x100/0x190 [ 1678.510423][ T30] vpanic+0x552/0x970 [ 1678.514382][ T30] ? __pfx_vpanic+0x10/0x10 [ 1678.518863][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1678.525000][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1678.531138][ T30] panic+0xd1/0xe0 [ 1678.534834][ T30] ? __pfx_panic+0x10/0x10 [ 1678.539233][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1678.545366][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1678.551498][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1678.557633][ T30] ? watchdog.cold+0x1a0/0x1d2 [ 1678.562373][ T30] ? watchdog+0xd28/0x1040 [ 1678.566768][ T30] watchdog.cold+0x1b1/0x1d2 [ 1678.571358][ T30] ? __pfx_watchdog+0x10/0x10 [ 1678.576015][ T30] ? __kthread_parkme+0x18c/0x230 [ 1678.581035][ T30] ? kthread+0x13a/0x450 [ 1678.585259][ T30] ? __pfx_watchdog+0x10/0x10 [ 1678.590022][ T30] kthread+0x370/0x450 [ 1678.594075][ T30] ? __pfx_kthread+0x10/0x10 [ 1678.598643][ T30] ret_from_fork+0x72b/0xd50 [ 1678.603211][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1678.608300][ T30] ? __switch_to+0x800/0x1100 [ 1678.612995][ T30] ? __pfx_kthread+0x10/0x10 [ 1678.617579][ T30] ret_from_fork_asm+0x1a/0x30 [ 1678.622337][ T30] [ 1678.625608][ T30] Kernel Offset: disabled [ 1678.629923][ T30] Rebooting in 86400 seconds..