last executing test programs: 8m52.420246217s ago: executing program 32 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000100), 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10040054}, 0x4048090) 8m37.427951508s ago: executing program 33 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000100), 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10040054}, 0x4048090) 7m27.517866899s ago: executing program 34 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000100), 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10040054}, 0x4048090) 3m42.292971466s ago: executing program 5 (id=1378): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m42.268922333s ago: executing program 6 (id=1379): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m40.13216149s ago: executing program 1 (id=1382): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r0, 0x0, 0x578410eb) 3m39.329089305s ago: executing program 5 (id=1383): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m39.139817096s ago: executing program 1 (id=1384): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m34.723159332s ago: executing program 1 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m34.602390265s ago: executing program 1 (id=1390): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m34.075514253s ago: executing program 2 (id=1391): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = eventfd2(0x0, 0x1) r7 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000101, 0x8}]}) 3m33.927420681s ago: executing program 2 (id=1392): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m33.092003584s ago: executing program 6 (id=1393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000180)="63cb0cde3b0065bd6a52e044fed6e0", 0xf}, {&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b999180239703919916888b9c029bf01ba002fe850c80224ce41ecfc69b325e445b22ebabcab4c40b88e66fd8530142a9391fb1b1271b752e9a7834166d285812461dfcc881ba3b52d05d6cceef17dabe6166706a77d03eaf40c1a1ac58b8cce8de40b2beb0c2560f2c00b3f78aa8319ae76308bee491373", 0xbe}, {&(0x7f00000026c0)="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", 0xf00}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e0264", 0xc3}, {&(0x7f0000003800)="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", 0xfe}], 0x5}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003e00)=[{&(0x7f00000039c0)="a223a5500022092550001d6d0bf45f1825aaed1154f2d476b3e21290840042364d1dff3e03485aa1ebcac4e464968b6f46fa5e7e1252c6b9d2541712649b10f83e98cb1b2051acf176b814c60c970868ba45a1cf8d0ebe71", 0x58}, {0x0}, {&(0x7f0000003ac0)="6aab4b923b6d63a578b58746c46d0f0f00bf6b4cfc3320e3f5e47cf2ed17f9908a681aad5a2238c213346b2ba07a8dd7c2a5ded10f49b080ff01413067656ee7a2f50799c5c33d8d2ebc71745d06c3614e2bb96c43ac5175c605d6b4ad18a73bd7b6376af45aefc874a9fc749d99c3727057f456a54b954c1d3be1ff9051bf5f997b2c55ce86a55d3a1430699822cf0a3fac9b3bfbbf2c39d39595b0ec8ab10cb84521510c74124971d2f6aa33a70bad1146366c0b5a41755a415c3f307c0f07925d900ba81738d25e18aa1cf23cc65bce", 0xd1}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x278}}], 0x2, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000c00)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$binfmt_script(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m33.061696799s ago: executing program 5 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r1, &(0x7f0000004040)={0x2020}, 0xcf8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0), 0xed) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0x80045515, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e070308049d"], 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c600000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES64=r6], 0x10) 3m32.693610542s ago: executing program 2 (id=1396): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) 3m32.506850621s ago: executing program 2 (id=1397): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m32.251721097s ago: executing program 5 (id=1398): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202000200"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/94, 0x5e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001180), 0xc00, 0x0) pipe(&(0x7f00000001c0)) r6 = open(&(0x7f0000000280)='.\x00', 0x200, 0x28) fcntl$notify(r6, 0x402, 0x3f) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000001100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x1, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x27}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x0, 0xb, 0x17078950851d57a6, "c331ca36c188000000000002b61d000000000000070200", 0x30383653}) ioctl(r4, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 3m30.167226839s ago: executing program 6 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m30.115594413s ago: executing program 1 (id=1401): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m29.027358595s ago: executing program 5 (id=1403): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m28.026345767s ago: executing program 6 (id=1404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000180)="63cb0cde3b0065bd6a52e044fed6e0", 0xf}, {&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b999180239703919916888b9c029bf01ba002fe850c80224ce41ecfc69b325e445b22ebabcab4c40b88e66fd8530142a9391fb1b1271b752e9a7834166d285812461dfcc881ba3b52d05d6cceef17dabe6166706a77d03eaf40c1a1ac58b8cce8de40b2beb0c2560f2c00b3f78aa8319ae76308bee491373", 0xbe}, {&(0x7f00000026c0)="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", 0xffe}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e0264", 0xc3}, {&(0x7f0000003800)="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", 0xfe}], 0x5}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003e00)=[{&(0x7f00000039c0)="a223a5500022092550001d6d0bf45f1825aaed1154f2d476b3e21290840042364d1dff3e03485aa1ebcac4e464968b6f46fa5e7e1252c6b9d2541712649b10f83e98cb1b2051acf176b814c60c970868ba45a1cf8d0ebe71", 0x58}, {0x0}, {&(0x7f0000003ac0)="6aab4b923b6d63a578b58746c46d0f0f00bf6b4cfc3320e3f5e47cf2ed17f9908a681aad5a2238c213346b2ba07a8dd7c2a5ded10f49b080ff01413067656ee7a2f50799c5c33d8d2ebc71745d06c3614e2bb96c43ac5175c605d6b4ad18a73bd7b6376af45aefc874a9fc749d99c3727057f456a54b954c1d3be1ff9051bf5f997b2c55ce86a55d3a1430699822cf0a3fac9b3bfbbf2c39d39595b0ec8ab10cb84521510c74124971d2f6aa33a70bad1146366c0b5a41755a415c3f307c0f07925d900ba81738d25e18aa1cf23cc65bce", 0xd1}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x278}}], 0x2, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000c00)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$binfmt_script(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m27.83406621s ago: executing program 1 (id=1406): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m26.396345875s ago: executing program 5 (id=1408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000180)="63cb0cde3b0065bd6a52e044fed6e0", 0xf}, {&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b999180239703919916888b9c029bf01ba002fe850c80224ce41ecfc69b325e445b22ebabcab4c40b88e66fd8530142a9391fb1b1271b752e9a7834166d285812461dfcc881ba3b52d05d6cceef17dabe6166706a77d03eaf40c1a1ac58b8cce8de40b2beb0c2560f2c00b3f78aa8319ae76308bee491373", 0xbe}, {&(0x7f00000026c0)="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", 0xffe}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e0264", 0xc3}, {&(0x7f0000003800)="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", 0xfe}], 0x5}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003e00)=[{&(0x7f00000039c0)="a223a5500022092550001d6d0bf45f1825aaed1154f2d476b3e21290840042364d1dff3e03485aa1ebcac4e464968b6f46fa5e7e1252c6b9d2541712649b10f83e98cb1b2051acf176b814c60c970868ba45a1cf8d0ebe71", 0x58}, {0x0}, {&(0x7f0000003ac0)="6aab4b923b6d63a578b58746c46d0f0f00bf6b4cfc3320e3f5e47cf2ed17f9908a681aad5a2238c213346b2ba07a8dd7c2a5ded10f49b080ff01413067656ee7a2f50799c5c33d8d2ebc71745d06c3614e2bb96c43ac5175c605d6b4ad18a73bd7b6376af45aefc874a9fc749d99c3727057f456a54b954c1d3be1ff9051bf5f997b2c55ce86a55d3a1430699822cf0a3fac9b3bfbbf2c39d39595b0ec8ab10cb84521510c74124971d2f6aa33a70bad1146366c0b5a41755a415c3f307c0f07925d900ba81738d25e18aa1cf23cc65bce", 0xd1}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x278}}], 0x2, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000c00)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$binfmt_script(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m25.737956186s ago: executing program 2 (id=1410): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m25.334069213s ago: executing program 6 (id=1411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r5, r0, 0x0, 0x578410eb) 3m24.159375344s ago: executing program 2 (id=1413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b999180239703919916888b9c029bf01ba002fe850c80224ce41ecfc69b325e445b22ebabcab4c40b88e66fd8530142a9391fb1b1271b752e9a7834166d285812461dfcc881ba3b52d05d6cceef17dabe6166706a77d03eaf40c1a1ac58b8cce8de40b2beb0c2560f2c00b3f78aa8319ae76308bee491373", 0xbe}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e0264", 0xc3}, {&(0x7f0000003800)="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", 0xfe}], 0x4}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003e00)=[{&(0x7f00000039c0)="a223a5500022092550001d6d0bf45f1825aaed1154f2d476b3e21290840042364d1dff3e03485aa1ebcac4e464968b6f46fa5e7e1252c6b9d2541712649b10f83e98cb1b2051acf176b814c60c970868ba45a1cf8d0ebe71", 0x58}, {0x0}, {&(0x7f0000003ac0)="6aab4b923b6d63a578b58746c46d0f0f00bf6b4cfc3320e3f5e47cf2ed17f9908a681aad5a2238c213346b2ba07a8dd7c2a5ded10f49b080ff01413067656ee7a2f50799c5c33d8d2ebc71745d06c3614e2bb96c43ac5175c605d6b4ad18a73bd7b6376af45aefc874a9fc749d99c3727057f456a54b954c1d3be1ff9051bf5f997b2c55ce86a55d3a1430699822cf0a3fac9b3bfbbf2c39d39595b0ec8ab10cb84521510c74124971d2f6aa33a70bad1146366c0b5a41755a415c3f307c0f07925d900ba81738d25e18aa1cf23cc65bce", 0xd1}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x278}}], 0x2, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000c00)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$binfmt_script(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m24.103397354s ago: executing program 6 (id=1414): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = eventfd2(0x0, 0x1) r7 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000180)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}]}) 3m11.88956624s ago: executing program 35 (id=1406): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e000000f800000000000000fb6b0607985355517cec46b9d1cdd31f316adbc772423cf1d29308b2e07e1b9b5b4b2611d8184e5a323cb94e25e06a"], 0x290020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000021c0)=0x1c) io_setup(0x7f, &(0x7f0000000080)) eventfd2(0x1805, 0x1) 3m10.71974642s ago: executing program 36 (id=1408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000180)="63cb0cde3b0065bd6a52e044fed6e0", 0xf}, {&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b999180239703919916888b9c029bf01ba002fe850c80224ce41ecfc69b325e445b22ebabcab4c40b88e66fd8530142a9391fb1b1271b752e9a7834166d285812461dfcc881ba3b52d05d6cceef17dabe6166706a77d03eaf40c1a1ac58b8cce8de40b2beb0c2560f2c00b3f78aa8319ae76308bee491373", 0xbe}, {&(0x7f00000026c0)="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", 0xffe}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e0264", 0xc3}, {&(0x7f0000003800)="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", 0xfe}], 0x5}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003e00)=[{&(0x7f00000039c0)="a223a5500022092550001d6d0bf45f1825aaed1154f2d476b3e21290840042364d1dff3e03485aa1ebcac4e464968b6f46fa5e7e1252c6b9d2541712649b10f83e98cb1b2051acf176b814c60c970868ba45a1cf8d0ebe71", 0x58}, {0x0}, {&(0x7f0000003ac0)="6aab4b923b6d63a578b58746c46d0f0f00bf6b4cfc3320e3f5e47cf2ed17f9908a681aad5a2238c213346b2ba07a8dd7c2a5ded10f49b080ff01413067656ee7a2f50799c5c33d8d2ebc71745d06c3614e2bb96c43ac5175c605d6b4ad18a73bd7b6376af45aefc874a9fc749d99c3727057f456a54b954c1d3be1ff9051bf5f997b2c55ce86a55d3a1430699822cf0a3fac9b3bfbbf2c39d39595b0ec8ab10cb84521510c74124971d2f6aa33a70bad1146366c0b5a41755a415c3f307c0f07925d900ba81738d25e18aa1cf23cc65bce", 0xd1}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="300000000000000029000000040000001602000000000000c910fe80000000000000000000000000002400000000000014000000000000002900000034000000faffffff0000000038000000000000002900000039000000020400bb00000000fe8000000000000000000000000000aafc010000000000000000000000000001580000000000000029000000360000003c070000000000000103000000c2040000001601010007200000000206f87a6dfcffffffffffffff0000040000000000f900000000000000c20400000007c20400000100000000001400000000000000290000000800000080000000000000001400000000000000290000000b00000000000009000000001400000000000000290000000b000000"], 0x278}}], 0x2, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000c00)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$binfmt_script(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m8.611583064s ago: executing program 37 (id=1413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b999180239703919916888b9c029bf01ba002fe850c80224ce41ecfc69b325e445b22ebabcab4c40b88e66fd8530142a9391fb1b1271b752e9a7834166d285812461dfcc881ba3b52d05d6cceef17dabe6166706a77d03eaf40c1a1ac58b8cce8de40b2beb0c2560f2c00b3f78aa8319ae76308bee491373", 0xbe}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e0264", 0xc3}, {&(0x7f0000003800)="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", 0xfe}], 0x4}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003e00)=[{&(0x7f00000039c0)="a223a5500022092550001d6d0bf45f1825aaed1154f2d476b3e21290840042364d1dff3e03485aa1ebcac4e464968b6f46fa5e7e1252c6b9d2541712649b10f83e98cb1b2051acf176b814c60c970868ba45a1cf8d0ebe71", 0x58}, {0x0}, {&(0x7f0000003ac0)="6aab4b923b6d63a578b58746c46d0f0f00bf6b4cfc3320e3f5e47cf2ed17f9908a681aad5a2238c213346b2ba07a8dd7c2a5ded10f49b080ff01413067656ee7a2f50799c5c33d8d2ebc71745d06c3614e2bb96c43ac5175c605d6b4ad18a73bd7b6376af45aefc874a9fc749d99c3727057f456a54b954c1d3be1ff9051bf5f997b2c55ce86a55d3a1430699822cf0a3fac9b3bfbbf2c39d39595b0ec8ab10cb84521510c74124971d2f6aa33a70bad1146366c0b5a41755a415c3f307c0f07925d900ba81738d25e18aa1cf23cc65bce", 0xd1}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x278}}], 0x2, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000c00)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$binfmt_script(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m8.426732499s ago: executing program 38 (id=1414): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = eventfd2(0x0, 0x1) r7 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000180)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}]}) 2m3.3924159s ago: executing program 3 (id=1573): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r0, {0xfff2, 0x2}, {0xa, 0xfff3}, {0xfff1, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x7, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 2m3.253952994s ago: executing program 3 (id=1574): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202000200"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/94, 0x5e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001180), 0xc00, 0x0) pipe(&(0x7f00000001c0)) r6 = open(&(0x7f0000000280)='.\x00', 0x200, 0x28) fcntl$notify(r6, 0x402, 0x3f) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000001100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x1, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x27}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) ioctl(r4, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 2m0.933570662s ago: executing program 3 (id=1581): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000001c0)={&(0x7f00000000c0)=""/217, 0xd9}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000600), 0x4000, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000180)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x26, 0x1, 0x0, 0x0, "0db1894ca54629e14f57508684cd31c6122aff1bf1da985c9c641428638a261f7466166229243e8c87941232fd03933fc37122008620a402976f01d307ed4b45"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 1m59.07503263s ago: executing program 3 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_80211_join_ibss(&(0x7f0000000340)='wlan1\x00', 0x0, 0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x4006f) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000598206009ef744e5a1d2e42a910dbc62dd363c000a0a03000000000000000000057798e980dac6b7565e1ff31aec3cae9e45c1f46cda766adc43ace8569929b02e79770903660e5770ffbed9aa85"], 0x20}}, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) syz_init_net_socket$bt_l2cap(0x1f, 0xa878d1be589a4b8b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 1m57.946788318s ago: executing program 3 (id=1595): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private2, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x6, 0x0, 0x0, 0xf90, 0x0, 0x5, 0xfffffffffffffd33}, {0x800b, 0x3, 0x0, 0x8000000000000000}, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x100000}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3503, 0x1, 0x2, 0x0, 0x80000}}, 0xe8) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000340)={0xb, 0x29, 0x2, {0x1}}, 0xb) statx(0xffffffffffffff9c, &(0x7f0000002b80)='my_sys\x00', 0x4000, 0x20, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r5, &(0x7f00000001c0)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x100, 0x1, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002e00)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000002f00)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000002f40)='my_sys\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003000)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000003100)=0xe8) sendmmsg$unix(r5, &(0x7f0000003280)=[{{&(0x7f0000000100)=@file={0x1, 'my_sys\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="ef46adecd5922cdbf8f74f19fc1b2ccb5fdf13dd41f26e770aa04a30108e32b42f7c9421dd217c8520b68a401c857b91cb808e6cd6cc6e69cb4212bcd6c208e3626628eae49900616aba09b2e5a76f46a3e93268909fc22ddb18f39b343307135592d2734052fbc89f0cf0283e27b84a8e1eec279468ce28d0291bdc517e4f025bc2468f8eb3f7e1bc9aa78a76b54da82b612142d2804f1861d43ea2ff6a784aff8b3b9389d200c718ee39a6823410a9432a94736ae7de74ee34cf63bd8f8a2759c1e6776c81ed0ecf77a98ecc33c18a12fd1fe45f97291643aabacf45ee", 0xde}], 0x1, 0x0, 0x0, 0x808d}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)="a86d20bcb616964f1644d3983d0e7e90", 0x10}, {&(0x7f00000006c0)="e1bd9502a827009ec83d5622b103535144fed265668d971c489948d74811ec5585973ce0be905eae043eff7f6bb69f3312540d29475798dde859e39ce2d69c7dbd1f9e203e8613e85e8e4e6deaf9197a83a2a8ed2d5d3cbdfdbb073050249a02230b4378bd58f7be8371e202baf32fbfa65f8bb36fcbc4c78835db0ecbd6ec23d9256168bbf951dd0e98cae1c7e3da91e96c97cc7bdf9d4654e87a33c3dfdf087fc78342b1a6eeef9bbc64ea2bd6e4bb7f22ecb5faded81e01c5bdf50a5836b3369f0e2e8ed11c0c822a987b21b09e67acb7e5244f71", 0xd6}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x44810}}, {{&(0x7f0000000a40)=@file={0x1, 'my_sys\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000ac0)="9e4852bd556e6827255ddd0eed3ab8a53b45110345322589ce5e201e1292c60574be3b8856822701782ab5ccf09e4e727b530caac89d4e43fac4678a0b998142b20ab11b25d47aa86ea8a716e703c0043591312ec4c4c8ca59f97e694a40b5f883ba939c2f5f41e465657ac7ce006d7f000bbfdff50a178fc5f7f1d0e8f033399f38edd8ffb078aeaf5a9cda97d0c63b571a741af822f24920c59f1b6df895418bc582a521e3985ab01df47e227dae8db7b2e6a7745d45b6a43696ed387c", 0xbe}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="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", 0xff}, {&(0x7f0000000cc0)="10bd3b6632f2d89dc1a6233ceb512a25f37d8a8450bf7af676d3c73ede1c73b0e132c7ace8c225abb2dc0278c88cb149e8a39ed208cbd9ae05650c994a364938b78098ace06e2c7dd3bcecbb7737a72cd36129c7727db0cf09abfbfbf892859741912904028fb2832ae7949e614df894f34b413a0804c34bc7ea98d9d32797b5303b1c8591532983b8e8e5796c400de32dbdb43def8dbe078c9c0b3380e2b39af15a943af2c7813d1178ba7fabdd3e9e3c1c515d0e8201d5049062aa8b04e9cb207a81", 0xc3}, {&(0x7f0000000dc0)="f9a90a9c72a9d0dd2c93b41f8e424c8f649bdab3f159deb4b4bd", 0x1a}], 0x5, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000e80)="ddc64291a403a1f23f0e1fd9cd079cbeadab1e927c2c148888384610416f5eecf2b18352d5b52c361ae30cd761de1114eb01a2d4a3d8275fe78f4031ceee3c59d73f66f901f866c755babaec3ea1851ee96f49a499c092502a49883cbc17f241bf948eee5bb72e9a18ebda6c61bb99bb744b6f01e27126188d53d508b05fa498e22013c1dc6216c96d4efa1e4862e953a91c0054f877a5a445e5f6", 0x9b}, {&(0x7f0000000f40)="7f0e9108eee5a756d63e569e68c4c39e0312c04ea46e6f35e8fe537f2a982495d0d9d04cf898fa8332af148e88f74444b534c8857bbd445dc3aa25a1786cbe4057b8312602a071cb49b450eb7248e6d45a025f7df4bf70aec1df645e625dbb767e9e117fe9f4528be5c5a51c557f9fb0400b15901435ce947210023e2bc348d0b50362ccad756c35556fe3205965ad6784ee3063d54c2c9739f850b1e4f37f256df057383a06acaca13daa156358fe3b073ed39e89701c8bed353136", 0xbc}, {&(0x7f0000001000)="5f1fd1fa98870f3f5a79cb29bb8aecdbc81499ad82a44b2ac2e92173b6ad808f9da7eae59a3eed8b67c2e59283caa8d0ee3ec10c92014688884ad8ef1800d721c12a7505f305a3f2ca7f717ef3ea5bb21106b657c9c06f7d5437456ad47224b07f153bbaec22059737a765af2388d694208d635e678e8ac2ff86c16297b9708ce3a5022d5c79c7fe7f65c86d7068630597137e4fe6573dbdf65c9cded3a35a2d5f419b1043abb173ad9e4e9e6bebff68eff66052ac7044898c7ead47e32ece391e5c1d4ab3cd31872ba3f511d842bc25f25bbaec2eec27f6fcba70698c2bf6d75637621bc417f4da6ee3c85ceb8c98e5d80422a515", 0xf5}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)='Qe', 0x2}, {&(0x7f0000002140)="c06ec8839d031adf32c95a4fc5a07ec7149ef9a971b5f429766488ab366ca7b9863707864f0ed38bd233c1d44c5855afec21972f52fcc40c0c173744a687427c10dc52b05410a098cdb05b4e23d41095b3913351d4fe8b927bb4010efa1c25327236dfbf65f223f5a88257ca9df47e132dd9fae57ed6cdb60e55916ca083457e2e7e60d6c0585f37bf05ea402053a7dae111fe683d8fcd1dc8d7664940a40e52b24e622d0d73ad4f1f0e05adb5f4170ebf957bb71805767cec02", 0xba}, {&(0x7f0000002200)="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", 0xfb}], 0x7, &(0x7f0000002600)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r4, r2, r1, r1, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c}}], 0xc0, 0x4040085}}, {{&(0x7f00000026c0)=@file={0x0, 'my_sys\x00'}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002740)="235736b4c1ae0c92b316736a48aabedfc16be595005553c6c9339f865e6842964538c5e1076da64f913fcc3f859f29f8eb6496f2335f4e6b6ce37c322026ab7c34ceea29605d02a2b5c359fa11975ccd3e7b09b098ac71dd62c9bd001605c5910f145832a69181dcabb8263057b393e027a62e56f825fab4c1e132a2fd2e84c3e7d85c6984f73f2165f9617aa75147917d3203b8d6302e479132e48b820ceb84e3eddb0412e73b6a2e7d65ddbbb2da007e090af1d04f43813060c80cbf3fbadf44b5e7db7108c997f3bb4a00", 0xcc}, {&(0x7f0000002840)="89e664d53827b135aaa87e35128a416194748a1f5871beb27515f21f597229920f329cb8906ea54fa6e591870bfc50c6af57fd0aa28f387cc52a6ce80dd1529a83ebf822f56088e49df3fda331c4c7c94b7cffda22baeb1da9e16ad8b9d1b90582fdc76a13094b85bccecd1eb0a90dfe0db6c2d8c78bc0c47f5dcc2ced537594ac5cb17d71ea471b6665b2e65a12736ba573a4f7062c6ba2614c1dd7635ba6692dc066ab8f1724aaf4b2c3427333929ee500a38864f58155deff6829e5da95504cafd3b708d7753a4be34d76bef890e8af1cc4130d", 0xd5}, {&(0x7f0000002940)="910833a6a1ec458706826c3d74b8a7d681fa983ac0e4a2b29cc15a7e2615", 0x1e}, {&(0x7f0000002980)="6359fc24bf6977a03173986408a8dcef0e3ab8e1ad1b07ed9b8cc2462c3f856bae3c134344bef5af1ac3df47d2a38045cae0eeaff38edcd28883820a952ea49f2373180e3ecad92d33e322eeea1c403b00b2fabcde8fd3b91f5092787788ca6d4ce9e406630dbb7afba9f88293c157cec027e760", 0x74}], 0x4, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r1, r4, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r0, r2, r0, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r2, r0, r5, r1, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, 0xee00}}}], 0x140, 0x2}}], 0x5, 0x4004000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$setregs(0x1a, r12, 0xc, &(0x7f0000000000)) 1m57.39419418s ago: executing program 3 (id=1601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b7"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9000}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) capset(&(0x7f0000019180)={0x19980330, 0xffffffffffffffff}, &(0x7f00000191c0)={0x5, 0x200003, 0x200bc2, 0x4, 0x3, 0xfffffffa}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={'\x00', 0x800b, 0x15, 0x0, 0x3, 0x3000006, "550000001000", "1575a859", '\x00', '}]6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "d400", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000019200)=""/129, 0x81) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="85c875a8572000000076000d0b00000000fddbdf2503020000000000000800010000000000"], 0x20}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') connect$unix(0xffffffffffffffff, 0x0, 0x0) 1m42.201760944s ago: executing program 39 (id=1601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b7"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9000}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) capset(&(0x7f0000019180)={0x19980330, 0xffffffffffffffff}, &(0x7f00000191c0)={0x5, 0x200003, 0x200bc2, 0x4, 0x3, 0xfffffffa}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={'\x00', 0x800b, 0x15, 0x0, 0x3, 0x3000006, "550000001000", "1575a859", '\x00', '}]6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "d400", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000019200)=""/129, 0x81) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="85c875a8572000000076000d0b00000000fddbdf2503020000000000000800010000000000"], 0x20}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') connect$unix(0xffffffffffffffff, 0x0, 0x0) 9.669214604s ago: executing program 7 (id=2228): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 7.880656461s ago: executing program 7 (id=2238): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_emit_vhci(0x0, 0x0) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0xb}, 0x8, 0x25, &(0x7f00000002c0)="c5d53026ce16fd2f195b9809b78b1a3cad8354fdb7bd8d979e9f6cce568aeab55509ab7e03b420f0f0c417859a9d06289b56d00cc0f52b25344207a47aaef8acd2b4ddb76ea375d86303fabba1f71899e855e3152188c3caed29ad2d13c06c7a70a32bdd8497694d48646fbf67349b1b8ec1cca6ca8f7293ba0f6f01cc27c02504da1c3fd6b3e5b766497219df1cd0d134997b745a95091e48ca1c9707af8440069b3c12505596dc488349bfd181e2fdd22d4ca1a2e05115946b589028b84a8b2dc9fba4dd7e138f19d53bfcb6a57caa6d9cb0fb67f221db9b7df0d0333d297764cf030d2e25", 0xe6, 0x3, 0x8, 0x4d, 0x0, 0x1ff, &(0x7f0000000400)="fbc5df027111c537473e7f7e41e8601bdbb5604d87055304832893f050612625cce06ecf4afdf5d77c275ec57dc1542e2c6badc069b4407d35faad8e24a87e84e22124335a078af55fe7d53dbeb3b1f31b13f92a7b0390809062fe4710bf7e860f63c994e6bdfc80dd9cd02e874dde9ca57df6cfc6daf661ada8abcfdf2e394c2454d0b1aa437a993a0c339c4beb6d780bb16fcb8d5c75", [{0x0, 0x6, 0x5}, {0x1, 0x9, 0x2}, {0x6, 0x8, 0xea}, {0x8000, 0x8, 0x2}, {0x40, 0x8, 0x1}, {0x7, 0xe5, 0x2b24ea49}, {0x9, 0x1, 0x10001}, {0x4, 0x3ae, 0x5}, {0x8, 0x10001, 0x8}, {0x0, 0x4, 0x8}, {0x21, 0x1, 0x1}, {0x1, 0x401, 0x2}, {0x62, 0x1, 0x7}, {0xfffffbff, 0x1, 0x5}, {0x0, 0x6, 0x3}, {0x8, 0x0, 0xfffffffb}, {0x2, 0x81, 0xcc}, {0x3, 0x7, 0xa}, {0x1, 0xfffffffa, 0x1}, {0x85dd, 0xe4, 0x7fffffff}, {0x100, 0x2, 0x1000}, {0x8001, 0x6, 0x5}, {0xa82, 0xfffffff4, 0x431d}, {0x7, 0x8001, 0xfffffc48}, {0x1, 0x6, 0x1}, {0xf3, 0x4ce12d5b, 0x9}, {0x7, 0x401, 0x10001}, {0x8, 0x3b, 0x8}, {0x4, 0x4, 0x9}, {0xfffffff8, 0x119a, 0x2}, {0x1, 0x4}, {0x8, 0x2, 0x3}, {0xc7d, 0xf8, 0x6}, {0x7d2a, 0x4, 0x1e8}, {0x82d, 0x251, 0x10}, {0x8, 0x9}, {0x3, 0x4, 0x2}, {0x401, 0x7, 0x6ad6}, {0x99, 0x2, 0x2}, {0x7, 0x9d, 0x8}, {0x0, 0x9, 0x3}, {0xfffff800, 0x80000001, 0x80000000}, {0xa9e8, 0x4, 0x1}, {0xa, 0x1, 0x6}, {0x8000, 0xcb48, 0x8}, {0x2, 0x7, 0x6}, {0x0, 0x3, 0x7}, {0x3, 0x0, 0x1fb081c0}, {0x7f, 0x0, 0x100}, {0x80000001, 0x8f, 0xffffff3a}, {0xff, 0x9, 0x3}, {0xa, 0x0, 0x1}, {0x3, 0x401, 0x80000000}, {0x6, 0x4, 0xffffffc4}, {0x7, 0x7, 0xc82d}, {0x3, 0xfffffffe, 0xfff}, {0x8, 0xde74, 0x10}, {0x3, 0xe, 0x522}, {0xffffffff, 0x1000, 0x7f}, {0x5c7f, 0x4, 0x5}, {0x0, 0x7}, {0x9, 0x8, 0xe18}, {0xbf, 0xf66f, 0xb8b}, {0x12, 0x5eb, 0x5}, {0xec, 0x800}, {0x7, 0x6, 0x3}, {0x2, 0xa, 0x2}, {0x8001, 0xbcae, 0x100}, {0x1ad2f889, 0x6, 0x3}, {0xfff, 0x2, 0x7}, {0x4, 0xcd8e, 0x8000}, {0xba, 0x5, 0x6}, {0x2, 0x5, 0x8}, {0xc27, 0xa, 0xf}, {0x7ff, 0x80000001, 0x703aa432}, {0x3, 0x7df3061f, 0x6}, {0x7d, 0x9, 0x10}]}) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b906614000000102030109021b0002010080fa0904000000ff0000000904010000ff0000009258c01b11f63916aeb321825e3920b10765a0010eeff6d4ab3b9d50a9d660788d4f099846669c0680dfc4d0a2c25294c34c765730bed60be7d75a3d1e3e784b3602b8a65fe6467448d2520383672cfb805fb47990452c46f7140e136a1cfbd6e0167d81e6ac"], 0x0) 4.329309251s ago: executing program 7 (id=2253): r0 = userfaultfd(0x801) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 4.131449856s ago: executing program 0 (id=2257): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000380)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x44, 0x52, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c06c}, 0x404c840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet(0x2, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)={'mangle\x00', 0x0, [0x1, 0x3, 0x92, 0x1, 0x3ff]}, &(0x7f0000000340)=0x54) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x1e8, r5, 0x100, 0x6, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb02}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x86}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1aaa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fe0}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5964}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe0b0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x79b6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90a}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc095}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000c8}, 0x8841) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.997038034s ago: executing program 0 (id=2260): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0x3, 0x88a8, {0x1c}}, 0x14}}, 0x0) 3.941777255s ago: executing program 0 (id=2261): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x60030000, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 3.574969299s ago: executing program 7 (id=2263): syz_open_dev$MSR(0x0, 0x8a, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_emit_vhci(0x0, 0x0) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0xb}, 0x8, 0x25, &(0x7f00000002c0)="c5d53026ce16fd2f195b9809b78b1a3cad8354fdb7bd8d979e9f6cce568aeab55509ab7e03b420f0f0c417859a9d06289b56d00cc0f52b25344207a47aaef8acd2b4ddb76ea375d86303fabba1f71899e855e3152188c3caed29ad2d13c06c7a70a32bdd8497694d48646fbf67349b1b8ec1cca6ca8f7293ba0f6f01cc27c02504da1c3fd6b3e5b766497219df1cd0d134997b745a95091e48ca1c9707af8440069b3c12505596dc488349bfd181e2fdd22d4ca1a2e05115946b589028b84a8b2dc9fba4dd7e138f19d53bfcb6a57caa6d9cb0fb67f221db9b7df0d0333d297764cf030d2e25", 0xe6, 0x3, 0x8, 0x4d, 0x0, 0x1ff, &(0x7f0000000400)="fbc5df027111c537473e7f7e41e8601bdbb5604d87055304832893f050612625cce06ecf4afdf5d77c275ec57dc1542e2c6badc069b4407d35faad8e24a87e84e22124335a078af55fe7d53dbeb3b1f31b13f92a7b0390809062fe4710bf7e860f63c994e6bdfc80dd9cd02e874dde9ca57df6cfc6daf661ada8abcfdf2e394c2454d0b1aa437a993a0c339c4beb6d780bb16fcb8d5c75", [{0x0, 0x6, 0x5}, {0x1, 0x9, 0x2}, {0x6, 0x8, 0xea}, {0x8000, 0x8, 0x2}, {0x40, 0x8, 0x1}, {0x7, 0xe5, 0x2b24ea49}, {0x9, 0x1, 0x10001}, {0x4, 0x3ae, 0x5}, {0x8, 0x10001, 0x8}, {0x0, 0x4, 0x8}, {0x21, 0x1, 0x1}, {0x1, 0x401, 0x2}, {0x62, 0x1, 0x7}, {0xfffffbff, 0x1, 0x5}, {0x0, 0x6, 0x3}, {0x8, 0x0, 0xfffffffb}, {0x2, 0x81, 0xcc}, {0x3, 0x7, 0xa}, {0x1, 0xfffffffa, 0x1}, {0x85dd, 0xe4, 0x7fffffff}, {0x100, 0x2, 0x1000}, {0x8001, 0x6, 0x5}, {0xa82, 0xfffffff4, 0x431d}, {0x7, 0x8001, 0xfffffc48}, {0x1, 0x6, 0x1}, {0xf3, 0x4ce12d5b, 0x9}, {0x7, 0x401, 0x10001}, {0x8, 0x3b, 0x8}, {0x4, 0x4, 0x9}, {0xfffffff8, 0x119a, 0x2}, {0x1, 0x4}, {0x8, 0x2, 0x3}, {0xc7d, 0xf8, 0x6}, {0x7d2a, 0x4, 0x1e8}, {0x82d, 0x251, 0x10}, {0x8, 0x9}, {0x3, 0x4, 0x2}, {0x401, 0x7, 0x6ad6}, {0x99, 0x2, 0x2}, {0x7, 0x9d, 0x8}, {0x0, 0x9, 0x3}, {0xfffff800, 0x80000001, 0x80000000}, {0xa9e8, 0x4, 0x1}, {0xa, 0x1, 0x6}, {0x8000, 0xcb48, 0x8}, {0x2, 0x7, 0x6}, {0x0, 0x3, 0x7}, {0x3, 0x0, 0x1fb081c0}, {0x7f, 0x0, 0x100}, {0x80000001, 0x8f, 0xffffff3a}, {0xff, 0x9, 0x3}, {0xa, 0x0, 0x1}, {0x3, 0x401, 0x80000000}, {0x6, 0x4, 0xffffffc4}, {0x7, 0x7, 0xc82d}, {0x3, 0xfffffffe, 0xfff}, {0x8, 0xde74, 0x10}, {0x3, 0xe, 0x522}, {0xffffffff, 0x1000, 0x7f}, {0x5c7f, 0x4, 0x5}, {0x0, 0x7}, {0x9, 0x8, 0xe18}, {0xbf, 0xf66f, 0xb8b}, {0x12, 0x5eb, 0x5}, {0xec, 0x800}, {0x7, 0x6, 0x3}, {0x2, 0xa, 0x2}, {0x8001, 0xbcae, 0x100}, {0x1ad2f889, 0x6, 0x3}, {0xfff, 0x2, 0x7}, {0x4, 0xcd8e, 0x8000}, {0xba, 0x5, 0x6}, {0x2, 0x5, 0x8}, {0xc27, 0xa, 0xf}, {0x7ff, 0x80000001, 0x703aa432}, {0x3, 0x7df3061f, 0x6}, {0x7d, 0x9, 0x10}]}) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b906614000000102030109021b0002010080fa0904000000ff0000000904010000ff0000009258c01b11f63916aeb321825e3920b10765a0010eeff6d4ab3b9d50a9d660788d4f099846669c0680dfc4d0a2c25294c34c765730bed60be7d75a3d1e3e784b3602b8a65fe6467448d2520383672cfb805fb47990452c46f7140e136a1cfbd6e0167d81e6ac"], 0x0) 3.547007003s ago: executing program 0 (id=2264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) syz_open_dev$evdev(0x0, 0x75c, 0x10d840) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) userfaultfd(0x801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x601, 0x0, 0x25dfdbfb, {}, [@NHA_FDB, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0xb, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x34}}, 0x0) 3.54581654s ago: executing program 9 (id=2265): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) landlock_restrict_self(r0, 0x5) syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') io_setup(0xbe, &(0x7f0000000400)=0x0) r3 = socket$unix(0x1, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$cgroup_pid(r6, &(0x7f00000003c0), 0xffffffa0) r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000059770c40c009030243d300000001090212000100ded0197c04"], 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34", 0x21}, {&(0x7f0000000380)="a1c6757dfaadb021e54830", 0xb}, {&(0x7f00000004c0)="3cd61eba790317f711076c14e2bf6b52bcfe1340c1693df3", 0x18}], 0x3) 3.121910713s ago: executing program 0 (id=2269): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)=' \\ 127.0.0.1 2000000000 \\calhost\n', 0x24) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b000100000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3.020772648s ago: executing program 0 (id=2271): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3407b57ec17b57ba99da967fe551e3cb9ddd63b4", @ANYRES32=0x0, @ANYBLOB="08000a00020000001400020020010000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80941, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='?\x00\x00w', @ANYRES16=r3, @ANYBLOB="20002abd7000fedbdf250300000005000a00230000000b000a00265d27405d253a000c00060002000000000000000c000800852d000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 2.51417223s ago: executing program 8 (id=2278): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) write(r4, &(0x7f0000000480)="6252657175657374547970653d2daf", 0xf) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0) 1.820651516s ago: executing program 4 (id=2282): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x70) 1.734191521s ago: executing program 4 (id=2283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x1800000}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x966df94220706ae4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}]}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0xf80, 0x7}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r3, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000380)) 1.732626406s ago: executing program 9 (id=2284): socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x9cf4, 0x10, 0x3, 0x18e}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bdd, 0x4000, 0x2, 0x2cf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb654, 0x1000, 0x2, 0x26b}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d39, 0x20, 0x2, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x840f, 0x10, 0x1, 0xea}}], 0x4, &(0x7f0000001c80)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfff7}, 0x0, 0x0, '\x00', {0x4, 0xd66, 0x0, &(0x7f0000000c80)=@buf_1k="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"}}, &(0x7f0000001d00)) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000800)={0xffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4099, 0x1003}], 0x0, 0x1}, 0x20) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x3, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x974}}}, &(0x7f0000000480)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000003780)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x2000, @fd_index, 0x7f9, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/132, 0x84}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000003800)=""/239, 0xef}, {&(0x7f00000009c0)=""/245, 0xf5}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/84, 0x54}], 0x1, 0x4, 0x0, {0x1, 0x0, 0xf8, '\x00', &(0x7f0000003740)={0x4, 0x1, 0x33, &(0x7f0000000500)="45915e2d46754d43927121b0bdee28f82eb9730a95d9265ac0aca0ec2d4508d112b5cee7406694fc70d7ec6af0ea8ceab2358a9b61ee6281f003f570fa776e04", 0x7}, 0x6}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) r12 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0x6}, {0xc, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0xc010) syz_ublk_setup_io_uring(0x4752, &(0x7f0000001d40)={0x0, 0x5, 0x4000, 0x0, 0x309}, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) syz_open_dev$mouse(&(0x7f0000001e80), 0x400, 0xa81) syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0xfffffffc, 0x80, 0x2, 0x1e1}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 1.447583265s ago: executing program 8 (id=2285): fsopen(&(0x7f0000000080)='xfs\x00', 0x1) 1.410016609s ago: executing program 8 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:Cb2e') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)="000080", 0x15) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.373958586s ago: executing program 4 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x311, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) (fail_nth: 4) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0xa000) 1.356382456s ago: executing program 9 (id=2288): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000280), 0x0, 0x60000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000000)) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.320240121s ago: executing program 8 (id=2289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0x70bd23, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x7, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 1.197889708s ago: executing program 9 (id=2290): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000380)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x44, 0x52, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c06c}, 0x404c840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet(0x2, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)={'mangle\x00', 0x0, [0x1, 0x3, 0x92, 0x1, 0x3ff]}, &(0x7f0000000340)=0x54) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x1e8, r5, 0x100, 0x6, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb02}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x86}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1aaa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fe0}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5964}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe0b0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x79b6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90a}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc095}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000c8}, 0x8841) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.154494492s ago: executing program 4 (id=2291): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)="000080", 0x15) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.06964s ago: executing program 4 (id=2292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000480)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x2, 0xa2ad, 0xffff, 0x7, 0x5, "73ec8f7f4f994242a51098ceaf1e64bc8bbe1d85db5442305fc1d2f24c2148137bef5226bd87d017bb706c11d81e2d42de8dc71a75039525f881f38d159d9637d4ad699d40686e10853ab4df2690870c77642d665b27274ba7666b41ce809b0bd692748f3449c8bbf1a8359e7cb5d1aa6f9fca89e86def465e67fbd5633ac48b"}) connect(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x6, @private0, 0x4}}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60083, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x4000, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) close(r0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = gettid() r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x6) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) tgkill(r6, r7, 0x11) getsockname$packet(r4, 0x0, &(0x7f0000000080)) 975.237831ms ago: executing program 9 (id=2293): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000006a00)={'ip6_vti0\x00', &(0x7f0000006980)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x2, 0xa, 0x12, @private1, @private1, 0x1, 0x0, 0xf, 0x3}}) 899.492438ms ago: executing program 8 (id=2294): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x22000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x5, 0x2, 0x9b17}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000440)={0x80, 0x2, 'client0\x00', 0x0, '\n\x00', "c5e788a5513d59c44888be429de4bbb152bfd08a5222ae6540d0b49771b7eaff", 0xa9a, 0x95a}) 833.991953ms ago: executing program 4 (id=2295): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000) read$qrtrtun(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x401}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x8001, 0x2, 0x2, 0xa840, 0x5, 0x1}, 0x30, 0x0) landlock_restrict_self(r1, 0x2) 833.627889ms ago: executing program 9 (id=2296): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) write(r3, &(0x7f0000000480)="6252657175657374547970653d2daf", 0xf) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0) 796.238032ms ago: executing program 8 (id=2297): r0 = syz_open_dev$mouse(0x0, 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x6, 0x0, 0x4, 0xe000, 0x7, {0x0, 0x2710}, {0x3, 0x2, 0x9, 0xff, 0x30, 0x1, "d0c390c2"}, 0x7f, 0x1, {0x0}, 0x8}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x66b4, &(0x7f0000000140)={0x0, 0xe967, 0x10000, 0x0, 0x397, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001a80)=""/4128, &(0x7f00000003c0)="ebe9eb32ded3e6138d2f5d279bf8884859d3616136fe3c2501b9acaf38b5d9d6c84d5934a7e18be348d9a685134eb08cae5e00a0b87f5cf2bade8adbd26d4c373f2940b0691c2f663203cabb9227ec63ac1fb920b72a4151e6f1a2a45f82f3094dd5c926c5b33d8340bbc239ceb86266c5ae", &(0x7f0000000040), 0x4, r5}, 0x38) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000800)='0', 0x1) syz_open_dev$video(&(0x7f00000002c0), 0x8, 0x101840) socket(0x39, 0x1, 0xfffff001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r7, 0x560c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 164.080174ms ago: executing program 7 (id=2298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x1800000}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x966df94220706ae4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}]}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0xf80, 0x7}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r3, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 7 (id=2299): socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x9cf4, 0x10, 0x3, 0x18e}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bdd, 0x4000, 0x2, 0x2cf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb654, 0x1000, 0x2, 0x26b}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d39, 0x20, 0x2, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x840f, 0x10, 0x1, 0xea}}], 0x4, &(0x7f0000001c80)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfff7}, 0x0, 0x0, '\x00', {0x4, 0xd66, 0x0, &(0x7f0000000c80)=@buf_1k="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"}}, &(0x7f0000001d00)) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000800)={0xffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4099, 0x1003}], 0x0, 0x1}, 0x20) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x3, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x974}}}, &(0x7f0000000480)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000003780)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x2000, @fd_index, 0x7f9, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/132, 0x84}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000003800)=""/239, 0xef}, {&(0x7f00000009c0)=""/245, 0xf5}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/84, 0x54}], 0x1, 0x4, 0x0, {0x1, 0x0, 0xf8, '\x00', &(0x7f0000003740)={0x4, 0x1, 0x33, &(0x7f0000000500)="45915e2d46754d43927121b0bdee28f82eb9730a95d9265ac0aca0ec2d4508d112b5cee7406694fc70d7ec6af0ea8ceab2358a9b61ee6281f003f570fa776e04", 0x7}, 0x6}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) r12 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0x6}, {0xc, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0xc010) syz_ublk_setup_io_uring(0x4752, &(0x7f0000001d40)={0x0, 0x5, 0x4000, 0x0, 0x309}, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) syz_open_dev$mouse(&(0x7f0000001e80), 0x400, 0xa81) syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0xfffffffc, 0x80, 0x2, 0x1e1}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) kernel console output (not intermixed with test programs): 14693 comm="syz.0.1756" name="sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 708.363707][ T30] audit: type=1400 audit(1786565227.197:742): avc: denied { open } for pid=14693 comm="syz.0.1756" path="/dev/sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 708.405915][ T30] audit: type=1400 audit(1786565227.237:743): avc: denied { ioctl } for pid=14693 comm="syz.0.1756" path="/dev/sg0" dev="devtmpfs" ino=814 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 708.437663][ T30] audit: type=1400 audit(1786565227.317:744): avc: denied { write } for pid=14699 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.620257][T14710] FAULT_INJECTION: forcing a failure. [ 708.620257][T14710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.634301][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.4.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.634329][T14710] Tainted: [L]=SOFTLOCKUP [ 708.634335][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 708.634345][T14710] Call Trace: [ 708.634351][T14710] [ 708.634357][T14710] dump_stack_lvl+0x100/0x190 [ 708.634385][T14710] should_fail_ex.cold+0x5/0xa [ 708.634408][T14710] _copy_from_iter+0x1f4/0x1690 [ 708.634435][T14710] ? __asan_memset+0x23/0x50 [ 708.634455][T14710] ? __pfx__copy_from_iter+0x10/0x10 [ 708.634478][T14710] ? __pfx___alloc_skb+0x10/0x10 [ 708.634510][T14710] netlink_sendmsg+0x808/0xda0 [ 708.634534][T14710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.634555][T14710] ? selinux_socket_sendmsg+0x198/0x2f0 [ 708.634585][T14710] ____sys_sendmsg+0xa4d/0xbe0 [ 708.634610][T14710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.634631][T14710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.634669][T14710] ___sys_sendmsg+0x190/0x1e0 [ 708.634688][T14710] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.634704][T14710] ? __lock_acquire+0x49f/0x1a40 [ 708.634725][T14710] ? get_pid_task+0x106/0x250 [ 708.634770][T14710] __sys_sendmsg+0x160/0x210 [ 708.634794][T14710] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.634834][T14710] do_syscall_64+0x115/0x870 [ 708.634857][T14710] ? clear_bhb_loop+0x70/0xc0 [ 708.634878][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.634896][T14710] RIP: 0033:0x7f66fed9e0d9 [ 708.634912][T14710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.634928][T14710] RSP: 002b:00007f66fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.634946][T14710] RAX: ffffffffffffffda RBX: 00007f66ff025fa0 RCX: 00007f66fed9e0d9 [ 708.634957][T14710] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 708.634968][T14710] RBP: 00007f66fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 708.634978][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.634988][T14710] R13: 00007f66ff026038 R14: 00007f66ff025fa0 R15: 00007ffe3dc7fb48 [ 708.635012][T14710] [ 708.640969][T12880] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 708.776824][T14717] Unsupported ieee802154 address type: 0 [ 708.910682][ T30] audit: type=1400 audit(1786565227.817:745): avc: denied { write } for pid=14703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.983879][T12880] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 708.991603][ T30] audit: type=1400 audit(1786565227.897:746): avc: denied { write } for pid=14723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.995820][T12880] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.048809][T12880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.057143][T12880] usb 9-1: Product: syz [ 709.061489][T12880] usb 9-1: Manufacturer: syz [ 709.066132][T12880] usb 9-1: SerialNumber: syz [ 709.099553][T12880] usb 9-1: config 0 descriptor?? [ 709.359357][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.378707][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.391454][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.400274][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.417851][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.448830][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.457294][T14739] Need at least one configuration in g_uac2. [ 709.472657][T14739] udc usbip-vudc.0: failed to start g_uac2: -22 [ 709.493837][T12880] usb 9-1: USB disconnect, device number 18 [ 709.504345][T14739] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 709.541238][T14739] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 709.575429][T14746] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.646941][T14741] vlan2: entered promiscuous mode [ 709.671787][T14741] macvtap0: entered promiscuous mode [ 709.953939][T14768] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1772'. [ 710.410749][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 710.571123][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 710.594289][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 710.609343][ T24] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 710.693104][ T24] usb 9-1: config 0 has no interface number 0 [ 710.706029][T14796] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 710.714672][T14796] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 710.740526][T14796] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 710.754117][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 710.828455][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 710.948310][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 711.051397][ T24] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 711.144067][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.202844][T14802] xt_hashlimit: size too large, truncated to 1048576 [ 711.255413][ T24] usb 9-1: config 0 descriptor?? [ 711.677328][T14801] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1779'. [ 711.840440][ T24] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 712.035451][T14801] netlink: 'syz.9.1779': attribute type 27 has an invalid length. [ 712.191286][T14801] bond0: (slave bond_slave_1): Releasing backup interface [ 712.303794][T14814] netlink: 'syz.0.1782': attribute type 21 has an invalid length. [ 712.338009][T14814] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1782'. [ 712.368411][T14814] netlink: 'syz.0.1782': attribute type 4 has an invalid length. [ 712.383935][T14814] netlink: 'syz.0.1782': attribute type 3 has an invalid length. [ 712.418509][T14814] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1782'. [ 712.478145][T14818] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1783'. [ 712.508373][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1783'. [ 712.566598][ T5598] usb 9-1: USB disconnect, device number 19 [ 712.961469][T14834] netlink: 'syz.7.1788': attribute type 10 has an invalid length. [ 712.978291][T14834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1788'. [ 712.985141][ T5598] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 713.026071][T14834] team0: entered promiscuous mode [ 713.047520][T14834] team_slave_0: entered promiscuous mode [ 713.071735][T14834] team_slave_1: entered promiscuous mode [ 713.081893][T14834] team0: entered allmulticast mode [ 713.087117][T14834] team_slave_0: entered allmulticast mode [ 713.095114][T14834] team_slave_1: entered allmulticast mode [ 713.103316][T14834] bridge0: port 3(team0) entered blocking state [ 713.109807][T14834] bridge0: port 3(team0) entered disabled state [ 713.119123][T14834] bridge0: port 3(team0) entered blocking state [ 713.125543][T14834] bridge0: port 3(team0) entered forwarding state [ 713.158529][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.172326][T12880] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 713.194816][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 713.194828][ T30] audit: type=1400 audit(1786565232.117:826): avc: denied { write } for pid=14809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.231831][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.244271][T14846] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1789'. [ 713.279106][T14844] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.422085][T12880] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 713.447353][T12880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.477331][T12880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.512776][T12880] usb 5-1: Product: syz [ 713.529923][ T30] audit: type=1400 audit(1786565232.447:827): avc: denied { write } for pid=14854 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.553647][T12880] usb 5-1: Manufacturer: syz [ 713.561755][T12880] usb 5-1: SerialNumber: syz [ 713.570280][T12880] usb 5-1: config 0 descriptor?? [ 713.805796][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.819838][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.832982][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.842380][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.860119][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.869574][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.885046][T12882] usb 5-1: USB disconnect, device number 12 [ 713.951464][T12880] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 714.127318][T12880] usb 10-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 714.146842][ T30] audit: type=1400 audit(1786565233.057:828): avc: denied { write } for pid=14861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.191274][T12880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.209663][T12880] usb 10-1: Product: syz [ 714.219114][T12880] usb 10-1: Manufacturer: syz [ 714.225325][T12880] usb 10-1: SerialNumber: syz [ 714.239251][T12880] etas_es58x 10-1:1.0: Starting syz syz (Serial Number syz) [ 714.286558][ T30] audit: type=1400 audit(1786565233.207:829): avc: denied { write } for pid=14874 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.394897][ T1100] netdevsim netdevsim3 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.419144][ T1100] netdevsim netdevsim3 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.470759][ T1100] netdevsim netdevsim3 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.499506][ T1100] netdevsim netdevsim3 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.525825][T14880] Cannot find add_set index 0 as target [ 714.602142][ T1100] netdevsim netdevsim1 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.626669][ T1100] netdevsim netdevsim1 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.650543][ T1100] netdevsim netdevsim1 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.691505][ T1100] netdevsim netdevsim1 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.734306][ T1100] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.767882][ T1100] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.796475][ T30] audit: type=1326 audit(1786565233.717:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.7.1795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 714.807735][ T1100] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.845732][ T1100] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.896613][ T1100] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.945702][ T1100] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.975084][ T30] audit: type=1326 audit(1786565233.747:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.7.1795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 715.042558][ T6389] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.087602][ T6389] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.118760][T14906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.143526][T14907] netlink: 'syz.4.1801': attribute type 4 has an invalid length. [ 715.151839][ T6389] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.167797][T14906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.186677][ T30] audit: type=1326 audit(1786565233.757:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.7.1795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 715.194859][T14911] netlink: 'syz.4.1801': attribute type 4 has an invalid length. [ 715.224491][ T6389] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.251627][T14906] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.364235][ T30] audit: type=1326 audit(1786565233.757:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.7.1795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 715.411954][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.420531][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.495696][T12880] etas_es58x 10-1:1.0: could not retrieve the product info string [ 715.517530][ T30] audit: type=1326 audit(1786565233.757:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.7.1795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 715.620107][ T30] audit: type=1326 audit(1786565233.757:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.7.1795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 715.803889][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.827874][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.843869][T14927] jffs2: notice: (14927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 716.161060][ T36] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.180977][ T36] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.232570][ T6389] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.248816][T12880] usb 10-1: USB disconnect, device number 23 [ 716.259221][ T6389] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.287853][ T6389] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.296505][T12880] etas_es58x 10-1:1.0: Disconnecting syz syz [ 716.317409][ T6389] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.557251][T14948] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1807'. [ 716.811320][T12880] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 716.981940][T12880] usb 10-1: Using ep0 maxpacket: 8 [ 716.990333][T12880] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 717.007800][T12880] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 717.020444][T12880] usb 10-1: config 0 has no interface number 0 [ 717.036931][T12880] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 717.065733][T12880] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 717.133227][T12880] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 717.155225][T12880] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 717.190728][T12880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.211830][T12880] usb 10-1: config 0 descriptor?? [ 717.228388][T12880] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 717.367672][T14988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.385957][T14988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.394174][ T5598] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 717.414906][T14992] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1813'. [ 717.551287][ T5598] usb 9-1: device descriptor read/64, error -71 [ 717.586940][T14992] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 717.702663][T14992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.801616][ T5598] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 717.951366][ T5598] usb 9-1: device descriptor read/64, error -71 [ 718.081166][ T5598] usb usb9-port1: attempt power cycle [ 718.218074][T15015] libceph: secret too big 55 [ 718.278347][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 718.278362][ T30] audit: type=1326 audit(1786565237.197:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.0.1817" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e0479e0d9 code=0x0 [ 718.430861][ T5598] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 718.448564][T15022] netlink: 388 bytes leftover after parsing attributes in process `syz.7.1819'. [ 718.462959][ T5598] usb 9-1: device descriptor read/8, error -71 [ 718.710860][ T5598] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 718.731657][ T5598] usb 9-1: device descriptor read/8, error -71 [ 718.842908][ T5598] usb usb9-port1: unable to enumerate USB device [ 719.073510][ T30] audit: type=1400 audit(1786565237.997:976): avc: denied { map } for pid=15025 comm="syz.4.1821" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 719.161112][ C1] ldusb 10-1:0.55: usb_submit_urb failed (-1) [ 719.198524][T15034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.210378][T15034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.274363][T15035] Cannot find add_set index 0 as target [ 719.302860][T12882] usb 10-1: USB disconnect, device number 24 [ 719.332874][T12882] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 719.354680][ T5598] libceph: connect (1)[c::]:6789 error -101 [ 719.366292][ T5598] libceph: mon0 (1)[c::]:6789 connect error [ 719.400619][T15040] ceph: No mds server is up or the cluster is laggy [ 719.631177][T12880] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 719.793875][T12880] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 719.804992][T12880] usb 5-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 719.815495][T12880] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.824497][T12880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.833038][T12882] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 719.852742][T12880] usb 5-1: config 0 descriptor?? [ 720.012909][T12882] usb 10-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 720.023449][T12882] usb 10-1: config index 0 descriptor too short (expected 69, got 51) [ 720.032223][T12882] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.044728][T12882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.053413][T12882] usb 10-1: Product: syz [ 720.057690][T12882] usb 10-1: Manufacturer: syz [ 720.062938][T12882] usb 10-1: SerialNumber: syz [ 720.079613][T15037] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.080427][T12882] usb 10-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 720.137985][T12880] usb 5-1: string descriptor 0 read error: -71 [ 720.148168][T12880] usb 5-1: USB disconnect, device number 13 [ 720.274127][T12882] usb 10-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 720.302794][T12882] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 720.334486][T12882] usb 10-1: USB disconnect, device number 25 [ 720.368093][T12509] udevd[12509]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 720.478060][T15066] batman_adv: batadv0: Adding interface: dummy0 [ 720.484535][T15066] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.518421][T15066] batman_adv: batadv0: Interface activated: dummy0 [ 720.700445][ T30] audit: type=1400 audit(1786565239.617:977): avc: denied { read write } for pid=15067 comm="syz.8.1831" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 720.732255][ T30] audit: type=1400 audit(1786565239.617:978): avc: denied { open } for pid=15067 comm="syz.8.1831" path="/78/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 720.734053][T15073] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6404.6225946.0), cmd(2) [ 720.756968][ T30] audit: type=1400 audit(1786565239.657:979): avc: denied { ioctl } for pid=15067 comm="syz.8.1831" path="/78/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 721.021943][ T30] audit: type=1400 audit(1786565239.937:980): avc: denied { shutdown } for pid=15084 comm="syz.4.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 721.127938][T15092] dns_resolver: Unsupported server list version (0) [ 721.295100][T15098] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.363260][ T5783] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 721.386238][T15102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.421546][T15102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.630723][ T5783] usb 5-1: Using ep0 maxpacket: 8 [ 721.641546][ T5783] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 721.663173][T15106] Cannot find add_set index 0 as target [ 721.707638][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.715817][ T5783] usb 5-1: Product: syz [ 721.720058][ T5783] usb 5-1: Manufacturer: syz [ 721.725294][ T5783] usb 5-1: SerialNumber: syz [ 721.743844][ T5783] usb 5-1: config 0 descriptor?? [ 721.753498][ T5783] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 722.507676][ T5783] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 722.533716][ T5783] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 722.566737][ T5783] usb 5-1: USB disconnect, device number 14 [ 722.730244][T15121] netlink: 'syz.7.1848': attribute type 21 has an invalid length. [ 722.748409][T15121] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1848'. [ 722.775992][T15121] netlink: 'syz.7.1848': attribute type 4 has an invalid length. [ 722.795791][T15121] netlink: 'syz.7.1848': attribute type 3 has an invalid length. [ 722.816521][T15121] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1848'. [ 723.247063][ T5597] Bluetooth: hci1: command 0x0406 tx timeout [ 723.253350][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 723.571248][T12882] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 723.731904][T12882] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 723.744140][T12882] usb 9-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 723.755637][T12882] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.765494][T12882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.796723][T12882] usb 9-1: config 0 descriptor?? [ 724.042984][T15113] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.150146][T12882] usb 9-1: string descriptor 0 read error: -71 [ 724.168044][T12882] usb 9-1: USB disconnect, device number 24 [ 724.193253][ T5722] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 724.201006][ T24] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 724.361824][ T5722] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 724.364530][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 724.391879][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 724.392853][ T5722] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.421652][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.435834][ T5722] usb 10-1: config 0 has no interfaces? [ 724.439503][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.450403][ T5722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.467818][ T24] usb 5-1: string descriptor 0 read error: -22 [ 724.481029][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.481880][ T5722] usb 10-1: config 0 descriptor?? [ 724.873025][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.882467][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.038709][ T24] usb 5-1: USB disconnect, device number 15 [ 725.536309][T15169] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.716114][ T30] audit: type=1400 audit(1786565244.637:981): avc: denied { connect } for pid=15174 comm="syz.4.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 725.768799][T15179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=15179 comm=syz.8.1864 [ 725.881888][T15185] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1867'. [ 725.893121][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 725.996130][T15188] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.138084][T15194] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.150717][ T24] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 726.321808][ T24] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 726.346796][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.370684][ T24] usb 9-1: Product: syz [ 726.374889][ T24] usb 9-1: Manufacturer: syz [ 726.379459][ T24] usb 9-1: SerialNumber: syz [ 726.593935][T15196] fuse: Bad value for 'fd' [ 726.605100][T15196] lo speed is unknown, defaulting to 1000 [ 726.612661][T15196] lo speed is unknown, defaulting to 1000 [ 726.619819][T15196] lo speed is unknown, defaulting to 1000 [ 726.626740][T15196] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 726.641877][T15196] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 726.660311][T15196] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 726.677537][T15196] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 726.687116][T15197] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1870'. [ 726.715267][T15199] Unsupported ieee802154 address type: 0 [ 726.745030][T15196] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 726.821166][T15196] lo speed is unknown, defaulting to 1000 [ 726.844603][T15196] lo speed is unknown, defaulting to 1000 [ 726.859982][T15196] lo speed is unknown, defaulting to 1000 [ 726.878044][T15196] lo speed is unknown, defaulting to 1000 [ 726.886132][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1873'. [ 726.898979][T15196] lo speed is unknown, defaulting to 1000 [ 726.925265][T15196] lo speed is unknown, defaulting to 1000 [ 727.574723][ T5598] usb 10-1: USB disconnect, device number 26 [ 727.617237][ T30] audit: type=1400 audit(1786565246.537:982): avc: denied { write } for pid=15203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.713870][T15227] ipt_REJECT: ECHOREPLY no longer supported. [ 727.768053][ T30] audit: type=1400 audit(1786565246.687:983): avc: denied { write } for pid=15228 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.912019][ T30] audit: type=1400 audit(1786565246.837:984): avc: denied { write } for pid=15224 comm="syz.7.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 728.120759][ T5598] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 728.211888][ T30] audit: type=1326 audit(1786565247.137:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fed9e0d9 code=0x7ffc0000 [ 728.266288][ T30] audit: type=1326 audit(1786565247.157:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fed9e0d9 code=0x7ffc0000 [ 728.290686][ T5598] usb 10-1: Using ep0 maxpacket: 8 [ 728.301653][ T5598] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 728.313155][ T30] audit: type=1326 audit(1786565247.157:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fed9e0d9 code=0x7ffc0000 [ 728.314807][ T5598] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 728.350579][ T5598] usb 10-1: config 0 has no interface number 0 [ 728.359092][ T5598] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 728.363017][ T30] audit: type=1326 audit(1786565247.157:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fed9e0d9 code=0x7ffc0000 [ 728.373003][T12504] Bluetooth: hci8: command 0x0406 tx timeout [ 728.405024][ T5598] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 728.416953][ T5598] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 728.430447][ T5598] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.443624][ T5598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.468873][ T30] audit: type=1326 audit(1786565247.157:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f66fed9e0d9 code=0x7ffc0000 [ 728.477358][ T5598] usb 10-1: config 0 descriptor?? [ 728.498230][ T30] audit: type=1326 audit(1786565247.157:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fed9e0d9 code=0x7ffc0000 [ 728.657485][ T5598] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 728.693697][T15253] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1882'. [ 728.712027][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'. [ 728.798440][T15257] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.860324][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1885'. [ 728.899624][ T24] usb 9-1: selecting invalid altsetting 1 [ 728.924887][T15265] bond0: entered promiscuous mode [ 728.934325][ T24] speedtch 9-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 728.958415][T15265] bond_slave_0: entered promiscuous mode [ 728.977654][ T24] speedtch 9-1:1.0: usbatm_usb_probe: bind failed: -22! [ 728.988277][T15265] bond_slave_1: entered promiscuous mode [ 728.998915][ T24] speedtch 9-1:1.0: probe with driver speedtch failed with error -22 [ 729.017189][T15265] batadv_slave_1: entered promiscuous mode [ 729.037674][T15265] batadv_slave_1: left promiscuous mode [ 729.063117][ T24] usb 9-1: selecting invalid altsetting 1 [ 729.077173][T15265] bond0: left promiscuous mode [ 729.098038][ T24] speedtch 9-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 729.107538][T15265] bond_slave_0: left promiscuous mode [ 729.128039][T15265] bond_slave_1: left promiscuous mode [ 729.153285][ T24] speedtch 9-1:1.1: usbatm_usb_probe: bind failed: -22! [ 729.200896][ T24] speedtch 9-1:1.1: probe with driver speedtch failed with error -22 [ 729.292643][ T24] usb 9-1: USB disconnect, device number 25 [ 729.450195][ T5598] usb 10-1: USB disconnect, device number 27 [ 729.472452][ T5598] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 729.650092][T15285] batadv_slave_1: entered promiscuous mode [ 729.660729][ T24] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 730.365480][ T24] usb 9-1: device descriptor read/64, error -71 [ 730.394028][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 730.610946][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 730.674226][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.698429][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.770706][ T24] usb 9-1: device descriptor read/64, error -71 [ 730.818110][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1897'. [ 730.894798][ T24] usb usb9-port1: attempt power cycle [ 730.911684][T15317] team0: Port device team_slave_0 removed [ 730.921236][T12474] Bluetooth: hci3: command tx timeout [ 731.132580][T15334] ieee802154 phy0 wpan0: encryption failed: -22 [ 731.139044][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 731.139059][ T30] audit: type=1400 audit(1786565250.057:1061): avc: denied { write } for pid=15328 comm="syz.4.1900" name="extensions" dev="configfs" ino=10402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 731.212625][ T30] audit: type=1400 audit(1786565250.127:1062): avc: denied { write } for pid=15314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.257254][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 731.288788][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 731.295827][ T24] usb 9-1: device descriptor read/8, error -71 [ 731.297036][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 731.329141][ T30] audit: type=1400 audit(1786565250.247:1063): avc: denied { write } for pid=15345 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.371278][T15339] ceph: No mds server is up or the cluster is laggy [ 731.562923][ T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 731.601478][ T24] usb 9-1: device descriptor read/8, error -71 [ 731.731387][ T24] usb usb9-port1: unable to enumerate USB device [ 732.267056][ T30] audit: type=1400 audit(1786565251.187:1064): avc: denied { write } for pid=15351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.516139][ T30] audit: type=1400 audit(1786565251.437:1065): avc: denied { write } for pid=15385 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.631367][ T5701] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 733.699544][T15422] ieee802154 phy0 wpan0: encryption failed: -22 [ 733.718168][ T30] audit: type=1400 audit(1786565252.637:1066): avc: denied { write } for pid=15410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.801340][ T5701] usb 9-1: device descriptor read/64, error -71 [ 733.883140][ T30] audit: type=1400 audit(1786565252.807:1067): avc: denied { write } for pid=15428 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.084801][ T5701] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 734.227430][ T5701] usb 9-1: device descriptor read/64, error -71 [ 734.424351][ T5701] usb usb9-port1: attempt power cycle [ 734.731542][ T30] audit: type=1400 audit(1786565253.647:1068): avc: denied { read } for pid=15444 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 734.736035][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 734.921280][ T5701] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 734.951710][ T5701] usb 9-1: device descriptor read/8, error -71 [ 735.028568][ T30] audit: type=1326 audit(1786565253.947:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.9.1923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 735.103311][ T30] audit: type=1326 audit(1786565253.947:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.9.1923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 735.221294][ T5701] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 735.241804][ T5701] usb 9-1: device descriptor read/8, error -71 [ 735.311394][ T5722] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 735.344624][T15470] netlink: 6 bytes leftover after parsing attributes in process `syz.9.1930'. [ 735.344847][T15468] ieee802154 phy0 wpan0: encryption failed: -22 [ 735.355577][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1930'. [ 735.368948][ T5701] usb usb9-port1: unable to enumerate USB device [ 735.462940][ T5722] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 735.479941][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.496148][ T5722] usb 5-1: Product: syz [ 735.504734][ T5722] usb 5-1: Manufacturer: syz [ 735.515704][ T5722] usb 5-1: SerialNumber: syz [ 735.741657][ T5722] usb 5-1: selecting invalid altsetting 1 [ 735.755470][ T5722] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 735.772404][ T5722] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -22! [ 735.779949][ T5722] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 735.791711][ T5598] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 735.796826][ T5722] usb 5-1: selecting invalid altsetting 1 [ 735.805791][ T5722] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 735.816340][ T5722] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -22! [ 735.823913][ T5722] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 735.835435][ T5722] usb 5-1: USB disconnect, device number 16 [ 735.898625][T15482] FAULT_INJECTION: forcing a failure. [ 735.898625][T15482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.911903][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.8.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.911928][T15482] Tainted: [L]=SOFTLOCKUP [ 735.911934][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 735.911941][T15482] Call Trace: [ 735.911945][T15482] [ 735.911950][T15482] dump_stack_lvl+0x100/0x190 [ 735.911969][T15482] should_fail_ex.cold+0x5/0xa [ 735.911985][T15482] _copy_to_user+0x32/0xd0 [ 735.912002][T15482] simple_read_from_buffer+0xcb/0x170 [ 735.912016][T15482] proc_fail_nth_read+0x1af/0x230 [ 735.912035][T15482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.912054][T15482] ? rw_verify_area+0xce/0x6d0 [ 735.912070][T15482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.912089][T15482] vfs_read+0x1e4/0xb40 [ 735.912116][T15482] ? __pfx_vfs_read+0x10/0x10 [ 735.912141][T15482] ? __fget_files+0x215/0x3d0 [ 735.912163][T15482] ? __fget_files+0x21f/0x3d0 [ 735.912186][T15482] ksys_read+0x12a/0x250 [ 735.912196][T15482] ? __pfx_ksys_read+0x10/0x10 [ 735.912212][T15482] do_syscall_64+0x115/0x870 [ 735.912227][T15482] ? clear_bhb_loop+0x70/0xc0 [ 735.912241][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.912252][T15482] RIP: 0033:0x7faba995e90e [ 735.912262][T15482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 735.912273][T15482] RSP: 002b:00007fabaa8d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.912283][T15482] RAX: ffffffffffffffda RBX: 00007fabaa8d16c0 RCX: 00007faba995e90e [ 735.912290][T15482] RDX: 000000000000000f RSI: 00007fabaa8d10a0 RDI: 0000000000000004 [ 735.912297][T15482] RBP: 00007fabaa8d1090 R08: 0000000000000000 R09: 0000000000000000 [ 735.912303][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.912309][T15482] R13: 00007faba9c26038 R14: 00007faba9c25fa0 R15: 00007ffd413b3fc8 [ 735.912323][T15482] [ 735.951195][ T5598] usb 10-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 736.086585][T15486] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 736.091917][ T5598] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.141019][ T5598] usb 10-1: Product: syz [ 736.145261][ T5598] usb 10-1: Manufacturer: syz [ 736.149931][ T5598] usb 10-1: SerialNumber: syz [ 736.164958][ T5598] etas_es58x 10-1:1.0: Starting syz syz (Serial Number syz) [ 736.350943][T15497] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1940'. [ 736.359952][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1940'. [ 736.430795][T15501] Cannot find add_set index 0 as target [ 736.980734][ T5776] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 737.027438][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 737.027453][ T30] audit: type=1400 audit(1786565255.947:1133): avc: denied { read } for pid=15511 comm="syz.8.1942" name="baSourceID" dev="configfs" ino=48339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 737.113622][ T30] audit: type=1800 audit(1786565255.987:1134): pid=15512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1942" name="baSourceID" dev="configfs" ino=48339 res=0 errno=0 [ 737.154443][ T5776] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 737.197809][ T5776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.309790][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.383915][ T5776] usb 5-1: Product: syz [ 737.426379][ T5598] etas_es58x 10-1:1.0: could not retrieve the product info string [ 737.476368][ T5776] usb 5-1: Manufacturer: syz [ 737.532002][ T5776] usb 5-1: SerialNumber: syz [ 737.641632][ T5776] usb 5-1: config 0 descriptor?? [ 737.683781][ T5776] usb 5-1: ucan: probing device on interface #0 [ 737.718132][ T5776] usb 5-1: ucan: invalid EP count (0) [ 737.737996][ T5598] usb 10-1: USB disconnect, device number 28 [ 737.749212][ T5776] usb 5-1: ucan: probe failed; try to update the device firmware [ 737.759542][ T5598] etas_es58x 10-1:1.0: Disconnecting syz syz [ 738.023218][T15503] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 738.196593][T12880] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 738.214612][ T30] audit: type=1400 audit(1786565257.127:1135): avc: denied { setopt } for pid=15535 comm="syz.9.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 738.242714][T15536] Unsupported ieee802154 address type: 0 [ 738.253603][T15538] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 738.362374][ T30] audit: type=1800 audit(1786565257.277:1136): pid=15540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1954" name="baSourceID" dev="configfs" ino=48399 res=0 errno=0 [ 738.401281][T12880] usb 9-1: device descriptor read/64, error -71 [ 738.651244][T12880] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 738.751111][ T5701] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 738.781155][T12880] usb 9-1: device descriptor read/64, error -71 [ 738.893252][T12880] usb usb9-port1: attempt power cycle [ 738.911592][ T5701] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 738.923900][ T5701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.932094][ T5701] usb 10-1: Product: syz [ 738.937591][ T5701] usb 10-1: Manufacturer: syz [ 738.943637][ T5701] usb 10-1: SerialNumber: syz [ 738.950530][ T5701] usb 10-1: config 0 descriptor?? [ 738.959845][ T5701] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 029 [ 739.116397][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.134123][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.182342][T15549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.261485][T12880] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 739.284131][T12880] usb 9-1: device descriptor read/8, error -71 [ 739.327929][ T5722] usb 5-1: USB disconnect, device number 17 [ 739.425493][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1963'. [ 739.470586][T15566] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1965'. [ 739.479998][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1965'. [ 739.531799][T12880] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 739.546742][T15569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15569 comm=syz.7.1966 [ 739.567220][ T30] audit: type=1400 audit(1786565258.487:1137): avc: denied { mounton } for pid=15544 comm="syz.9.1956" path="/proc/306/task" dev="proc" ino=48417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 739.567314][T12880] usb 9-1: device descriptor read/8, error -71 [ 739.603096][T15569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=15569 comm=syz.7.1966 [ 739.625227][ T30] audit: type=1400 audit(1786565258.547:1138): avc: denied { accept } for pid=15568 comm="syz.7.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 739.772320][T12880] usb usb9-port1: unable to enumerate USB device [ 739.885476][T15579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.899167][T15579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.360504][ T5701] i2c i2c-1: failure reading functionality [ 740.403703][ T5701] i2c i2c-1: connected i2c-tiny-usb device [ 740.428397][ T5701] usb 10-1: USB disconnect, device number 29 [ 740.703629][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 740.717274][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 740.726848][T15599] netlink: 'syz.4.1975': attribute type 13 has an invalid length. [ 740.743782][T15596] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 740.758442][T15596] netdevsim netdevsim0: Direct firmware load for . [ 740.758442][T15596] failed with error -2 [ 740.771705][T15596] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 740.771705][T15596] [ 741.402733][ T30] audit: type=1400 audit(1786565260.327:1139): avc: denied { bind } for pid=15615 comm="syz.8.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.427731][ T30] audit: type=1400 audit(1786565260.327:1140): avc: denied { write } for pid=15615 comm="syz.8.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.449650][ T30] audit: type=1400 audit(1786565260.327:1141): avc: denied { read } for pid=15615 comm="syz.8.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.469948][ T5714] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 741.600443][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'. [ 741.631550][ T5714] usb 10-1: Using ep0 maxpacket: 8 [ 741.637267][ T5714] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 741.649270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.649316][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.724860][ T5714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.748792][ T5714] usb 10-1: Product: syz [ 741.761360][ T5714] usb 10-1: Manufacturer: syz [ 741.775246][ T5714] usb 10-1: SerialNumber: syz [ 741.794169][ T5714] usb 10-1: config 0 descriptor?? [ 741.814294][ T5714] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 741.835298][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.859030][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.889990][ T30] audit: type=1400 audit(1786565260.807:1142): avc: denied { read } for pid=15624 comm="syz.0.1985" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 741.961398][T15629] FAULT_INJECTION: forcing a failure. [ 741.961398][T15629] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 741.977853][T15629] CPU: 1 UID: 0 PID: 15629 Comm: syz.4.1986 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.977882][T15629] Tainted: [L]=SOFTLOCKUP [ 741.977888][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 741.977898][T15629] Call Trace: [ 741.977904][T15629] [ 741.977911][T15629] dump_stack_lvl+0x100/0x190 [ 741.977939][T15629] should_fail_ex.cold+0x5/0xa [ 741.977958][T15629] ? prepare_alloc_pages+0x16d/0x5f0 [ 741.977985][T15629] should_fail_alloc_page+0xeb/0x140 [ 741.978011][T15629] prepare_alloc_pages+0x1f0/0x5f0 [ 741.978038][T15629] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 741.978060][T15629] ? find_held_lock+0x2b/0x80 [ 741.978077][T15629] ? ima_match_policy+0x8b8/0x2340 [ 741.978099][T15629] ? ima_match_policy+0x8b8/0x2340 [ 741.978124][T15629] ? __lock_acquire+0x49f/0x1a40 [ 741.978155][T15629] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 741.978183][T15629] ? __pfx___might_resched+0x10/0x10 [ 741.978206][T15629] ? find_held_lock+0x2b/0x80 [ 741.978225][T15629] ? down_write+0x146/0x1f0 [ 741.978254][T15629] ? up_write+0x2e5/0x5c0 [ 741.978279][T15629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 741.978303][T15629] ? policy_nodemask+0xed/0x4f0 [ 741.978329][T15629] alloc_pages_mpol+0x1fb/0x540 [ 741.978353][T15629] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 741.978384][T15629] alloc_pages_noprof+0x1a/0x160 [ 741.978412][T15629] __pud_alloc+0x3b/0x690 [ 741.978438][T15629] __handle_mm_fault+0x13ea/0x2a00 [ 741.978461][T15629] ? mt_find+0x45e/0x8e0 [ 741.978486][T15629] ? __pfx___handle_mm_fault+0x10/0x10 [ 741.978501][T15629] ? __pfx_mt_find+0x10/0x10 [ 741.978540][T15629] ? find_vma+0xbf/0x140 [ 741.978561][T15629] ? __pfx_find_vma+0x10/0x10 [ 741.978585][T15629] handle_mm_fault+0x37b/0xa30 [ 741.978608][T15629] do_user_addr_fault+0x74c/0x12f0 [ 741.978642][T15629] exc_page_fault+0x6f/0xd0 [ 741.978663][T15629] asm_exc_page_fault+0x26/0x30 [ 741.978680][T15629] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 741.978699][T15629] Code: a0 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f a0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 741.978716][T15629] RSP: 0018:ffffc9000538fb98 EFLAGS: 00050202 [ 741.978733][T15629] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000060 [ 741.978744][T15629] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000538fc90 [ 741.978755][T15629] RBP: 0000000000000060 R08: 0000000000000001 R09: fffff52000a71f9d [ 741.978765][T15629] R10: ffffc9000538fcef R11: 0000000000000000 R12: 0000000000000000 [ 741.978775][T15629] R13: ffffc9000538fc90 R14: ffff88803723c130 R15: ffff88807c9ca740 [ 741.978799][T15629] _copy_from_user+0x98/0xd0 [ 741.978823][T15629] do_ipt_set_ctl+0x9ac/0xcf0 [ 741.978848][T15629] ? nf_sockopt_find.isra.0+0x222/0x290 [ 741.978870][T15629] ? nf_sockopt_find.isra.0+0x222/0x290 [ 741.978894][T15629] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 741.978918][T15629] ? __mutex_unlock_slowpath+0x35d/0x930 [ 741.978942][T15629] ? sockopt_release_sock+0x5c/0x70 [ 741.978966][T15629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.979001][T15629] ? nf_sockopt_find.isra.0+0x222/0x290 [ 741.979025][T15629] nf_setsockopt+0x8d/0xf0 [ 741.979048][T15629] ip_setsockopt+0xcb/0xf0 [ 741.979076][T15629] tcp_setsockopt+0xa7/0x100 [ 741.979093][T15629] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 741.979121][T15629] do_sock_setsockopt+0xf3/0x1d0 [ 741.979155][T15629] __sys_setsockopt+0x195/0x220 [ 741.979181][T15629] __x64_sys_setsockopt+0xbd/0x160 [ 741.979202][T15629] ? do_syscall_64+0x90/0x870 [ 741.979224][T15629] ? lockdep_hardirqs_on+0x78/0x100 [ 741.979245][T15629] do_syscall_64+0x115/0x870 [ 741.979267][T15629] ? clear_bhb_loop+0x70/0xc0 [ 741.979289][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.979306][T15629] RIP: 0033:0x7f66fed9e0d9 [ 741.979321][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.979336][T15629] RSP: 002b:00007f66fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 741.979352][T15629] RAX: ffffffffffffffda RBX: 00007f66ff025fa0 RCX: 00007f66fed9e0d9 [ 741.979363][T15629] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 741.979372][T15629] RBP: 00007f66fcff6090 R08: 0000000000000268 R09: 0000000000000000 [ 741.979382][T15629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.979392][T15629] R13: 00007f66ff026038 R14: 00007f66ff025fa0 R15: 00007ffe3dc7fb48 [ 741.979417][T15629] [ 742.468006][ T5714] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 742.479023][ T5714] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 742.494295][ T5714] usb 10-1: USB disconnect, device number 30 [ 743.342276][T15645] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 743.356191][ T5776] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 744.136867][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 744.136881][ T30] audit: type=1326 audit(1786565263.057:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.0.1993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e0479e0d9 code=0x0 [ 744.170462][ T5776] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 744.182714][ T5776] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.195571][ T5776] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.201180][ T5701] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 744.212052][ T5776] usb 9-1: Product: syz [ 744.216395][ T5776] usb 9-1: Manufacturer: syz [ 744.224901][ T5776] usb 9-1: SerialNumber: syz [ 744.248947][ T5776] usb 9-1: config 0 descriptor?? [ 744.361809][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 744.367475][ T5701] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 744.379900][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.388659][ T5701] usb 5-1: Product: syz [ 744.393408][ T5701] usb 5-1: Manufacturer: syz [ 744.399131][ T5701] usb 5-1: SerialNumber: syz [ 744.421546][ T5701] usb 5-1: config 0 descriptor?? [ 744.432894][ T5701] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 744.469971][T15633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.480274][T15633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.490205][T15633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.501678][T15633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.515205][ T5776] usb 9-1: USB disconnect, device number 38 [ 744.532935][ T5714] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 744.711169][ T5714] usb 10-1: Using ep0 maxpacket: 8 [ 744.717203][ T5714] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 744.728041][ T5714] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 744.736762][ T5714] usb 10-1: config 0 has no interface number 0 [ 744.743511][ T5714] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 744.754834][ T5714] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 744.767224][ T5714] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 744.778716][ T5714] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 744.792311][ T5714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.803185][ T5714] usb 10-1: config 0 descriptor?? [ 744.815350][ T5714] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 745.070890][ T30] audit: type=1400 audit(1786565263.987:1145): avc: denied { ioctl } for pid=15659 comm="syz.0.1995" path="socket:[47679]" dev="sockfs" ino=47679 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 745.099496][ T30] audit: type=1400 audit(1786565263.997:1146): avc: denied { write } for pid=15659 comm="syz.0.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 745.135122][ T30] audit: type=1400 audit(1786565264.027:1147): avc: denied { read } for pid=15659 comm="syz.0.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 745.209591][ T5701] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 745.263609][ T5701] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 745.281744][ T5714] usb 10-1: USB disconnect, device number 31 [ 745.315712][ T5701] usb 5-1: USB disconnect, device number 18 [ 745.329934][ T5714] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 745.383957][T15671] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1999'. [ 745.394705][T15671] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1999'. [ 745.540768][ T5598] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 745.693167][ T5598] usb 9-1: unable to get BOS descriptor or descriptor too short [ 745.701466][ T5598] usb 9-1: not running at top speed; connect to a high speed hub [ 745.709921][ T5598] usb 9-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 745.711243][ T5714] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 745.720053][ T5598] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.737116][ T5598] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.748487][ T5598] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.756631][ T5598] usb 9-1: Product: syz [ 745.760910][ T5598] usb 9-1: Manufacturer: syz [ 745.767340][ T5598] usb 9-1: SerialNumber: syz [ 745.844081][ T30] audit: type=1800 audit(1786565264.767:1148): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2001" name="baSourceID" dev="configfs" ino=47711 res=0 errno=0 [ 745.885624][ T5714] usb 10-1: Using ep0 maxpacket: 8 [ 745.901064][ T5714] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 745.915252][ T5714] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 745.949848][ T5714] usb 10-1: config 0 has no interface number 0 [ 745.972087][ T5714] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.022960][ T5714] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 746.049051][ T5714] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 746.147892][ T5714] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 746.162718][ T5714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.175274][ T5714] usb 10-1: config 0 descriptor?? [ 746.231592][ T5714] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 746.275264][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15685 comm=syz.4.2004 [ 746.306050][ T5598] usb 9-1: USB disconnect, device number 39 [ 746.369239][T15682] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5124.8192.0), cmd(2) [ 746.603776][ T5714] usb 10-1: USB disconnect, device number 32 [ 746.633531][ T5714] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 746.648048][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2006'. [ 746.675846][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2006'. [ 746.701246][T15698] netlink: 'syz.7.2006': attribute type 13 has an invalid length. [ 746.968252][T15710] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.300226][ T30] audit: type=1400 audit(1786565266.217:1149): avc: denied { write } for pid=15715 comm="syz.0.2014" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 747.383949][T15716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=15716 comm=syz.0.2014 [ 747.418027][ T30] audit: type=1400 audit(1786565266.337:1150): avc: denied { ioctl } for pid=15715 comm="syz.0.2014" path="/dev/input/mice" dev="devtmpfs" ino=915 ioctlcmd=0x54d4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 747.867628][ T30] audit: type=1400 audit(1786565266.787:1151): avc: denied { read write } for pid=15732 comm="syz.9.2019" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 747.967634][ T30] audit: type=1400 audit(1786565266.787:1152): avc: denied { open } for pid=15732 comm="syz.9.2019" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 748.065239][T15739] audit: audit_backlog=65 > audit_backlog_limit=64 [ 749.382503][ T5776] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 749.540805][ T5776] usb 9-1: Using ep0 maxpacket: 32 [ 749.943398][ T5776] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 749.959877][ T5776] usb 9-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 749.977220][ T5776] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.985897][ T5776] usb 9-1: Product: syz [ 749.990860][ T5776] usb 9-1: Manufacturer: syz [ 749.997816][ T5776] usb 9-1: SerialNumber: syz [ 750.006064][ T5776] usb 9-1: config 0 descriptor?? [ 750.020474][ T5776] cdc_ether 9-1:0.0: skipping garbage [ 750.029446][ T5776] cdc_ether 9-1:0.0: missing cdc header descriptor [ 750.057579][ T5776] usb 9-1: unsupported MDLM descriptors [ 750.109802][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2036'. [ 750.217911][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 750.217925][ T30] audit: type=1326 audit(1786565269.137:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.219504][ T24] usb 9-1: USB disconnect, device number 40 [ 750.230675][ T30] audit: type=1326 audit(1786565269.147:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.310328][ T30] audit: type=1326 audit(1786565269.147:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.330748][ T5776] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 750.338755][ T30] audit: type=1326 audit(1786565269.147:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.376223][ T30] audit: type=1326 audit(1786565269.147:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.406277][ T30] audit: type=1326 audit(1786565269.147:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.433515][T12880] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 750.445223][ T30] audit: type=1326 audit(1786565269.147:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.473165][ T30] audit: type=1326 audit(1786565269.147:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.500506][ T30] audit: type=1326 audit(1786565269.147:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.506648][ T5776] usb 10-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 750.534245][ T30] audit: type=1326 audit(1786565269.147:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.7.2039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f269b79e0d9 code=0x7ffc0000 [ 750.545689][ T5776] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.579675][ T5776] usb 10-1: Product: syz [ 750.601170][ T5776] usb 10-1: Manufacturer: syz [ 750.613342][ T5776] usb 10-1: SerialNumber: syz [ 750.636147][ T5776] etas_es58x 10-1:1.0: Starting syz syz (Serial Number syz) [ 750.651337][T12880] usb 5-1: Using ep0 maxpacket: 8 [ 750.672761][T12880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 750.683923][T12880] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 750.700136][T12880] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 750.708957][T12880] usb 5-1: can't read configurations, error -71 [ 750.727681][T15802] xt_bpf: check failed: parse error [ 750.744338][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2043'. [ 750.754610][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2043'. [ 750.936404][T15812] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.282910][T15815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2047'. [ 751.439361][T15815] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 751.719117][T15806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.847849][ T5776] etas_es58x 10-1:1.0: could not retrieve the product info string [ 752.027586][ T5776] usb 10-1: USB disconnect, device number 33 [ 752.059556][ T5776] etas_es58x 10-1:1.0: Disconnecting syz syz [ 752.708119][T15848] FAULT_INJECTION: forcing a failure. [ 752.708119][T15848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.769824][T15848] CPU: 1 UID: 0 PID: 15848 Comm: syz.9.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.769851][T15848] Tainted: [L]=SOFTLOCKUP [ 752.769858][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 752.769868][T15848] Call Trace: [ 752.769873][T15848] [ 752.769880][T15848] dump_stack_lvl+0x100/0x190 [ 752.769907][T15848] should_fail_ex.cold+0x5/0xa [ 752.769926][T15848] ? prepare_alloc_pages+0x16d/0x5f0 [ 752.769953][T15848] should_fail_alloc_page+0xeb/0x140 [ 752.769977][T15848] prepare_alloc_pages+0x1f0/0x5f0 [ 752.770004][T15848] ? is_bpf_text_address+0x8a/0x1a0 [ 752.770030][T15848] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 752.770050][T15848] ? is_bpf_text_address+0x94/0x1a0 [ 752.770074][T15848] ? kernel_text_address+0x8d/0x100 [ 752.770093][T15848] ? find_held_lock+0x2b/0x80 [ 752.770109][T15848] ? __kernel_text_address+0xd/0x30 [ 752.770128][T15848] ? unwind_get_return_address+0x59/0xa0 [ 752.770148][T15848] ? arch_stack_walk+0xa6/0xf0 [ 752.770172][T15848] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 752.770194][T15848] ? __pfx_stack_trace_save+0x10/0x10 [ 752.770211][T15848] ? find_held_lock+0x2b/0x80 [ 752.770227][T15848] ? stack_depot_save_flags+0x27/0x9d0 [ 752.770250][T15848] ? ima_match_policy+0x8b8/0x2340 [ 752.770277][T15848] ? kasan_save_stack+0x3f/0x50 [ 752.770295][T15848] ? kasan_save_stack+0x30/0x50 [ 752.770317][T15848] ? handle_mm_fault+0x37b/0xa30 [ 752.770332][T15848] ? do_user_addr_fault+0x74c/0x12f0 [ 752.770358][T15848] ? exc_page_fault+0x6f/0xd0 [ 752.770379][T15848] ? asm_exc_page_fault+0x26/0x30 [ 752.770396][T15848] ? rep_movs_alternative+0x4a/0xa0 [ 752.770413][T15848] ? _copy_from_user+0x98/0xd0 [ 752.770434][T15848] ? do_ipt_set_ctl+0x9ac/0xcf0 [ 752.770457][T15848] ? nf_setsockopt+0x8d/0xf0 [ 752.770476][T15848] ? ip_setsockopt+0xcb/0xf0 [ 752.770498][T15848] ? tcp_setsockopt+0xa7/0x100 [ 752.770513][T15848] ? do_sock_setsockopt+0xf3/0x1d0 [ 752.770536][T15848] ? __sys_setsockopt+0x195/0x220 [ 752.770556][T15848] ? __x64_sys_setsockopt+0xbd/0x160 [ 752.770576][T15848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.770599][T15848] ? policy_nodemask+0xed/0x4f0 [ 752.770628][T15848] alloc_pages_mpol+0x1fb/0x540 [ 752.770654][T15848] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 752.770685][T15848] alloc_pages_noprof+0x1a/0x160 [ 752.770713][T15848] pte_alloc_one+0x1c/0x3d0 [ 752.770733][T15848] __pte_alloc+0x6d/0x3e0 [ 752.770755][T15848] ? __pfx___pte_alloc+0x10/0x10 [ 752.770776][T15848] ? do_raw_spin_lock+0x128/0x260 [ 752.770801][T15848] ? find_held_lock+0x2b/0x80 [ 752.770818][T15848] do_anonymous_page+0x13ae/0x2080 [ 752.770848][T15848] ? __pmd_alloc+0x3fb/0x950 [ 752.770873][T15848] __handle_mm_fault+0x1d2c/0x2a00 [ 752.770894][T15848] ? mt_find+0x45e/0x8e0 [ 752.770920][T15848] ? __pfx___handle_mm_fault+0x10/0x10 [ 752.770934][T15848] ? __pfx_mt_find+0x10/0x10 [ 752.770972][T15848] ? find_vma+0xbf/0x140 [ 752.770996][T15848] ? __pfx_find_vma+0x10/0x10 [ 752.771019][T15848] handle_mm_fault+0x37b/0xa30 [ 752.771041][T15848] do_user_addr_fault+0x74c/0x12f0 [ 752.771074][T15848] exc_page_fault+0x6f/0xd0 [ 752.771095][T15848] asm_exc_page_fault+0x26/0x30 [ 752.771111][T15848] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 752.771128][T15848] Code: a0 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f a0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 752.771145][T15848] RSP: 0018:ffffc900030afb98 EFLAGS: 00050202 [ 752.771159][T15848] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000060 [ 752.771169][T15848] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc900030afc90 [ 752.771179][T15848] RBP: 0000000000000060 R08: 0000000000000001 R09: fffff52000615f9d [ 752.771189][T15848] R10: ffffc900030afcef R11: 0000000000000000 R12: 0000000000000000 [ 752.771198][T15848] R13: ffffc900030afc90 R14: ffff888036746830 R15: ffff88807c874e80 [ 752.771222][T15848] _copy_from_user+0x98/0xd0 [ 752.771246][T15848] do_ipt_set_ctl+0x9ac/0xcf0 [ 752.771268][T15848] ? nf_sockopt_find.isra.0+0x222/0x290 [ 752.771288][T15848] ? nf_sockopt_find.isra.0+0x222/0x290 [ 752.771311][T15848] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 752.771334][T15848] ? __mutex_unlock_slowpath+0x35d/0x930 [ 752.771358][T15848] ? sockopt_release_sock+0x5c/0x70 [ 752.771381][T15848] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 752.771415][T15848] ? nf_sockopt_find.isra.0+0x222/0x290 [ 752.771439][T15848] nf_setsockopt+0x8d/0xf0 [ 752.771462][T15848] ip_setsockopt+0xcb/0xf0 [ 752.771488][T15848] tcp_setsockopt+0xa7/0x100 [ 752.771501][T15848] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 752.771529][T15848] do_sock_setsockopt+0xf3/0x1d0 [ 752.771556][T15848] __sys_setsockopt+0x195/0x220 [ 752.771580][T15848] __x64_sys_setsockopt+0xbd/0x160 [ 752.771601][T15848] ? do_syscall_64+0x90/0x870 [ 752.771622][T15848] ? lockdep_hardirqs_on+0x78/0x100 [ 752.771644][T15848] do_syscall_64+0x115/0x870 [ 752.771666][T15848] ? clear_bhb_loop+0x70/0xc0 [ 752.771688][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.771705][T15848] RIP: 0033:0x7fd6f099e0d9 [ 752.771720][T15848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.771735][T15848] RSP: 002b:00007fd6f17db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 752.771751][T15848] RAX: ffffffffffffffda RBX: 00007fd6f0c25fa0 RCX: 00007fd6f099e0d9 [ 752.771762][T15848] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 752.771772][T15848] RBP: 00007fd6f17db090 R08: 0000000000000268 R09: 0000000000000000 [ 752.771782][T15848] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.771792][T15848] R13: 00007fd6f0c26038 R14: 00007fd6f0c25fa0 R15: 00007ffd0714ddb8 [ 752.771817][T15848] [ 753.479036][T12880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 753.582175][T15861] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 753.654092][T12880] usb 5-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 753.683691][T12880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 753.711454][T12880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 193, changing to 11 [ 753.732789][T12880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 25431, setting to 1024 [ 753.753118][T12880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 753.777984][T12880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.806945][T12880] usb 5-1: config 0 descriptor?? [ 754.101498][ T5776] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 754.149793][T12474] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 754.252458][T15850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.265920][ T5776] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 754.287839][T12880] logitech 0003:046D:C704.0001: reserved main item tag 0xe [ 754.316795][T12880] logitech 0003:046D:C704.0001: unexpected long global item [ 754.319380][ T5776] usb 9-1: no configurations [ 754.368629][ T5776] usb 9-1: can't read configurations, error -22 [ 754.372926][T12880] logitech 0003:046D:C704.0001: parse failed [ 754.407674][T12880] logitech 0003:046D:C704.0001: probe with driver logitech failed with error -22 [ 754.500341][T10320] usb 5-1: USB disconnect, device number 21 [ 754.517477][T15898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2070'. [ 754.531244][ T5776] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 754.679058][T15906] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.721595][ T5776] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 754.745902][ T5776] usb 9-1: no configurations [ 754.750770][T15908] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2074'. [ 754.769971][ T5776] usb 9-1: can't read configurations, error -22 [ 754.776476][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 754.787046][ T5776] usb usb9-port1: attempt power cycle [ 754.803772][T15909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.824600][T15909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.140726][ T5776] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 755.161911][ T5776] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 755.171498][ T5776] usb 9-1: no configurations [ 755.176092][ T5776] usb 9-1: can't read configurations, error -22 [ 755.312334][T10320] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 755.321057][ T5776] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 755.341996][ T5776] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 755.360818][ T5776] usb 9-1: no configurations [ 755.368487][ T5776] usb 9-1: can't read configurations, error -22 [ 755.382717][ T5776] usb usb9-port1: unable to enumerate USB device [ 755.467751][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.476951][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.486408][T10320] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 755.498111][T10320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.506168][T10320] usb 5-1: Product: syz [ 755.510441][T10320] usb 5-1: Manufacturer: syz [ 755.515160][T10320] usb 5-1: SerialNumber: syz [ 755.680855][ T5776] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 755.725735][T10320] usb 5-1: selecting invalid altsetting 1 [ 755.733488][T10320] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 755.742291][T10320] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -22! [ 755.750105][T10320] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 755.763688][T10320] usb 5-1: selecting invalid altsetting 1 [ 755.769948][T10320] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 755.787807][T10320] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -22! [ 755.801136][T10320] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 755.819578][T10320] usb 5-1: USB disconnect, device number 22 [ 755.840707][ T5776] usb 10-1: Using ep0 maxpacket: 8 [ 755.859233][ T5776] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 755.879281][ T5776] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 755.892937][ T5776] usb 10-1: config 0 has no interface number 0 [ 755.899135][ T5776] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.912347][ T5776] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 755.924261][ T5776] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 755.936036][ T5776] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 755.950774][ T5776] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.968144][ T5776] usb 10-1: config 0 descriptor?? [ 755.992061][ T5776] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 756.100163][T15938] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2085'. [ 756.109274][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 756.214484][T15941] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.683487][T15945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2087'. [ 757.260275][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2091'. [ 757.285313][T15958] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2092'. [ 757.497887][T15964] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2093'. [ 757.540453][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2093'. [ 757.826428][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 757.826441][ T30] audit: type=1800 audit(1786565276.747:1367): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2096" name="baSourceID" dev="configfs" ino=49351 res=0 errno=0 [ 757.908319][T12474] Bluetooth: hci0: unexpected event 0x1c length: 23 > 5 [ 759.011769][ T5783] usb 10-1: USB disconnect, device number 34 [ 759.061791][ T5783] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 760.258664][T16005] FAULT_INJECTION: forcing a failure. [ 760.258664][T16005] name failslab, interval 1, probability 0, space 0, times 0 [ 760.301936][T16007] __nla_validate_parse: 1 callbacks suppressed [ 760.301953][T16007] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2108'. [ 760.318760][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2108'. [ 760.375478][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.4.2107 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.375508][T16005] Tainted: [L]=SOFTLOCKUP [ 760.375514][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 760.375524][T16005] Call Trace: [ 760.375530][T16005] [ 760.375536][T16005] dump_stack_lvl+0x100/0x190 [ 760.375564][T16005] should_fail_ex.cold+0x5/0xa [ 760.375587][T16005] should_failslab+0xc2/0x120 [ 760.375611][T16005] kmem_cache_alloc_noprof+0x91/0x6a0 [ 760.375632][T16005] ? ptlock_alloc+0x1f/0x70 [ 760.375652][T16005] ptlock_alloc+0x1f/0x70 [ 760.375668][T16005] pte_alloc_one+0x82/0x3d0 [ 760.375689][T16005] __pte_alloc+0x6d/0x3e0 [ 760.375710][T16005] ? __pfx___pte_alloc+0x10/0x10 [ 760.375732][T16005] ? do_raw_spin_lock+0x128/0x260 [ 760.375756][T16005] ? find_held_lock+0x2b/0x80 [ 760.375774][T16005] do_anonymous_page+0x13ae/0x2080 [ 760.375808][T16005] ? __pmd_alloc+0x3fb/0x950 [ 760.375834][T16005] __handle_mm_fault+0x1d2c/0x2a00 [ 760.375856][T16005] ? mt_find+0x45e/0x8e0 [ 760.375883][T16005] ? __pfx___handle_mm_fault+0x10/0x10 [ 760.375898][T16005] ? __pfx_mt_find+0x10/0x10 [ 760.375938][T16005] ? find_vma+0xbf/0x140 [ 760.375958][T16005] ? __pfx_find_vma+0x10/0x10 [ 760.375981][T16005] handle_mm_fault+0x37b/0xa30 [ 760.376003][T16005] do_user_addr_fault+0x74c/0x12f0 [ 760.376039][T16005] exc_page_fault+0x6f/0xd0 [ 760.376062][T16005] asm_exc_page_fault+0x26/0x30 [ 760.376080][T16005] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 760.376099][T16005] Code: a0 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f a0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 760.376114][T16005] RSP: 0018:ffffc900024f7b98 EFLAGS: 00050202 [ 760.376129][T16005] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000060 [ 760.376139][T16005] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc900024f7c90 [ 760.376150][T16005] RBP: 0000000000000060 R08: 0000000000000001 R09: fffff5200049ef9d [ 760.376160][T16005] R10: ffffc900024f7cef R11: 0000000000000000 R12: 0000000000000000 [ 760.376170][T16005] R13: ffffc900024f7c90 R14: ffff88805cba4e30 R15: ffff88807c9ca740 [ 760.376195][T16005] _copy_from_user+0x98/0xd0 [ 760.376220][T16005] do_ipt_set_ctl+0x9ac/0xcf0 [ 760.376244][T16005] ? nf_sockopt_find.isra.0+0x222/0x290 [ 760.376265][T16005] ? nf_sockopt_find.isra.0+0x222/0x290 [ 760.376289][T16005] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 760.376313][T16005] ? __mutex_unlock_slowpath+0x35d/0x930 [ 760.376338][T16005] ? sockopt_release_sock+0x5c/0x70 [ 760.376362][T16005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.376402][T16005] ? nf_sockopt_find.isra.0+0x222/0x290 [ 760.376427][T16005] nf_setsockopt+0x8d/0xf0 [ 760.376450][T16005] ip_setsockopt+0xcb/0xf0 [ 760.376477][T16005] tcp_setsockopt+0xa7/0x100 [ 760.376494][T16005] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 760.376522][T16005] do_sock_setsockopt+0xf3/0x1d0 [ 760.376551][T16005] __sys_setsockopt+0x195/0x220 [ 760.376576][T16005] __x64_sys_setsockopt+0xbd/0x160 [ 760.376597][T16005] ? do_syscall_64+0x90/0x870 [ 760.376618][T16005] ? lockdep_hardirqs_on+0x78/0x100 [ 760.376640][T16005] do_syscall_64+0x115/0x870 [ 760.376660][T16005] ? clear_bhb_loop+0x70/0xc0 [ 760.376680][T16005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.376697][T16005] RIP: 0033:0x7f66fed9e0d9 [ 760.376711][T16005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.376727][T16005] RSP: 002b:00007f66fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 760.376742][T16005] RAX: ffffffffffffffda RBX: 00007f66ff025fa0 RCX: 00007f66fed9e0d9 [ 760.376753][T16005] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 760.376763][T16005] RBP: 00007f66fcff6090 R08: 0000000000000268 R09: 0000000000000000 [ 760.376773][T16005] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.376782][T16005] R13: 00007f66ff026038 R14: 00007f66ff025fa0 R15: 00007ffe3dc7fb48 [ 760.376805][T16005] [ 761.041750][ T30] audit: type=1400 audit(1786565279.967:1368): avc: denied { read } for pid=16013 comm="syz.8.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 761.102523][ T30] audit: type=1400 audit(1786565279.997:1369): avc: denied { connect } for pid=16020 comm="syz.7.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.180718][ T5783] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 761.265585][ T30] audit: type=1400 audit(1786565280.007:1370): avc: denied { write } for pid=16020 comm="syz.7.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.361182][ T5783] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 761.408704][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.418548][ T5783] usb 5-1: Product: syz [ 761.430113][ T5783] usb 5-1: Manufacturer: syz [ 761.441240][ T5783] usb 5-1: SerialNumber: syz [ 761.514138][T16034] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2116'. [ 761.579830][T16037] FAULT_INJECTION: forcing a failure. [ 761.579830][T16037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.607955][T16037] CPU: 0 UID: 0 PID: 16037 Comm: syz.0.2117 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.607983][T16037] Tainted: [L]=SOFTLOCKUP [ 761.607989][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 761.608000][T16037] Call Trace: [ 761.608006][T16037] [ 761.608011][T16037] dump_stack_lvl+0x100/0x190 [ 761.608040][T16037] should_fail_ex.cold+0x5/0xa [ 761.608062][T16037] _copy_from_user+0x2e/0xd0 [ 761.608087][T16037] move_addr_to_kernel+0x65/0x170 [ 761.608107][T16037] copy_msghdr_from_user+0x3f0/0x4c0 [ 761.608138][T16037] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 761.608160][T16037] ? __pfx__kstrtoull+0x10/0x10 [ 761.608183][T16037] ___sys_sendmsg+0x106/0x1e0 [ 761.608201][T16037] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.608230][T16037] ? find_held_lock+0x2b/0x80 [ 761.608265][T16037] __sys_sendmmsg+0x20c/0x440 [ 761.608290][T16037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 761.608312][T16037] ? ksys_write+0x190/0x250 [ 761.608347][T16037] ? fput+0x79/0x100 [ 761.608367][T16037] ? ksys_write+0x1ac/0x250 [ 761.608382][T16037] ? __pfx_ksys_write+0x10/0x10 [ 761.608403][T16037] __x64_sys_sendmmsg+0x9c/0x100 [ 761.608425][T16037] ? lockdep_hardirqs_on+0x78/0x100 [ 761.608448][T16037] do_syscall_64+0x115/0x870 [ 761.608470][T16037] ? clear_bhb_loop+0x70/0xc0 [ 761.608491][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.608508][T16037] RIP: 0033:0x7f6e0479e0d9 [ 761.608524][T16037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.608540][T16037] RSP: 002b:00007f6e05581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 761.608558][T16037] RAX: ffffffffffffffda RBX: 00007f6e04a25fa0 RCX: 00007f6e0479e0d9 [ 761.608569][T16037] RDX: 0000000000000001 RSI: 0000200000002640 RDI: 0000000000000003 [ 761.608580][T16037] RBP: 00007f6e05581090 R08: 0000000000000000 R09: 0000000000000000 [ 761.608590][T16037] R10: 0000000020040000 R11: 0000000000000246 R12: 0000000000000001 [ 761.608600][T16037] R13: 00007f6e04a26038 R14: 00007f6e04a25fa0 R15: 00007ffcc6b8cf58 [ 761.608624][T16037] [ 762.235760][T16057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16057 comm=syz.8.2124 [ 762.912986][T16062] Cannot find add_set index 0 as target [ 762.936815][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2127'. [ 762.947131][ T30] audit: type=1400 audit(1786565281.847:1371): avc: denied { ioctl } for pid=16061 comm="syz.9.2126" path="/121/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 762.955261][T16065] vlan2: entered promiscuous mode [ 763.046563][T16065] gretap0: entered promiscuous mode [ 763.551275][T16074] FAULT_INJECTION: forcing a failure. [ 763.551275][T16074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.574423][T16074] CPU: 1 UID: 0 PID: 16074 Comm: syz.8.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.574450][T16074] Tainted: [L]=SOFTLOCKUP [ 763.574456][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 763.574465][T16074] Call Trace: [ 763.574470][T16074] [ 763.574476][T16074] dump_stack_lvl+0x100/0x190 [ 763.574503][T16074] should_fail_ex.cold+0x5/0xa [ 763.574528][T16074] _copy_from_user+0x2e/0xd0 [ 763.574553][T16074] copy_msghdr_from_user+0x9f/0x4c0 [ 763.574572][T16074] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 763.574605][T16074] ___sys_sendmsg+0x106/0x1e0 [ 763.574624][T16074] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.574638][T16074] ? __lock_acquire+0x49f/0x1a40 [ 763.574659][T16074] ? get_pid_task+0x106/0x250 [ 763.574701][T16074] __sys_sendmsg+0x160/0x210 [ 763.574724][T16074] ? __pfx___sys_sendmsg+0x10/0x10 [ 763.574760][T16074] do_syscall_64+0x115/0x870 [ 763.574783][T16074] ? clear_bhb_loop+0x70/0xc0 [ 763.574805][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.574822][T16074] RIP: 0033:0x7faba999e0d9 [ 763.574836][T16074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.574852][T16074] RSP: 002b:00007fabaa8d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.574869][T16074] RAX: ffffffffffffffda RBX: 00007faba9c25fa0 RCX: 00007faba999e0d9 [ 763.574878][T16074] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 763.574888][T16074] RBP: 00007fabaa8d1090 R08: 0000000000000000 R09: 0000000000000000 [ 763.574898][T16074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.574908][T16074] R13: 00007faba9c26038 R14: 00007faba9c25fa0 R15: 00007ffd413b3fc8 [ 763.574931][T16074] [ 763.809071][T16077] Unsupported ieee802154 address type: 0 [ 763.850448][ T30] audit: type=1400 audit(1786565282.767:1372): avc: denied { getattr } for pid=16076 comm="syz.9.2131" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 763.871330][ T5783] usb 5-1: selecting invalid altsetting 1 [ 763.887650][ T5783] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 763.896258][ T5783] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -22! [ 763.906579][ T5783] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 763.923024][ T5783] usb 5-1: selecting invalid altsetting 1 [ 763.928760][ T5783] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 763.938382][ T5783] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -22! [ 763.945385][ T5783] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 763.955223][ T5783] usb 5-1: USB disconnect, device number 23 [ 764.112602][ T30] audit: type=1800 audit(1786565283.037:1373): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2133" name="baSourceID" dev="configfs" ino=49606 res=0 errno=0 [ 764.203535][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2137'. [ 764.273341][T16093] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2138'. [ 764.326246][T16098] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 764.336544][T16098] overlayfs: failed to clone lowerpath [ 764.348530][T16098] overlayfs: failed to clone lowerpath [ 764.390775][ T5783] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 764.541333][T12880] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 764.543062][ T5783] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 764.583879][ T5783] usb 5-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 764.606097][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 764.632492][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.664464][ T5783] usb 5-1: config 0 descriptor?? [ 764.702060][T12880] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 764.725980][T12880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.975144][T16084] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.067370][T10320] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 765.591792][T10320] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 765.720397][T12880] usb 9-1: Product: syz [ 765.726722][T10320] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.731143][T12880] usb 9-1: Manufacturer: syz [ 765.742451][T12880] usb 9-1: SerialNumber: syz [ 765.770225][T10320] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 765.771384][T12880] usb 9-1: config 0 descriptor?? [ 765.860139][T10320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.918873][T10320] usb 10-1: config 0 descriptor?? [ 765.989967][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.021297][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.066159][T12880] cx82310_eth 9-1:0.0: probe with driver cx82310_eth failed with error -22 [ 766.109530][T12880] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 766.158884][T16112] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.173554][T12880] usb 9-1: USB disconnect, device number 45 [ 766.272259][T16125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.285709][ T5783] usb 5-1: string descriptor 0 read error: -71 [ 766.297117][ T5783] usb 5-1: USB disconnect, device number 24 [ 766.304786][T16125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.397064][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 766.403256][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 766.446349][T16128] ceph: No mds server is up or the cluster is laggy [ 766.624599][T10320] usb 10-1: string descriptor 0 read error: -71 [ 766.642892][T10320] usb 10-1: USB disconnect, device number 35 [ 766.689380][T16137] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2151'. [ 766.943234][ T5783] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 767.100815][ T5783] usb 9-1: device descriptor read/64, error -71 [ 767.281318][ T30] audit: type=1400 audit(1786565286.207:1374): avc: denied { ioctl } for pid=16147 comm="syz.4.2156" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 767.424642][ T5783] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 767.630897][ T5783] usb 9-1: device descriptor read/64, error -71 [ 767.773641][ T5783] usb usb9-port1: attempt power cycle [ 768.230759][ T5783] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 768.941433][ T5783] usb 9-1: device descriptor read/8, error -71 [ 769.034101][T16168] netlink: 'syz.0.2162': attribute type 21 has an invalid length. [ 769.092786][T16168] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2162'. [ 769.118853][T16168] netlink: 'syz.0.2162': attribute type 4 has an invalid length. [ 769.139476][T16168] netlink: 'syz.0.2162': attribute type 3 has an invalid length. [ 769.172375][T16168] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2162'. [ 769.190947][ T5783] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 769.213380][ T5783] usb 9-1: device descriptor read/8, error -71 [ 769.344286][ T5783] usb usb9-port1: unable to enumerate USB device [ 769.613062][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.685753][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.997138][T16195] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.998052][ T30] audit: type=1326 audit(1786565289.917:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.434613][ T30] audit: type=1326 audit(1786565289.917:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.461519][ T30] audit: type=1326 audit(1786565289.917:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.488551][ T30] audit: type=1326 audit(1786565289.917:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.613309][ T30] audit: type=1326 audit(1786565289.917:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.644450][ T30] audit: type=1326 audit(1786565289.917:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.733296][ T30] audit: type=1326 audit(1786565289.917:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.796815][ T30] audit: type=1326 audit(1786565289.917:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.796861][ T30] audit: type=1326 audit(1786565289.917:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 771.796901][ T30] audit: type=1326 audit(1786565289.917:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.9.2173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 772.234655][T16226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.256191][T16226] batadv_slave_1: entered promiscuous mode [ 772.271075][ T5783] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 772.444014][ T5783] usb 10-1: Using ep0 maxpacket: 8 [ 772.455590][ T5783] usb 10-1: New USB device found, idVendor=0211, idProduct=002b, bcdDevice= 0.01 [ 772.465696][ T5783] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 772.475439][ T5783] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 772.483713][ T5783] usb 10-1: can't read configurations, error -61 [ 772.623362][ T5783] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 772.671560][T10320] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 772.800787][ T5783] usb 10-1: Using ep0 maxpacket: 8 [ 772.812656][ T5783] usb 10-1: New USB device found, idVendor=0211, idProduct=002b, bcdDevice= 0.01 [ 772.822683][T10320] usb 5-1: device descriptor read/64, error -71 [ 772.829060][ T5783] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 772.840039][ T5783] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 772.849110][ T5783] usb 10-1: can't read configurations, error -61 [ 772.861725][ T5783] usb usb10-port1: attempt power cycle [ 773.151498][T10320] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 773.617712][ T5783] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 773.651274][ T5783] usb 10-1: Using ep0 maxpacket: 8 [ 773.662365][ T5783] usb 10-1: New USB device found, idVendor=0211, idProduct=002b, bcdDevice= 0.01 [ 773.673383][ T5783] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 773.681389][T10320] usb 5-1: device descriptor read/64, error -71 [ 773.689174][ T5783] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 773.697553][ T5783] usb 10-1: can't read configurations, error -61 [ 773.791087][T10320] usb usb5-port1: attempt power cycle [ 773.830792][ T5783] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 773.908161][ T5783] usb 10-1: Using ep0 maxpacket: 8 [ 773.917522][ T5783] usb 10-1: New USB device found, idVendor=0211, idProduct=002b, bcdDevice= 0.01 [ 773.934496][ T5783] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 773.943805][ T5783] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 773.951545][ T5783] usb 10-1: can't read configurations, error -61 [ 773.958224][ T5783] usb usb10-port1: unable to enumerate USB device [ 774.170711][T10320] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 774.211196][T10320] usb 5-1: device descriptor read/8, error -71 [ 774.284319][T16272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.312377][T16272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.356242][T16272] ieee802154 phy0 wpan0: encryption failed: -22 [ 774.371345][T12880] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 774.470934][T10320] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 774.501183][T10320] usb 5-1: device descriptor read/8, error -71 [ 774.544427][T12880] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 774.573956][T16279] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2196'. [ 774.579571][T12880] usb 9-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 774.620965][T10320] usb usb5-port1: unable to enumerate USB device [ 774.622005][T12880] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 774.679756][T12880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.711666][T12880] usb 9-1: config 0 descriptor?? [ 774.729494][T12474] Bluetooth: hci7: SCO packet too small [ 774.950460][T16269] ieee802154 phy0 wpan0: encryption failed: -22 [ 775.182625][T12880] usb 9-1: string descriptor 0 read error: -71 [ 775.211843][T12880] usb 9-1: USB disconnect, device number 50 [ 777.208311][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 777.208327][ T30] audit: type=1400 audit(1786565296.127:1502): avc: denied { connect } for pid=16329 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 777.350585][T16338] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.6225946.0), cmd(2) [ 777.373544][ T30] audit: type=1800 audit(1786565296.297:1503): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2211" name="baSourceID" dev="configfs" ino=51058 res=0 errno=0 [ 778.022709][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.055304][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.133510][T16347] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.179670][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2219'. [ 778.211356][ T5694] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 778.231363][T16353] netlink: 'syz.9.2220': attribute type 5 has an invalid length. [ 778.261261][T16355] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2221'. [ 778.282647][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2221'. [ 778.351116][T16359] kAFS: Invalid Command on /proc/fs/afs/cells file [ 778.391353][ T5694] usb 5-1: Using ep0 maxpacket: 8 [ 778.401573][ T5694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 778.422076][ T5694] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 778.440367][ T5694] usb 5-1: config 0 has no interface number 0 [ 778.456780][ T5694] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.478685][ T5694] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 778.504118][ T5694] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 778.515312][ T5694] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 778.536006][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.546708][ T5694] usb 5-1: config 0 descriptor?? [ 778.568912][ T5694] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 778.587414][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2226'. [ 778.620717][T10320] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 779.285897][T16368] lo speed is unknown, defaulting to 1000 [ 779.379153][T10320] usb 10-1: device descriptor read/64, error -71 [ 779.486741][ T5783] usb 5-1: USB disconnect, device number 29 [ 779.529627][ T5783] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 779.643580][T10320] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 779.668386][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 779.698379][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 779.723623][T16376] netlink: 'syz.4.2230': attribute type 13 has an invalid length. [ 779.800863][T10320] usb 10-1: device descriptor read/64, error -71 [ 779.875562][T16381] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2229'. [ 779.923073][T10320] usb usb10-port1: attempt power cycle [ 779.996624][T16381] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2229'. [ 780.033027][T16381] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2229'. [ 780.276879][T16386] Cannot find add_set index 0 as target [ 780.320404][T10320] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 780.353483][T10320] usb 10-1: device descriptor read/8, error -71 [ 780.653372][T10320] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 780.686155][T10320] usb 10-1: device descriptor read/8, error -71 [ 780.766430][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 780.800963][T10320] usb usb10-port1: unable to enumerate USB device [ 781.040702][ T5783] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 781.059893][T16395] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.6225946.0), cmd(2) [ 781.205213][ T5783] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 781.262155][T16402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.271012][T16402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.288471][T16402] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2237'. [ 781.325988][ T5783] usb 9-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 781.368425][T10320] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 781.407095][ T5783] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 781.494619][ T5783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.656381][T10320] usb 5-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 781.666460][ T5783] usb 9-1: config 0 descriptor?? [ 781.698004][T10320] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 781.715741][T16406] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2239'. [ 781.728908][T10320] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 781.759533][T10320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 781.775110][T10320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 781.785189][T10320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.799282][T16398] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 781.810816][T16398] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 781.865302][T12474] Bluetooth: hci2: urb ffff88803390bc00 submission failed (90) [ 781.899244][T16390] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.945324][ T5783] usb 9-1: string descriptor 0 read error: -71 [ 781.958756][ T5783] usb 9-1: USB disconnect, device number 51 [ 782.050595][ T5701] usb 5-1: USB disconnect, device number 30 [ 782.401970][T16415] 9p: Bad value for 'wfdno' [ 782.407115][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2241'. [ 782.985834][ T5783] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 783.151338][ T5783] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 783.164670][ T5783] usb 5-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 783.176483][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.195623][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.236054][ T5783] usb 5-1: config 0 descriptor?? [ 783.421430][ T5701] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 783.468142][T16422] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.498747][T16428] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2246'. [ 783.603612][ T5701] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 783.633352][ T5701] usb 9-1: no configurations [ 783.651371][ T5701] usb 9-1: can't read configurations, error -22 [ 783.818812][ T5701] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 783.844034][ T5783] usb 5-1: string descriptor 0 read error: -71 [ 783.862474][ T5783] usb 5-1: USB disconnect, device number 31 [ 783.925589][T16433] Cannot find add_set index 0 as target [ 784.021215][ T5701] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 784.098853][ T5701] usb 9-1: no configurations [ 784.273001][ T5701] usb 9-1: can't read configurations, error -22 [ 784.301562][ T5701] usb usb9-port1: attempt power cycle [ 784.691820][ T5701] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 784.753916][ T5701] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 784.770963][T16449] __nla_validate_parse: 2 callbacks suppressed [ 784.770979][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2252'. [ 784.788256][ T5701] usb 9-1: no configurations [ 784.806798][ T5701] usb 9-1: can't read configurations, error -22 [ 784.913366][ T30] audit: type=1800 audit(1786565303.837:1504): pid=16455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2255" name="baSourceID" dev="configfs" ino=51556 res=0 errno=0 [ 784.945367][ T5701] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 784.989900][T16459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2257'. [ 785.004748][ T5701] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 785.030185][ T5701] usb 9-1: no configurations [ 785.040657][ T5701] usb 9-1: can't read configurations, error -22 [ 785.048254][ T5701] usb usb9-port1: unable to enumerate USB device [ 785.096501][T16464] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2259'. [ 785.108889][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 785.654850][T16481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2266'. [ 785.839072][T16475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2264'. [ 785.881189][T10320] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 785.923747][ T30] audit: type=1800 audit(1786565304.837:1505): pid=16487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2268" name="baSourceID" dev="configfs" ino=52472 res=0 errno=0 [ 786.068129][T10320] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 786.104251][T10320] usb 10-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 786.146170][T10320] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.160456][T10320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.191163][T10320] usb 10-1: config 0 descriptor?? [ 786.209334][T16495] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2272'. [ 786.232305][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 786.315730][T16493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16493 comm=syz.0.2271 [ 786.390062][ T30] audit: type=1400 audit(1786565305.307:1506): avc: denied { setopt } for pid=16500 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 786.394726][T16501] netlink: 'syz.4.2275': attribute type 21 has an invalid length. [ 786.428499][ T30] audit: type=1400 audit(1786565305.317:1507): avc: denied { read } for pid=16500 comm="syz.4.2275" dev="sockfs" ino=52573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 786.462270][T16504] Unsupported ieee802154 address type: 0 [ 786.470272][T16477] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.605622][T16513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 786.618198][T10320] usb 10-1: string descriptor 0 read error: -71 [ 786.632061][T10320] usb 10-1: USB disconnect, device number 44 [ 786.791600][ T30] audit: type=1800 audit(1786565305.707:1508): pid=16520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2280" name="baSourceID" dev="configfs" ino=51717 res=0 errno=0 [ 787.358995][T16528] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967280. macoff=96 [ 787.439522][ T30] audit: type=1326 audit(1786565306.357:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.9.2284" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 787.483086][ T30] audit: type=1326 audit(1786565306.357:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.9.2284" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 787.536606][ T30] audit: type=1326 audit(1786565306.357:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.9.2284" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 787.564113][ T30] audit: type=1326 audit(1786565306.357:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.9.2284" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 787.592548][ T30] audit: type=1326 audit(1786565306.357:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.9.2284" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f099e0d9 code=0x7ffc0000 [ 787.728765][T16537] FAULT_INJECTION: forcing a failure. [ 787.728765][T16537] name failslab, interval 1, probability 0, space 0, times 0 [ 787.778591][T16537] CPU: 1 UID: 0 PID: 16537 Comm: syz.4.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.778619][T16537] Tainted: [L]=SOFTLOCKUP [ 787.778625][T16537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 787.778635][T16537] Call Trace: [ 787.778641][T16537] [ 787.778648][T16537] dump_stack_lvl+0x100/0x190 [ 787.778675][T16537] should_fail_ex.cold+0x5/0xa [ 787.778699][T16537] should_failslab+0xc2/0x120 [ 787.778722][T16537] __kmalloc_noprof+0xfc/0x820 [ 787.778742][T16537] ? __pfx___mutex_lock+0x10/0x10 [ 787.778767][T16537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 787.778797][T16537] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 787.778825][T16537] genl_start+0x18f/0x970 [ 787.778849][T16537] __netlink_dump_start+0x60e/0x990 [ 787.778871][T16537] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 787.778894][T16537] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 787.778923][T16537] ? __pfx_genl_get_cmd+0x10/0x10 [ 787.778941][T16537] ? __pfx_genl_start+0x10/0x10 [ 787.778959][T16537] ? __pfx_genl_dumpit+0x10/0x10 [ 787.778977][T16537] ? __pfx_genl_done+0x10/0x10 [ 787.779000][T16537] ? ____sys_sendmsg+0xa4d/0xbe0 [ 787.779024][T16537] ? ___sys_sendmsg+0x190/0x1e0 [ 787.779040][T16537] ? __radix_tree_lookup+0x217/0x2b0 [ 787.779066][T16537] genl_rcv_msg+0x471/0x800 [ 787.779097][T16537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.779119][T16537] ? __pfx_tipc_nl_node_dump_monitor_peer+0x10/0x10 [ 787.779150][T16537] ? __lock_acquire+0x49f/0x1a40 [ 787.779175][T16537] netlink_rcv_skb+0x159/0x420 [ 787.779194][T16537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.779217][T16537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.779247][T16537] ? netlink_deliver_tap+0x1ae/0xcc0 [ 787.779269][T16537] genl_rcv+0x28/0x40 [ 787.779287][T16537] netlink_unicast+0x585/0x850 [ 787.779310][T16537] ? __pfx_netlink_unicast+0x10/0x10 [ 787.779336][T16537] netlink_sendmsg+0x8b0/0xda0 [ 787.779359][T16537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.779381][T16537] ? selinux_socket_sendmsg+0x198/0x2f0 [ 787.779414][T16537] ____sys_sendmsg+0xa4d/0xbe0 [ 787.779439][T16537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.779460][T16537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.779499][T16537] ___sys_sendmsg+0x190/0x1e0 [ 787.779519][T16537] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.779534][T16537] ? __lock_acquire+0x49f/0x1a40 [ 787.779556][T16537] ? get_pid_task+0x106/0x250 [ 787.779601][T16537] __sys_sendmsg+0x160/0x210 [ 787.779625][T16537] ? __pfx___sys_sendmsg+0x10/0x10 [ 787.779661][T16537] do_syscall_64+0x115/0x870 [ 787.779683][T16537] ? clear_bhb_loop+0x70/0xc0 [ 787.779704][T16537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.779721][T16537] RIP: 0033:0x7f66fed9e0d9 [ 787.779736][T16537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.779753][T16537] RSP: 002b:00007f66fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.779771][T16537] RAX: ffffffffffffffda RBX: 00007f66ff025fa0 RCX: 00007f66fed9e0d9 [ 787.779782][T16537] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 787.779792][T16537] RBP: 00007f66fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 787.779802][T16537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.779812][T16537] R13: 00007f66ff026038 R14: 00007f66ff025fa0 R15: 00007ffe3dc7fb48 [ 787.779837][T16537] [ 787.790490][T16544] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2289'. [ 788.153330][T16557] ip6_vti0: entered promiscuous mode [ 789.134849][ T5694] [ 789.137209][ T5694] ============================================ [ 789.143350][ T5694] WARNING: possible recursive locking detected [ 789.149489][ T5694] syzkaller #0 Tainted: G L [ 789.155453][ T5694] -------------------------------------------- [ 789.161588][ T5694] kworker/1:5/5694 is trying to acquire lock: [ 789.167643][ T5694] ffff888033385928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 789.177390][ T5694] [ 789.177390][ T5694] but task is already holding lock: [ 789.184741][ T5694] ffff888079f69928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 789.194511][ T5694] [ 789.194511][ T5694] other info that might help us debug this: [ 789.202548][ T5694] Possible unsafe locking scenario: [ 789.202548][ T5694] [ 789.209973][ T5694] CPU0 [ 789.213229][ T5694] ---- [ 789.216497][ T5694] lock(&grp->list_lock); [ 789.220891][ T5694] lock(&grp->list_lock); [ 789.225296][ T5694] [ 789.225296][ T5694] *** DEADLOCK *** [ 789.225296][ T5694] [ 789.233413][ T5694] May be due to missing lock nesting notation [ 789.233413][ T5694] [ 789.241706][ T5694] 3 locks held by kworker/1:5/5694: [ 789.246877][ T5694] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 789.257295][ T5694] #1: ffffc9000435fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 789.269185][ T5694] #2: ffff888079f69928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 789.279367][ T5694] [ 789.279367][ T5694] stack backtrace: [ 789.285235][ T5694] CPU: 1 UID: 0 PID: 5694 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.285259][ T5694] Tainted: [L]=SOFTLOCKUP [ 789.285264][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 789.285275][ T5694] Workqueue: events snd_rawmidi_input_event_work [ 789.285297][ T5694] Call Trace: [ 789.285302][ T5694] [ 789.285307][ T5694] dump_stack_lvl+0x100/0x190 [ 789.285325][ T5694] print_deadlock_bug.cold+0xbd/0xca [ 789.285347][ T5694] __lock_acquire+0x1256/0x1a40 [ 789.285367][ T5694] lock_acquire+0x1b9/0x370 [ 789.285383][ T5694] ? snd_seq_deliver_event+0x230/0x860 [ 789.285404][ T5694] ? do_raw_read_unlock+0x3f/0x70 [ 789.285425][ T5694] _raw_read_lock+0x5f/0x70 [ 789.285441][ T5694] ? snd_seq_deliver_event+0x230/0x860 [ 789.285461][ T5694] snd_seq_deliver_event+0x230/0x860 [ 789.285481][ T5694] ? do_raw_spin_lock+0x128/0x260 [ 789.285501][ T5694] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 789.285522][ T5694] ? mark_held_locks+0x40/0x70 [ 789.285538][ T5694] ? lockdep_hardirqs_on+0x78/0x100 [ 789.285556][ T5694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.285572][ T5694] ? client_use_ptr+0x107/0x4b0 [ 789.285590][ T5694] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 789.285613][ T5694] queue_broadcast_event.isra.0+0x143/0x1b0 [ 789.285627][ T5694] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 789.285643][ T5694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.285659][ T5694] ? snd_seq_timer_start+0x1f0/0x2a0 [ 789.285677][ T5694] snd_seq_control_queue+0x709/0xb70 [ 789.285692][ T5694] ? __pfx_event_input_timer+0x10/0x10 [ 789.285710][ T5694] __snd_seq_deliver_single_event+0x127/0x1c0 [ 789.285732][ T5694] snd_seq_deliver_single_event+0x31f/0x8c0 [ 789.285754][ T5694] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 789.285775][ T5694] ? __lock_acquire+0x49f/0x1a40 [ 789.285794][ T5694] snd_seq_deliver_event+0x44b/0x860 [ 789.285814][ T5694] ? do_raw_spin_lock+0x128/0x260 [ 789.285835][ T5694] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 789.285855][ T5694] ? mark_held_locks+0x40/0x70 [ 789.285870][ T5694] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 789.285886][ T5694] ? lockdep_hardirqs_on+0x78/0x100 [ 789.285902][ T5694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.285918][ T5694] ? client_use_ptr+0x107/0x4b0 [ 789.285937][ T5694] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 789.285959][ T5694] send_timer_event.isra.0+0x130/0x190 [ 789.285981][ T5694] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 789.286001][ T5694] ? lockdep_hardirqs_on+0x78/0x100 [ 789.286018][ T5694] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 789.286036][ T5694] snd_seq_oss_timer_start+0x1db/0x320 [ 789.286056][ T5694] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 789.286078][ T5694] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 789.286096][ T5694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.286112][ T5694] ? find_slot+0x166/0x1b0 [ 789.286126][ T5694] snd_seq_oss_midi_input+0x467/0xa30 [ 789.286141][ T5694] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 789.286158][ T5694] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 789.286175][ T5694] ? find_held_lock+0x2b/0x80 [ 789.286187][ T5694] ? snd_seq_port_use_ptr+0x128/0x190 [ 789.286206][ T5694] snd_seq_oss_event_input+0x194/0x250 [ 789.286220][ T5694] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 789.286233][ T5694] __snd_seq_deliver_single_event+0x127/0x1c0 [ 789.286260][ T5694] snd_seq_deliver_single_event+0x31f/0x8c0 [ 789.286281][ T5694] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 789.286302][ T5694] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 789.286318][ T5694] ? lockdep_hardirqs_on+0x78/0x100 [ 789.286335][ T5694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.286350][ T5694] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 789.286369][ T5694] snd_seq_deliver_event+0x2c1/0x860 [ 789.286391][ T5694] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 789.286412][ T5694] ? mark_held_locks+0x40/0x70 [ 789.286428][ T5694] ? lockdep_hardirqs_on+0x78/0x100 [ 789.286445][ T5694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 789.286461][ T5694] ? client_use_ptr+0x107/0x4b0 [ 789.286479][ T5694] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 789.286502][ T5694] snd_midi_input_event+0x32f/0x470 [ 789.286521][ T5694] ? __pfx_snd_midi_input_event+0x10/0x10 [ 789.286541][ T5694] ? __pfx_snd_midi_input_event+0x10/0x10 [ 789.286558][ T5694] snd_rawmidi_input_event_work+0x61/0x80 [ 789.286580][ T5694] process_one_work+0xa23/0x1940 [ 789.286598][ T5694] ? __pfx_process_one_work+0x10/0x10 [ 789.286615][ T5694] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 789.286637][ T5694] worker_thread+0x5ef/0xe50 [ 789.286654][ T5694] ? __pfx_worker_thread+0x10/0x10 [ 789.286669][ T5694] ? kthread+0x13a/0x450 [ 789.286681][ T5694] ? __pfx_worker_thread+0x10/0x10 [ 789.286695][ T5694] kthread+0x370/0x450 [ 789.286707][ T5694] ? __pfx_kthread+0x10/0x10 [ 789.286721][ T5694] ret_from_fork+0x72b/0xd50 [ 789.286741][ T5694] ? __pfx_ret_from_fork+0x10/0x10 [ 789.286760][ T5694] ? __switch_to+0x800/0x10f0 [ 789.286774][ T5694] ? __pfx_kthread+0x10/0x10 [ 789.286787][ T5694] ret_from_fork_asm+0x1a/0x30 [ 789.286811][ T5694]