last executing test programs: 15m52.094857079s ago: executing program 0 (id=332): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x13, 0xd, {0xd, 0xa, "2ca2227ec8ed7728c7139c"}}, &(0x7f0000000240)={0x0, 0x3, 0x48, @string={0x48, 0x3, "32aa27c670412e811c6c69b6d07e9d1af4a2dc50b768c52014e74da78ab36a8ed7a826126c39168a5d7501e1f233a02b19a5bb550f01737812b3b867f83b535b50479b58038e"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x7d, "b3215f4cfb6204555881767f5351b162facbc22c187fcff01508283688428729aff56dc732477f4af2d5b927bebc0c57169fd560c2c95eacd92f1504b1832578915d8e9ecb39ccc262de0a9c9f5cd72344a10a297b67e833fc5d7454fe6ec289ba2a798412280e1181f6ce26acca5958cd6a047079d443e05b243a8c88"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x12}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf3}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "804295"}, &(0x7f0000000500)={0x20, 0x82, 0x1, '}'}, &(0x7f0000000540)={0x20, 0x83, 0x1, 'b'}, &(0x7f0000000580)={0x20, 0x84, 0x1, "d9"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "aca53a"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d32345653667601e2ac63e057c7b501d196e016466fcb78dcaaf6c3efed495a46215be00a71bfb117c31254732f700760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a656", 0x90, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40000120) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/cgroups\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040), 0x0, 0x3b, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7de6}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000000)=0x1) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0x3e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7fff, 0xb671, 0xff, 0xd]}]}, 0x2c}}, 0x40080) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002840)={r8, 0x0, 0x0, 0x4}, 0x20) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="490100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a1009050300000400000009050000ebff09030509050402030000000009058102e0"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 15m48.895391727s ago: executing program 0 (id=338): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) 15m48.613101961s ago: executing program 0 (id=341): socket(0x10, 0x800, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) syz_emit_ethernet(0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="9baab3bdbe68aaaaaa8863000000"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10002, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x2, 0xfffffffc, 0x10002, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x9, 0x7}, 0x0) r3 = syz_open_procfs(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xa, 0x148, 0x0, 0x60, 0x200, 0x2a8, 0x2a8, 0x200, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xf8, 0x168, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x3, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0x9, 0x829, 0x4}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'tunl0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x2) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r4, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18, 0x40001}}], 0x47f, 0x0) accept(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r6 = io_uring_setup(0x1195, &(0x7f0000000840)={0x0, 0x214f, 0xc000, 0x3, 0x357}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000300)}], 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r7, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57", 0xa2}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60edeb9", 0x87}, {&(0x7f0000000780)="395b7b9931074d3e26deed94dab0ab3d30a80a8806029d7a7f1e0367db29c9eac20789979cad7071d6bf4e4f222296281cfaf2c95f85adcf76cf8be4345a9bf66ad6baac6c502e0894d518279c8c310b355c34da938cdab36a66f17bfa8986708fb9fc296c5a48e8ed5f67758de22b2ae9c2f6bdb5fe832560470db8c522cfccf093eff1eb8f12ee44ac52a236b3cc2c068f94fd39e24151f6f3ee9cb32efb", 0x9f}, {&(0x7f0000001040)="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", 0x3bd}], 0x4, &(0x7f0000006200)=ANY=[@ANYBLOB="3800000000131fb261699c3dbc000000070b0764010101ac1e0001441cdf816401010200000003ac1414aafffffff8ac1414bb0000000700"], 0x38}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x10007, @loopback, 0xfffffffd}}, 0x24) io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 15m48.518389296s ago: executing program 0 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) keyctl$dh_compute(0x17, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={'cmac(camellia-asm)\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 15m48.363057318s ago: executing program 0 (id=343): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x3}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8, @none}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 15m47.718005836s ago: executing program 0 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) sendto$unix(r1, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) 15m47.343365843s ago: executing program 32 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) sendto$unix(r1, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) 6m31.249308145s ago: executing program 2 (id=1950): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)=ANY=[]) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0xb04c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xe, r4, 0x4, &(0x7f0000000000)=""/162) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 6m29.755538339s ago: executing program 2 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x0, 0x3, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2f8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xda2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 6m28.013208537s ago: executing program 2 (id=1960): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6m26.771183297s ago: executing program 2 (id=1964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e2000dfffffffffffffff000000000000000000", @ANYRES32=0x1], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20024004) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6m23.41657537s ago: executing program 2 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) open(0x0, 0x66842, 0x253) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) write(r6, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) 6m22.213249779s ago: executing program 2 (id=1975): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000480)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001b80)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = fanotify_init(0x8, 0x40000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r6], 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000500"/20, @ANYRES32=r6, @ANYBLOB="0300000000000000bbdc8d22acfb2b6ff44d1a838b566f43af9c107df522edc6571fd0120c4f54289f1f457fb1587440"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000081) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 6m21.516127899s ago: executing program 33 (id=1975): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000480)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001b80)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = fanotify_init(0x8, 0x40000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r6], 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000500"/20, @ANYRES32=r6, @ANYBLOB="0300000000000000bbdc8d22acfb2b6ff44d1a838b566f43af9c107df522edc6571fd0120c4f54289f1f457fb1587440"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000081) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 5m12.792231605s ago: executing program 3 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1100201628332080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593208001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581059c"], &(0x7f0000000600)={0x0, 0x0, 0x5, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) socket(0x2b, 0x80801, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x80840) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x41, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$FE_DISEQC_SEND_MASTER_CMD(r4, 0x40076f3f, &(0x7f00000000c0)={"3c5fab7ed8cc", 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x2, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x7e, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x1c, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0xf88, 0x2, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0x2, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x401, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) 5m9.196068115s ago: executing program 3 (id=2152): write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0x6e, 0x29, 0x1, {0xc, [{{0x80, 0x4, 0x1}, 0x9, 0x7, 0x7, './file1'}, {{0x4, 0x4, 0x2}, 0x82ba, 0x4, 0xd, './file1/file0'}, {{0x20, 0x1, 0x2}, 0xe5, 0xb, 0x7, './file1'}]}}, 0x6e) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x4, r3, r3) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x725}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r7 = epoll_create(0x8000) kcmp$KCMP_EPOLL_TFD(r6, r1, 0x7, r5, &(0x7f0000000180)={r7, r3, 0x237f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='call_site.function == vfs_read', 0x1e) 5m7.653505163s ago: executing program 3 (id=2160): ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000004ec0)={@loopback, @rand_addr=0x64010101}) 5m6.393308783s ago: executing program 3 (id=2163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0xc0844123, &(0x7f00000000c0)=0xf73f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') timer_settime(0x0, 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r6, 0x0, &(0x7f0000000080), 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) write(r0, &(0x7f0000000600)='loop', 0x4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 5m4.997266835s ago: executing program 3 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)={0x5c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x300, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 4m57.025469618s ago: executing program 3 (id=2181): migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c9, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000002000010083e8fffffbffffbf020000000000000200000000080001006401010108000b000000000008000100ac1414aa0800040009000008"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe5d) r6 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4m56.213044941s ago: executing program 34 (id=2181): migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key(0x0, 0x0, &(0x7f00000008c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c6666c41653fa204279796b2a5c4789c32d74657374697e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301621579ea780142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4", 0x1c9, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000002000010083e8fffffbffffbf020000000000000200000000080001006401010108000b000000000008000100ac1414aa0800040009000008"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe5d) r6 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4m27.056635087s ago: executing program 1 (id=2261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0x9}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x80}}}]}, 0x38}}, 0x240480c2) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="0000000007000000180d12800e0001007769726567756172640000000400028014000300766574683000"/52], 0x4c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20200, 0xd) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x1d0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = dup(r4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) poll(0x0, 0x0, 0x101) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0xa) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x200, 0x0, 0x84, 0x0, 0x7, 0x9, 0x1, 0x0, 0x9, 0xf, 0x8, 0x7}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x4, 0xd, 0x3, 0x4, 0x3, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0x3, 0x7, 0xf7, 0x1, 0x6, 0x2}], 0x4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfff0000000000000, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0xffe, 0x0, 0x29, 0x14, 0xfffd, 0x4, 0x0, 0x0, 0x7], 0xeeee8000, 0x2210c0}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) 4m23.637593444s ago: executing program 1 (id=2271): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40286608, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000040)={{r3, r4+60000000}, {0x77359400}}, 0x0) sigaltstack(0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sigaltstack(&(0x7f00000001c0)={&(0x7f00000000c0)=""/215, 0x2, 0xd7}, 0x0) 4m22.797178854s ago: executing program 1 (id=2273): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x72, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x2}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "939e4229"}}}}}, 0x0) 4m22.552254052s ago: executing program 1 (id=2275): io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x2, 0x0, 0x2e, 0x9}}, 0x20) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x200000000004}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f00000003c0), 0x0, 0x80000001}]) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x77) 4m21.471933048s ago: executing program 1 (id=2280): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x38, &(0x7f0000000b80), 0x0, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r8, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r8, &(0x7f0000000100)="d5", 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff87) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, 0x0, 0x40044) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r13, 0x89ed, 0x0) mmap(&(0x7f00005c7000/0x2000)=nil, 0x2000, 0x0, 0x10012, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000d000000000000000010000062580400f0ffffff85000000420000009500000000000000e3f0c456ea22ea9d66bc287f02ba4591e79e2c142acb497f0bbea3de2fe5dd0d4b9de055b9de3c4293b13531f35476cf5871ca933b7e35644d25c50700ffed7a"], &(0x7f00000004c0)='GPL\x00', 0x7, 0xb3, &(0x7f00000005c0)=""/179, 0x40f00, 0x4c, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x1, 0x74ca0ab, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r3, r3, r3, r3, r3, r3, r8], &(0x7f0000000a80)=[{0x1, 0x40003, 0xb, 0x1}, {0x4, 0x2, 0xe, 0xa}], 0x10, 0x7fffffff}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000009287000000000040000000002d0800008ddaac09427a74f63d60b4930afc234cc07e5e210f01067b12797f2e33420434d86f55730202baa9174755c4b0f9bf970a2c975f25a530dd9c155046db2ea9347c932f2fa2b7bbfb0164f3575c797ac048ddfd4ff14d761739205d", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="c993eb8270b6db6e74884d05e8b09b38984c4ca7848e32f10e4ba833b1fb"], 0x1c}}, 0x0) 4m18.145985333s ago: executing program 1 (id=2285): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f00000000c0)='net/netfilter\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='4', 0x1) 4m2.565340549s ago: executing program 35 (id=2285): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f00000000c0)='net/netfilter\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='4', 0x1) 2m39.414858198s ago: executing program 4 (id=2517): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xffffffffffffffed, 0x2, 0x10000, 0x3, 0x2004002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x180, 0x35d, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00', 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x3, 0xab, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xa2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6, 0xc0, 0x3, 0x9c}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xfc, 0xdc, 0x10, 0xf7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd, 0x2, 0x33, 0x10, "", '='}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x9a, 0xc0, 0x8, 0x9}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x12, 0x3, 0xcd, 0x0, "be"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x4, 0x3, "7a2ec2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x3, 0x0, {0x7, 0x25, 0x1, 0x8, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0xe0bb0632977d03ad, 0x7f, 0x4, 0x2, {0x7, 0x25, 0x1, 0x4, 0x1, 0xc51d}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2m37.107265904s ago: executing program 4 (id=2522): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x6000000, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120000, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9197, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x2007, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x200, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffd, 0x6, 0x9, 0x6c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f73, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0xcaa, 0x10006, 0x40, 0xfffffff7, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 2m32.882942535s ago: executing program 4 (id=2529): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) 2m31.033991456s ago: executing program 4 (id=2532): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "00112233445531223344556677694bf7fffffffff7ffff22eeff00112233445566778899aabbccddeeff0000000000000100", 0x4c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x36, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x34, 0x30, 0x30, 0x62, 0x67, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff007a2233445566778899ccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 2m30.76371905s ago: executing program 4 (id=2533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @rc, @xdp={0x2c, 0xb, 0x0, 0x37}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x7d91, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0xc, 0x1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listns(&(0x7f0000000080)={0x20, 0x0, 0x2}, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0) 2m28.598221828s ago: executing program 4 (id=2537): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000090ff8500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write(r0, &(0x7f00000005c0)='+2 # +4\n', 0x9) socket$inet_smc(0x2b, 0x1, 0x0) 2m12.807943921s ago: executing program 36 (id=2537): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000090ff8500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write(r0, &(0x7f00000005c0)='+2 # +4\n', 0x9) socket$inet_smc(0x2b, 0x1, 0x0) 23.833505674s ago: executing program 8 (id=2857): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}}], {0x14}}, 0x3c}}, 0x24000004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x28185}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x25}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x53, 0xbe, "3aae6506714d80a295507b41bc1ad11a5cc554601c12b4cf205927e95d04ed26f2796a2e7909ffc23a671067a6ceb9d0a18e5ab2f608db68b71608ab9cb005056580b98952e9d13f28f6f8dffe7523"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x610}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0xf4b83c9, 0xc4bb, 0xe663, 0xc55c324}}) splice(r1, &(0x7f0000000180)=0x81, r1, &(0x7f0000000240)=0x384, 0x6, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0xfffffff8, 0x7}) 23.766949146s ago: executing program 8 (id=2858): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x7) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000700)="38981e22bb0ca6b14b93544ddd185a58aa7456a9a7d72d9db6428eeb90ab775e553e805534acdfe7c2bbc4527bb1a0d5c9c6d25b9afc26ff0706ccc31f5803a78c1709ee2cca3862b1fa1c3f786b8fe570bae697ef61c4e9fcff74458aa1435e65ba2e42c6108626c6341ab4cb37728dd72b17003e04fdc3fb0cc2a07a10cb70d0bf906e6df3ffffffff2213bc9570833c0086d86a0192b1733cd6925dc71f9374e6f993605db60aa490f61f4e18d81afe1c0143da40d2e6c925f100"/206, 0xce, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003140)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xee8}, 0x0, 0x0, '\x00', {0x1, 0x2f7, 0x0, 0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000080)=""/275, 0x113}], 0x1, 0x40, 0x20000fa4) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x2ac3, &(0x7f0000000040)={0x0, 0x7e14, 0x800, 0x2, 0x324, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000640)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_ublk_setup_queues(r11, r10, &(0x7f0000000580)={0x0, 0x1, 0x2000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1b2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7541, 0x1, 0x0, 0x14a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x20, 0x0, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e, 0x20, 0x40002, 0x367}}], 0x1, &(0x7f0000000500)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x7ffffffe, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000010c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 23.0637275s ago: executing program 8 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008", @ANYRES32, @ANYBLOB], 0x58}}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @any, 0xff}, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0xfd, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x14c}}, 0x240448c8) 23.062158393s ago: executing program 8 (id=2862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000060000008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$packet(0x11, 0x3, 0x300) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r2) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x80000001, 0x4) 23.061859253s ago: executing program 8 (id=2863): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 22.981336608s ago: executing program 8 (id=2864): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) flock(r3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) socket$inet6(0xa, 0x1, 0x7fff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x3, 0x5, {"6df6c0ffffffffffffffada63561b5c4"}, 0x7, 0x10000, 0x2}}}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x5e, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000440)={0x2, 0x15, @loopback}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="29000100000001000000d28efa44dbfc343dc72c75000000004626b36acbab38806d84c5d74b1618429a442b81", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000060, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r10, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x51}], 0x2) fcntl$getownex(r8, 0x10, &(0x7f00000002c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r9, r11, 0x7, r6, &(0x7f0000000400)={0xffffffffffffffff, r8, 0x2}) 14.713380297s ago: executing program 9 (id=2894): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x4000011}]}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) 14.569623896s ago: executing program 9 (id=2895): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13a}], 0x2}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getgroups(0x449a065a, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r6], 0x10) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x9, 0x0, 0x2, 0x693fffd, 0x80, 0x9}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xb, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a6", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 12.581322532s ago: executing program 9 (id=2904): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(0x0, 0x0, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r2 = syz_open_pts(r1, 0x141401) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='mydo ain - 64\n', 0xe) r4 = syz_open_pts(r1, 0x7b5000) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) fcntl$setstatus(r2, 0x4, 0x2000) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/5, 0x5}], 0x1}, 0x40}], 0x1, 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000540)) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x8, "", [{{0x9, 0x4, 0x0, 0x48, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x0, 0xc0}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xb9, 0xb}}]}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="05db56c69834266de5ffbba7c1718ff604de6e63e1c446c4abb7dc77f8dff2a38a14d8cd84b7ddb4fe353761a4de954d378018174c0e60f962c943d0c8b994977b2390731fefc110c0c95af8066e20eb393f1defe10315e28eba1df05e017bba494076905cd0d7539d0c2ba953170b1d51518b297989452715db2294a4c956e8df54d5dc21bb58481623acacb1883087c1f9b320fcae08d5183428361c4c4c997f8c96c08bf73358502e90b1310d5291b79b9a90e205c7f5ac08dd048b88d2b9f45358dbbc0f0c2e0e248b3d7e844120f246a889eae2b55b8a78e322c8f647"], 0x7, [{0x38, &(0x7f0000000200)=@string={0x38, 0x3, "8a1c9777955782b51dd1337046e2280d2b35c4d1bb0502e0f4beb70e03291851c03fee66ddb445c178fde54826e00251410e6a5e3d2f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x12, &(0x7f0000000280)=@string={0x12, 0x3, "ae8ff28d937672ad305d23bc9ce99294"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0xde, &(0x7f00000003c0)=@string={0xde, 0x3, "9145de1fc273e6a6f3f15032752c33ed3b06295fbb0b43f904115a3cb85e84d6b0a7a004fda47ba01926bdc3788a123a14d5fafdfb89dca020d9d6946d165868864d119df1e699faf5094468bdd225cbbd868b018f13b693d0b4362e8783827ce91527f0eb814f888ea08570387729dc6049824fc8f6bd27e071f7d63233e5a2434062894c6fb7d41711ebe0ddcb13aa76f93d21b45bf1c1300108f63f3ed6d96225dfe7ae8924e21ccce5e0958d0110093d9d05b4eb3ac792ca8d76a396fb970f48c6feaa3b2c4333b59308286c3f538254da7779f9a42f9933c576"}}]}) 9.223734544s ago: executing program 9 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) getsockname$packet(r2, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.646474227s ago: executing program 5 (id=2911): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x600c0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0xb) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffeffffffff, 0x448000) syz_open_dev$admmidi(0x0, 0x20, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x532]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='measure func=FILE_CHECK obj_type=u', 0x22) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) fdatasync(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 8.301705346s ago: executing program 9 (id=2913): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x19, 0x7, 0xb, 0x7, "80faffffff072000"}) write$binfmt_aout(0xffffffffffffffff, 0xfffffffffffffffc, 0xfffffffffffffea6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) readv(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast, {[@end, @timestamp={0x44, 0x4, 0x4f, 0x0, 0x5}, @ra={0x94, 0x4}]}}, {0x3, 0xfffc, 0x8}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e00010000000000000000030006000007000002000000000000000000000000000000040004000f0000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 8.034538669s ago: executing program 5 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x200, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x8, 0xc, {0xc, 0x21, "c15b2e69c28f174624ff"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x2, "aa1ae411"}, @main=@item_4={0x3, 0x0, 0x9, "a7db0bfc"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_012={0x0, 0x2, 0x4}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xfa0}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x8, 0x4, "1d482d2e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x1, 0x60, "4e2ce37460c63d3cbc607408b41bdaa3d10b3b6603ca12bfb7ac8be3138901d231e9985cc56972ba2672c8e05ef0c5bddc89035634f651cc00a1ac9102e702c5d12df57beaf2e5a46e9fd73b899b9ac16e3355bce2136f08fbff5d9dc6425c2f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x8}}) 7.719530534s ago: executing program 37 (id=2864): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) flock(r3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) socket$inet6(0xa, 0x1, 0x7fff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x3, 0x5, {"6df6c0ffffffffffffffada63561b5c4"}, 0x7, 0x10000, 0x2}}}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x5e, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000440)={0x2, 0x15, @loopback}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="29000100000001000000d28efa44dbfc343dc72c75000000004626b36acbab38806d84c5d74b1618429a442b81", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000060, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r10, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x51}], 0x2) fcntl$getownex(r8, 0x10, &(0x7f00000002c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r9, r11, 0x7, r6, &(0x7f0000000400)={0xffffffffffffffff, r8, 0x2}) 7.577400083s ago: executing program 6 (id=2918): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000440), 0x205, 0x252180) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000600)=@urb_type_iso={0x0, {0xd}, 0x8001, 0x40, &(0x7f0000000480), 0x0, 0xe8, 0xd4b, 0x41, 0x1, 0xe, &(0x7f0000000500)="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", [{0x9, 0x6, 0x3ff}, {0x4, 0x7}, {0x400, 0x9, 0x474b}, {0x400, 0xffff, 0x114}, {0x3, 0x80000001, 0x9}, {0x8, 0xf, 0xc0}, {0x2, 0x6, 0xd369}, {0xcbfd, 0x3, 0xc}, {0x9, 0x5, 0x5}, {0x8, 0x8, 0xe}, {0x6, 0xed}, {0x0, 0x992a, 0x2}, {0x1ff, 0x9, 0x4f8775f9}, {0x3, 0x3, 0x1f}, {0x100, 0xf, 0x4}, {0x800, 0x3, 0xfffffffa}, {0x4, 0x0, 0x7fffffff}, {0x10, 0x10, 0x7}, {0x2, 0x7ff, 0xa6d7}, {0xfffffff3, 0x927, 0x1}, {0x2, 0x2, 0x3}, {0xb, 0x5, 0x4}, {0x86, 0x101, 0x7f4}, {0x401, 0xa09, 0xfffffffd}, {0x1e, 0x401, 0xe}, {0x80000001, 0x4, 0x6}, {0x1, 0xe54, 0x8}, {0x56d, 0x1000, 0x5f1}, {0x1, 0xc, 0x4}, {0x4, 0x2, 0x6}, {0x2, 0x0, 0xffff3e8d}, {0x916, 0x3, 0x2da}, {0x7840, 0x6, 0x4}, {0xf, 0x2, 0xa}, {0x2, 0x7, 0x5}, {0x101, 0x40000, 0xbb}, {0xffed, 0xfffffff8}, {0xfffffff9, 0x5, 0x6}, {0x6, 0x0, 0x7}, {0x2, 0x2, 0x9}, {0x7, 0x5, 0x8}, {0x0, 0x10, 0x800}, {0x7, 0x6, 0x3}, {0x8, 0xfffffff7, 0x8}, {0x21c1019f, 0x1, 0x2}, {0x7, 0x4, 0x1ff}, {0x9, 0x64c831d0, 0x8}, {0x5, 0x6, 0x4}, {0xad06, 0x8, 0x1}, {0x8, 0x1200000, 0x9}, {0xffffffff, 0xae3, 0x6a9}, {0x7fffffff, 0x8, 0x8000}, {0x6, 0x7, 0xb0}, {0x5, 0x2}, {0x9, 0x400, 0x4}, {0x2, 0x4, 0x8000}, {0x6, 0xffffffff, 0x8}, {0xfffffffa, 0xa0, 0x3}, {0x1000, 0x5, 0x2}, {0xfffffffb, 0x6, 0xc}, {0x6, 0x1}, {0x4, 0x8}, {0x6a, 0x0, 0x73}, {0x7, 0xc849, 0x403}, {0xfffffff9, 0x3, 0x3}]}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000280)='A', 0x1, 0x4004000, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000380)={0x1, 0x0, &(0x7f0000000340)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f00000004c0), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x2, 0x0, 0xd}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000003c0)={r4, r5, 0x0, 0x2, 0x9f2f, 0x7f, 0x6, 0x2, 0x5, 0xff7ffffc, 0x7, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, &(0x7f0000000480), 0x0, 0x400d0, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) sendfile(r7, r6, 0x0, 0x7bbe320b) 7.121922558s ago: executing program 6 (id=2919): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x70, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x2}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "939e4229"}}}}}, 0x0) 6.917834019s ago: executing program 6 (id=2921): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002780)={0x8, {"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", 0x1000}}, 0x1006) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5, 0x0}) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0x7}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20081, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040054) accept4(r2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f0100000000060000002006240704"], 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000280)={'dvmrp1\x00'}) 6.769734175s ago: executing program 7 (id=2922): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000040)=""/103, 0x67, 0x800) (async) pread64(r0, &(0x7f0000000040)=""/103, 0x67, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b09000000000000000806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737a2000ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac86626ad914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.983796154s ago: executing program 7 (id=2923): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002780)={0x8, {"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", 0x1000}}, 0x1006) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5, 0x0}) ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}]) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20081, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040054) accept4(r2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f0100000000060000002006240704"], 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000280)={'dvmrp1\x00'}) 5.807287585s ago: executing program 5 (id=2924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) getsockname$packet(r3, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.630623907s ago: executing program 9 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) open(0x0, 0x66842, 0x253) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x3d) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) 2.702870386s ago: executing program 5 (id=2926): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13a}], 0x2}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getgroups(0x449a065a, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r6], 0x10) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x9, 0x0, 0x2, 0x693fffd, 0x80, 0x9}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xd, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab9", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 2.561138174s ago: executing program 6 (id=2927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008", @ANYRES32, @ANYBLOB='\b\x00'], 0x58}}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @any, 0xff}, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0xfd, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x14c}}, 0x240448c8) 2.435371042s ago: executing program 7 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newnexthop={0x38, 0x68, 0x405, 0x700, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1234567812345678}}]}, 0x38}}, 0x0) 2.386346589s ago: executing program 6 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) open(0x0, 0x66842, 0x253) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x3d) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) write(r6, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) 2.30173355s ago: executing program 7 (id=2930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) getsockname$packet(r2, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.005453284s ago: executing program 7 (id=2931): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) fcntl$addseals(r5, 0x409, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) 825.817221ms ago: executing program 7 (id=2932): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = epoll_create1(0x80000) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000580)={0x20, 0x3, 0x49, "09271ceddf0679b4d9c97089b1a9ee410e8072dc778ce70bf2c0ea9720d72a87cbe6825ee949f2b6cd232231ca946aec0b9ac399cceea9136179fdedacd978a793a05229b1e9ffd7e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xb, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x2000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) gettimeofday(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 369.969121ms ago: executing program 6 (id=2933): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0xe}, 0x28) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = socket(0x10, 0x5, 0xff) r4 = socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r11, r9, 0x0) mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x188, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb99b}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff61f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1f3ffd0b18b1de66e531ff88ca3f56e8d839ad3720b40368"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xac}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9ae}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf5f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2fa7}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}}, 0x4000) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f00000001c0)={0x8aa, 0x80000, r0}) dup3(r3, r12, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@isdn={0x22, 0x8, 0xd, 0x0, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 101.837173ms ago: executing program 5 (id=2934): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffe}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) 0s ago: executing program 5 (id=2935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) getsockname$packet(r3, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): usb 7-1: device descriptor read/64, error -71 [ 1054.262543][ T5697] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1054.393982][ T5697] usb 7-1: device descriptor read/64, error -71 [ 1054.469339][T16414] VFS: file-max limit 0 reached [ 1054.528667][ T5697] usb usb7-port1: attempt power cycle [ 1054.872587][ T5697] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1054.906233][ T5697] usb 7-1: device descriptor read/8, error -71 [ 1054.983553][ T31] audit: type=1400 audit(1788325624.694:2825): avc: denied { search } for pid=5260 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.983625][ T31] audit: type=1400 audit(1788325624.694:2826): avc: denied { search } for pid=5260 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.983693][ T31] audit: type=1400 audit(1788325624.694:2827): avc: denied { search } for pid=5260 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.983733][ T31] audit: type=1400 audit(1788325624.694:2828): avc: denied { read } for pid=5260 comm="dhcpcd" name="n51" dev="tmpfs" ino=12968 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1054.983772][ T31] audit: type=1400 audit(1788325624.694:2829): avc: denied { open } for pid=5260 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=12968 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1055.017063][ T31] audit: type=1400 audit(1788325624.714:2830): avc: denied { getattr } for pid=5260 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=12968 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1055.158054][ T5697] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1055.183746][ T5697] usb 7-1: device descriptor read/8, error -71 [ 1055.303461][T16418] ima: rule for LSM 'u' is undefined [ 1055.309297][ T31] audit: type=1804 audit(1788325625.034:2831): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.9.2662" name="ima_policy_written" res=0 errno=-17 [ 1055.309343][ T31] audit: type=1807 audit(1788325625.034:2832): action=measure func=FILE_CHECK obj_type=u res=0 [ 1055.309589][ T31] audit: type=1802 audit(1788325625.034:2833): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.9.2662" res=0 errno=0 [ 1055.309987][T16417] ima: policy update failed [ 1055.331613][ T31] audit: type=1802 audit(1788325625.034:2834): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.9.2662" res=0 errno=0 [ 1055.361849][ T5697] usb usb7-port1: unable to enumerate USB device [ 1055.430689][T16401] ima: rule for LSM 'u' is undefined [ 1055.623306][T16399] ima: policy update failed [ 1055.950838][T16430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.951199][T16430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.977347][T16427] ima: rule for LSM 'u' is undefined [ 1056.117944][T16430] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1056.156512][T16425] ima: policy update failed [ 1056.560075][T16442] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2668'. [ 1056.560119][T16442] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2668'. [ 1056.712899][ T4927] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1056.962662][ T4927] usb 9-1: Using ep0 maxpacket: 16 [ 1056.970400][ T4927] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1056.981106][ T4927] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.991584][ T4927] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.081304][ T4927] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.091322][ T4927] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1057.091372][ T4927] usb 9-1: config 7 interface 0 has no altsetting 0 [ 1057.091407][ T4927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.760298][ T4927] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.003B/input/input135 [ 1057.782388][T16460] ima: rule for LSM 'u' is undefined [ 1057.808320][ T4927] kye 0003:0458:5010.003B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 1057.875578][ T4927] usb 9-1: USB disconnect, device number 32 [ 1057.924655][T16459] ima: policy update failed [ 1058.021651][T16464] fido_id[16464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1058.566832][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.567169][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.696229][ T5331] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1058.845919][ T5331] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1058.849503][ T5331] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1058.849527][ T5331] usb 8-1: config 1 has no interface number 0 [ 1058.857902][ T5331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.857925][ T5331] usb 8-1: Product: syz [ 1058.857938][ T5331] usb 8-1: Manufacturer: syz [ 1058.857951][ T5331] usb 8-1: SerialNumber: syz [ 1058.992866][ T5331] usb 8-1: 3:1 : does not exist [ 1058.992906][ T5331] usb 8-1: 3:2 : does not exist [ 1059.263310][T16472] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1059.320352][ T5331] usb 8-1: USB disconnect, device number 35 [ 1059.602255][T16493] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1059.602490][T16493] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1059.602521][T16493] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1060.480957][T14492] udevd[14492]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.701082][ T12] IPVS: starting estimator thread 0... [ 1060.793078][T16497] IPVS: using max 53 ests per chain, 127200 per kthread [ 1060.900282][T16486] syzkaller0: entered promiscuous mode [ 1060.900313][T16486] syzkaller0: entered allmulticast mode [ 1060.939994][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2681'. [ 1060.958560][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.959418][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.119828][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 1061.119864][ T31] audit: type=1400 audit(1788325630.844:2862): avc: denied { write } for pid=16500 comm="syz.7.2681" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 1061.206497][T16506] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1061.471746][T16510] ima: rule for LSM 'u' is undefined [ 1061.471941][ T31] audit: type=1804 audit(1788325631.194:2863): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.8.2683" name="ima_policy_written" res=0 errno=-17 [ 1061.471999][ T31] audit: type=1807 audit(1788325631.194:2864): action=measure func=FILE_CHECK obj_type=u res=0 [ 1061.472031][ T31] audit: type=1802 audit(1788325631.194:2865): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.8.2683" res=0 errno=0 [ 1061.500178][T16509] ima: policy update failed [ 1061.500306][ T31] audit: type=1802 audit(1788325631.224:2866): pid=16509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.8.2683" res=0 errno=0 [ 1061.714402][ T5698] usb 10-1: USB disconnect, device number 2 [ 1061.824587][ T31] audit: type=1400 audit(1788325631.554:2867): avc: denied { write } for pid=16490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.052523][ T5711] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1062.118754][ T31] audit: type=1400 audit(1788325631.844:2868): avc: denied { write } for pid=16523 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.365296][ T5711] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1062.371825][ T5711] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1062.371849][ T5711] usb 8-1: config 1 has no interface number 0 [ 1062.378649][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.378672][ T5711] usb 8-1: Product: syz [ 1062.378685][ T5711] usb 8-1: Manufacturer: syz [ 1062.378697][ T5711] usb 8-1: SerialNumber: syz [ 1062.431197][ T5711] usb 8-1: 3:1 : does not exist [ 1062.431245][ T5711] usb 8-1: 3:2 : does not exist [ 1062.714728][T16515] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1062.772206][ T5711] usb 8-1: USB disconnect, device number 36 [ 1062.875241][T14492] udevd[14492]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.499146][T16536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1064.500160][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2688'. [ 1064.822517][ T5698] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1065.003431][ T5698] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.013698][ T5698] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.026672][ T5698] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.026709][ T5698] usb 8-1: Product: syz [ 1065.026727][ T5698] usb 8-1: Manufacturer: syz [ 1065.026744][ T5698] usb 8-1: SerialNumber: syz [ 1066.002309][T16561] xt_hashlimit: size too large, truncated to 1048576 [ 1066.199458][ T31] audit: type=1400 audit(1788325635.924:2869): avc: denied { setopt } for pid=16559 comm="syz.8.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1066.322537][ T5698] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1066.322575][ T5698] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1066.322606][ T5698] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 1066.762488][ T5711] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1066.775209][T16536] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2688'. [ 1066.784901][ T5698] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 1066.818757][ T5698] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1066.850590][ T5698] usb 8-1: USB disconnect, device number 37 [ 1066.859530][ T5698] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1066.912771][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 1066.918221][ T5711] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1066.930104][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.930141][ T5711] usb 6-1: Product: syz [ 1066.930164][ T5711] usb 6-1: Manufacturer: syz [ 1066.930181][ T5711] usb 6-1: SerialNumber: syz [ 1066.957517][ T5711] usb 6-1: config 0 descriptor?? [ 1067.515400][ T5711] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1067.981200][T16570] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1068.214933][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1068.596896][T16585] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1068.597082][T16585] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1068.605496][T16585] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1069.002589][ T5331] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1069.174636][ T5331] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1069.177515][ T5711] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1069.187681][ T5331] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1069.187764][ T5331] usb 9-1: config 1 has no interface number 0 [ 1069.294096][ T5331] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.294130][ T5331] usb 9-1: Product: syz [ 1069.294166][ T5331] usb 9-1: Manufacturer: syz [ 1069.294184][ T5331] usb 9-1: SerialNumber: syz [ 1069.551222][ T5711] usb 6-1: USB disconnect, device number 105 [ 1070.116286][T16584] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1070.155350][ T5331] usb 9-1: 3:1 : does not exist [ 1070.155385][ T5331] usb 9-1: 3:2 : does not exist [ 1070.379382][T16594] ima: rule for LSM 'u' is undefined [ 1070.380775][T16593] ima: policy update failed [ 1070.492532][ T31] audit: type=1804 audit(1788325640.104:2870): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.6.2705" name="ima_policy_written" res=0 errno=-17 [ 1070.492597][ T31] audit: type=1807 audit(1788325640.104:2871): action=measure func=FILE_CHECK obj_type=u res=0 [ 1070.492620][ T31] audit: type=1802 audit(1788325640.104:2872): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.6.2705" res=0 errno=0 [ 1070.492654][ T31] audit: type=1802 audit(1788325640.104:2873): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.2705" res=0 errno=0 [ 1070.568171][ T5331] usb 9-1: USB disconnect, device number 33 [ 1070.912212][T14492] udevd[14492]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.096163][T16607] team0: Device wg0 is of different type [ 1071.122848][ T5711] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1071.252615][ T5711] usb 9-1: device descriptor read/64, error -71 [ 1071.343585][T16607] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1071.494098][ T5711] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1071.632706][ T5711] usb 9-1: device descriptor read/64, error -71 [ 1071.714403][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2711'. [ 1071.743423][ T5711] usb usb9-port1: attempt power cycle [ 1072.082454][ T5711] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1072.122700][ T5711] usb 9-1: device descriptor read/8, error -71 [ 1072.324430][T16620] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1072.340253][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1072.355415][T16620] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1072.367158][ T5711] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1072.392967][ T5711] usb 9-1: device descriptor read/8, error -71 [ 1072.531809][ T5711] usb usb9-port1: unable to enumerate USB device [ 1072.592468][ T5697] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1072.743313][ T5697] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.744225][ T5697] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.746155][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.746175][ T5697] usb 6-1: Product: syz [ 1072.746188][ T5697] usb 6-1: Manufacturer: syz [ 1072.746202][ T5697] usb 6-1: SerialNumber: syz [ 1072.799320][T16623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1073.856119][ T31] audit: type=1804 audit(1788325643.584:2874): pid=16630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.7.2716" name="ima_policy_written" res=0 errno=-17 [ 1073.856181][T16630] ima: rule for LSM 'u' is undefined [ 1073.856225][ T31] audit: type=1807 audit(1788325643.584:2875): action=measure func=FILE_CHECK obj_type=u res=0 [ 1073.856947][ T31] audit: type=1802 audit(1788325643.584:2876): pid=16630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.7.2716" res=0 errno=0 [ 1073.953211][T16628] ima: policy update failed [ 1073.955940][ T31] audit: type=1802 audit(1788325643.684:2877): pid=16628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.2716" res=0 errno=0 [ 1074.037239][ T5697] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1074.037270][ T5697] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1074.037288][ T5697] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1074.338616][T16637] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1074.338826][T16637] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1074.341592][T16637] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1074.696597][ T31] audit: type=1400 audit(1788325644.424:2878): avc: denied { kexec_image_load } for pid=16633 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1074.850805][T16620] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1075.099241][ T5697] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 1075.467863][ T5697] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1075.554498][ T5697] usb 6-1: USB disconnect, device number 106 [ 1075.649080][ T5697] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1076.074179][ T31] audit: type=1400 audit(1788325645.804:2879): avc: denied { getopt } for pid=16647 comm="syz.7.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1076.473480][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2723'. [ 1076.921874][T16661] netlink: 'syz.7.2724': attribute type 10 has an invalid length. [ 1077.295571][T16661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.295809][T16661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.812926][ T5711] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1077.990688][ T5711] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1078.003862][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1078.003896][ T5711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1078.003923][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1078.003941][ T5711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1078.081274][ T5711] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.081302][ T5711] usb 10-1: Product: syz [ 1078.081317][ T5711] usb 10-1: Manufacturer: syz [ 1078.081332][ T5711] usb 10-1: SerialNumber: syz [ 1078.105796][ T5711] usb 10-1: config 0 descriptor?? [ 1078.108886][ T5711] ums-isd200 10-1:0.0: USB Mass Storage device detected [ 1078.380585][T16667] ima: rule for LSM 'u' is undefined [ 1078.386349][ T31] audit: type=1804 audit(1788325648.104:2880): pid=16667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.7.2727" name="ima_policy_written" res=0 errno=-17 [ 1078.386393][ T31] audit: type=1807 audit(1788325648.104:2881): action=measure func=FILE_CHECK obj_type=u res=0 [ 1078.386420][ T31] audit: type=1802 audit(1788325648.104:2882): pid=16667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.7.2727" res=0 errno=0 [ 1078.409916][T16666] ima: policy update failed [ 1078.412442][ T31] audit: type=1802 audit(1788325648.144:2883): pid=16666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.2727" res=0 errno=0 [ 1078.712538][ T5711] scsi host1: usb-storage 10-1:0.0 [ 1078.758157][ T5711] usb 10-1: USB disconnect, device number 3 [ 1078.832467][ T5697] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1078.997226][ T5697] usb 9-1: not running at top speed; connect to a high speed hub [ 1078.997271][ T5697] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1079.017682][ T5697] usb 9-1: config index 0 descriptor too short (expected 4257, got 161) [ 1079.017743][ T5697] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1079.017792][ T5697] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.182463][T15229] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1079.352524][T15229] usb 8-1: device descriptor read/64, error -71 [ 1079.592554][T15229] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 1079.707986][T16698] netlink: 'syz.9.2734': attribute type 4 has an invalid length. [ 1079.716500][T16698] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2734'. [ 1079.729484][T15229] usb 8-1: device descriptor read/64, error -71 [ 1079.788779][ T31] audit: type=1400 audit(1788325649.514:2884): avc: denied { bind } for pid=16697 comm="syz.9.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1079.812840][ T31] audit: type=1400 audit(1788325649.544:2885): avc: denied { name_bind } for pid=16697 comm="syz.9.2734" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1079.835353][T15229] usb usb8-port1: attempt power cycle [ 1079.842882][ T31] audit: type=1400 audit(1788325649.544:2886): avc: denied { node_bind } for pid=16697 comm="syz.9.2734" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1079.864377][ T31] audit: type=1400 audit(1788325649.544:2887): avc: denied { listen } for pid=16697 comm="syz.9.2734" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1080.178866][T16625] syz.6.2715 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1080.178914][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.6.2715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.178937][T16625] Tainted: [L]=SOFTLOCKUP [ 1080.178943][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1080.178951][T16625] Call Trace: [ 1080.178957][T16625] [ 1080.178963][T16625] dump_stack_lvl+0x100/0x190 [ 1080.178992][T16625] dump_header+0xfb/0x606 [ 1080.179012][T16625] oom_kill_process.cold+0xd/0x380 [ 1080.179032][T16625] out_of_memory+0x340/0x14f0 [ 1080.179058][T16625] ? __pfx_out_of_memory+0x10/0x10 [ 1080.179083][T16625] mem_cgroup_out_of_memory+0xc6/0x130 [ 1080.179102][T16625] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1080.179118][T16625] ? find_held_lock+0x2b/0x80 [ 1080.179144][T16625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1080.179164][T16625] ? _raw_spin_unlock+0x28/0x50 [ 1080.179191][T16625] try_charge_memcg+0x783/0xf60 [ 1080.179217][T16625] ? __pfx_try_charge_memcg+0x10/0x10 [ 1080.179237][T16625] ? find_held_lock+0x2b/0x80 [ 1080.179257][T16625] ? rcu_read_unlock+0x17/0x60 [ 1080.179278][T16625] ? rcu_read_unlock+0x17/0x60 [ 1080.179300][T16625] ? find_held_lock+0x2b/0x80 [ 1080.179321][T16625] ? rcu_read_unlock+0x17/0x60 [ 1080.179347][T16625] charge_memcg+0x1ae/0x210 [ 1080.179370][T16625] __mem_cgroup_charge+0x2b/0x1c0 [ 1080.179395][T16625] shmem_alloc_and_add_folio+0x451/0xd40 [ 1080.179424][T16625] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1080.179447][T16625] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1080.179475][T16625] shmem_get_folio_gfp+0x75b/0x1980 [ 1080.179502][T16625] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1080.179525][T16625] ? vm_normal_page+0x1d1/0x380 [ 1080.179542][T16625] ? __pfx_vm_normal_page+0x10/0x10 [ 1080.179563][T16625] shmem_write_begin+0x1a4/0x420 [ 1080.179587][T16625] ? __pfx_shmem_write_begin+0x10/0x10 [ 1080.179611][T16625] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1080.179639][T16625] generic_perform_write+0x292/0xa40 [ 1080.179658][T16625] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1080.179688][T16625] ? __pfx_generic_perform_write+0x10/0x10 [ 1080.179709][T16625] ? file_update_time_flags+0x38c/0x520 [ 1080.179735][T16625] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1080.179763][T16625] shmem_file_write_iter+0x10e/0x140 [ 1080.179781][T16625] __kernel_write_iter+0x2ac/0x930 [ 1080.179807][T16625] ? __pfx___kernel_write_iter+0x10/0x10 [ 1080.179831][T16625] ? __up_read+0x333/0x980 [ 1080.179852][T16625] ? dump_user_range+0x65e/0xad0 [ 1080.179881][T16625] dump_user_range+0x3f9/0xad0 [ 1080.179909][T16625] ? __pfx_dump_user_range+0x10/0x10 [ 1080.179941][T16625] ? __pfx_writenote+0x10/0x10 [ 1080.179957][T16625] ? elf_core_dump+0x1f25/0x3d20 [ 1080.179977][T16625] elf_core_dump+0x2d68/0x3d20 [ 1080.180009][T16625] ? __pfx_elf_core_dump+0x10/0x10 [ 1080.180024][T16625] ? kasan_save_stack+0x3f/0x50 [ 1080.180040][T16625] ? kasan_save_stack+0x30/0x50 [ 1080.180055][T16625] ? kasan_save_track+0x14/0x30 [ 1080.180071][T16625] ? __kasan_kmalloc+0xaa/0xb0 [ 1080.180087][T16625] ? vfs_coredump+0x21f6/0x54a0 [ 1080.180108][T16625] ? get_signal+0x1f2a/0x21e0 [ 1080.180125][T16625] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1080.180153][T16625] ? 0xffffffffff600000 [ 1080.180194][T16625] ? lock_acquire+0x1d1/0x380 [ 1080.180210][T16625] ? get_signal+0x1f2a/0x21e0 [ 1080.180233][T16625] ? vfs_coredump+0x281a/0x54a0 [ 1080.180257][T16625] vfs_coredump+0x281a/0x54a0 [ 1080.180289][T16625] ? __pfx_vfs_coredump+0x10/0x10 [ 1080.180313][T16625] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.180335][T16625] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.180354][T16625] ? lock_acquire+0x1d1/0x380 [ 1080.180369][T16625] ? unwind_next_frame+0xbd/0x2090 [ 1080.180396][T16625] ? lock_acquire+0x1d1/0x380 [ 1080.180417][T16625] ? bpf_ksym_find+0x128/0x1c0 [ 1080.180441][T16625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1080.180473][T16625] ? arch_stack_walk+0xa6/0xf0 [ 1080.180500][T16625] ? __sigqueue_free+0xbe/0x2a0 [ 1080.180521][T16625] ? stack_trace_save+0x8e/0xc0 [ 1080.180544][T16625] ? __pfx_stack_trace_save+0x10/0x10 [ 1080.180568][T16625] ? stack_depot_save_flags+0x27/0x9f0 [ 1080.180585][T16625] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.180640][T16625] ? proc_coredump_connector+0x2d3/0x4f0 [ 1080.180662][T16625] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1080.180688][T16625] ? rcu_is_watching+0x13/0xc0 [ 1080.180712][T16625] get_signal+0x1f2a/0x21e0 [ 1080.180738][T16625] ? __pfx_get_signal+0x10/0x10 [ 1080.180766][T16625] arch_do_signal_or_restart+0x91/0x7e0 [ 1080.180791][T16625] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1080.180827][T16625] irqentry_exit+0x402/0xa10 [ 1080.180848][T16625] asm_exc_page_fault+0x26/0x30 [ 1080.180864][T16625] RIP: 0033:0x7f6668b9e161 [ 1080.180878][T16625] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1080.180893][T16625] RSP: 002b:fffffffffffffe90 EFLAGS: 00010217 [ 1080.180907][T16625] RAX: 0000000000000000 RBX: 00007f6668e26090 RCX: 00007f6668b9e159 [ 1080.180918][T16625] RDX: 0000000000000000 RSI: fffffffffffffe90 RDI: 0000000002008000 [ 1080.180928][T16625] RBP: 00007f6668c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1080.180938][T16625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1080.180948][T16625] R13: 00007f6668e26128 R14: 00007f6668e26090 R15: 00007ffc7bfbc298 [ 1080.180971][T16625] [ 1080.196630][T16625] memory: usage 307200kB, limit 307200kB, failcnt 17000 [ 1080.196646][T16625] memory+swap: usage 419768kB, limit 9007199254740988kB, failcnt 0 [ 1080.196657][T16625] kmem: usage 3392kB, limit 9007199254740988kB, failcnt 0 [ 1080.196667][T16625] Memory cgroup stats for /syz6: [ 1080.196781][T16625] cache 310702080 [ 1080.196790][T16625] rss 397312 [ 1080.196796][T16625] rss_huge 0 [ 1080.196802][T16625] shmem 310702080 [ 1080.196807][T16625] mapped_file 186970112 [ 1080.196814][T16625] dirty 0 [ 1080.196820][T16625] writeback 0 [ 1080.196826][T16625] workingset_refault_anon 68 [ 1080.196832][T16625] workingset_refault_file 0 [ 1080.196839][T16625] swap 115269632 [ 1080.196844][T16625] swapcached 123498496 [ 1080.196850][T16625] pgpgin 512418 [ 1080.196857][T16625] pgpgout 436466 [ 1080.196862][T16625] pgfault 262841 [ 1080.196868][T16625] pgmajfault 53 [ 1080.196874][T16625] inactive_anon 99393536 [ 1080.196880][T16625] active_anon 211705856 [ 1080.196887][T16625] inactive_file 0 [ 1080.196893][T16625] active_file 0 [ 1080.196899][T16625] unevictable 0 [ 1080.196905][T16625] hierarchical_memory_limit 314572800 [ 1080.196912][T16625] hierarchical_memsw_limit 9223372036854771712 [ 1080.196919][T16625] total_cache 310702080 [ 1080.196925][T16625] total_rss 397312 [ 1080.196931][T16625] total_rss_huge 0 [ 1080.196937][T16625] total_shmem 310702080 [ 1080.196944][T16625] total_mapped_file 186970112 [ 1080.196950][T16625] total_dirty 0 [ 1080.196956][T16625] total_writeback 0 [ 1080.196963][T16625] total_workingset_refault_anon 68 [ 1080.196969][T16625] total_workingset_refault_file 0 [ 1080.196976][T16625] total_swap 115269632 [ 1080.196982][T16625] total_swapcached 123498496 [ 1080.196989][T16625] total_pgpgin 512418 [ 1080.196995][T16625] total_pgpgout 436466 [ 1080.197001][T16625] total_pgfault 262841 [ 1080.197007][T16625] total_pgmajfault 53 [ 1080.197013][T16625] total_inactive_anon 99393536 [ 1080.197020][T16625] total_active_anon 211705856 [ 1080.197026][T16625] total_inactive_file 0 [ 1080.197033][T16625] total_active_file 0 [ 1080.197038][T16625] total_unevictable 0 [ 1080.197045][T16625] anon_cost 0 [ 1080.197050][T16625] file_cost 0 [ 1080.197057][T16625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2642,pid=16344,uid=0 [ 1080.198624][T16625] Memory cgroup out of memory: Killed process 16344 (syz.6.2642) total-vm:200824kB, anon-rss:1248kB, file-rss:20548kB, shmem-rss:104388kB, UID:0 pgtables:340kB oom_score_adj:1000 [ 1080.274485][T15229] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 1080.278112][T16388] syz.6.2655 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1080.278142][T16388] CPU: 0 UID: 0 PID: 16388 Comm: syz.6.2655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.278164][T16388] Tainted: [L]=SOFTLOCKUP [ 1080.278170][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1080.278180][T16388] Call Trace: [ 1080.278186][T16388] [ 1080.278193][T16388] dump_stack_lvl+0x100/0x190 [ 1080.278220][T16388] dump_header+0xfb/0x606 [ 1080.278240][T16388] oom_kill_process.cold+0xd/0x380 [ 1080.278261][T16388] out_of_memory+0x340/0x14f0 [ 1080.278287][T16388] ? __pfx_out_of_memory+0x10/0x10 [ 1080.278315][T16388] mem_cgroup_out_of_memory+0xc6/0x130 [ 1080.278333][T16388] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1080.278348][T16388] ? find_held_lock+0x2b/0x80 [ 1080.278374][T16388] ? do_raw_spin_unlock+0x145/0x1e0 [ 1080.278394][T16388] ? _raw_spin_unlock+0x28/0x50 [ 1080.278420][T16388] try_charge_memcg+0x783/0xf60 [ 1080.278447][T16388] ? __pfx_try_charge_memcg+0x10/0x10 [ 1080.278468][T16388] ? find_held_lock+0x2b/0x80 [ 1080.278487][T16388] ? rcu_read_unlock+0x17/0x60 [ 1080.278508][T16388] ? rcu_read_unlock+0x17/0x60 [ 1080.278530][T16388] ? find_held_lock+0x2b/0x80 [ 1080.278551][T16388] ? rcu_read_unlock+0x17/0x60 [ 1080.278577][T16388] charge_memcg+0x1ae/0x210 [ 1080.278600][T16388] __mem_cgroup_charge+0x2b/0x1c0 [ 1080.278625][T16388] shmem_alloc_and_add_folio+0x451/0xd40 [ 1080.278653][T16388] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1080.278677][T16388] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1080.278704][T16388] shmem_get_folio_gfp+0x75b/0x1980 [ 1080.278732][T16388] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1080.278761][T16388] ? filemap_map_pages+0x114a/0x2100 [ 1080.278785][T16388] shmem_fault+0x1fb/0xa30 [ 1080.278808][T16388] ? __pfx_shmem_fault+0x10/0x10 [ 1080.278833][T16388] ? __pfx_filemap_map_pages+0x10/0x10 [ 1080.278856][T16388] ? find_held_lock+0x2b/0x80 [ 1080.278879][T16388] ? __pfx_filemap_map_pages+0x10/0x10 [ 1080.278897][T16388] __do_fault+0x10b/0x440 [ 1080.278915][T16388] do_fault+0xb3f/0x1830 [ 1080.278935][T16388] ? __pfx_do_fault+0x10/0x10 [ 1080.278951][T16388] ? rcu_read_unlock+0x2d/0xb0 [ 1080.278972][T16388] ? rcu_read_unlock+0x2d/0xb0 [ 1080.278993][T16388] ? __pte_offset_map+0x179/0x310 [ 1080.279014][T16388] __handle_mm_fault+0x150b/0x2f60 [ 1080.279040][T16388] ? __pfx___handle_mm_fault+0x10/0x10 [ 1080.279061][T16388] ? pte_offset_map_lock+0x174/0x320 [ 1080.279079][T16388] ? find_held_lock+0x2b/0x80 [ 1080.279099][T16388] ? find_held_lock+0x2b/0x80 [ 1080.279119][T16388] ? follow_page_pte+0x536/0x1050 [ 1080.279149][T16388] handle_mm_fault+0x363/0xa20 [ 1080.279176][T16388] __get_user_pages+0x8ae/0x2c30 [ 1080.279201][T16388] ? lock_acquire+0x1d1/0x380 [ 1080.279217][T16388] ? __pfx___get_user_pages+0x10/0x10 [ 1080.279236][T16388] ? __pfx___might_resched+0x10/0x10 [ 1080.279258][T16388] get_dump_page+0x27e/0x3d0 [ 1080.279276][T16388] ? __pfx_get_dump_page+0x10/0x10 [ 1080.279294][T16388] ? dump_user_range+0x65e/0xad0 [ 1080.279319][T16388] ? copy_mc_enhanced_fast_string+0x6/0xf [ 1080.279345][T16388] dump_user_range+0x18d/0xad0 [ 1080.279374][T16388] ? __pfx_dump_user_range+0x10/0x10 [ 1080.279405][T16388] ? __pfx_writenote+0x10/0x10 [ 1080.279421][T16388] ? elf_core_dump+0x1f25/0x3d20 [ 1080.279441][T16388] elf_core_dump+0x2d68/0x3d20 [ 1080.279473][T16388] ? __pfx_elf_core_dump+0x10/0x10 [ 1080.279490][T16388] ? kasan_save_stack+0x3f/0x50 [ 1080.279507][T16388] ? kasan_save_stack+0x30/0x50 [ 1080.279522][T16388] ? kasan_save_track+0x14/0x30 [ 1080.279539][T16388] ? __kasan_kmalloc+0xaa/0xb0 [ 1080.279555][T16388] ? vfs_coredump+0x21f6/0x54a0 [ 1080.279578][T16388] ? get_signal+0x1f2a/0x21e0 [ 1080.279595][T16388] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1080.279625][T16388] ? 0xffffffffff600000 [ 1080.279667][T16388] ? lock_acquire+0x1d1/0x380 [ 1080.279683][T16388] ? get_signal+0x1f2a/0x21e0 [ 1080.279707][T16388] ? vfs_coredump+0x281a/0x54a0 [ 1080.279730][T16388] vfs_coredump+0x281a/0x54a0 [ 1080.279769][T16388] ? __pfx_vfs_coredump+0x10/0x10 [ 1080.279793][T16388] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.279815][T16388] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.279833][T16388] ? lock_acquire+0x1d1/0x380 [ 1080.279850][T16388] ? unwind_next_frame+0xbd/0x2090 [ 1080.279877][T16388] ? lock_acquire+0x1d1/0x380 [ 1080.279899][T16388] ? bpf_ksym_find+0x128/0x1c0 [ 1080.279923][T16388] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1080.279955][T16388] ? arch_stack_walk+0xa6/0xf0 [ 1080.279983][T16388] ? __sigqueue_free+0xbe/0x2a0 [ 1080.280004][T16388] ? stack_trace_save+0x8e/0xc0 [ 1080.280026][T16388] ? __pfx_stack_trace_save+0x10/0x10 [ 1080.280050][T16388] ? stack_depot_save_flags+0x27/0x9f0 [ 1080.280068][T16388] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.280123][T16388] ? proc_coredump_connector+0x2d3/0x4f0 [ 1080.280145][T16388] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1080.280171][T16388] ? rcu_is_watching+0x13/0xc0 [ 1080.280195][T16388] get_signal+0x1f2a/0x21e0 [ 1080.280221][T16388] ? __pfx_get_signal+0x10/0x10 [ 1080.280245][T16388] arch_do_signal_or_restart+0x91/0x7e0 [ 1080.280269][T16388] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1080.280305][T16388] irqentry_exit+0x402/0xa10 [ 1080.280326][T16388] asm_exc_page_fault+0x26/0x30 [ 1080.280343][T16388] RIP: 0033:0x7f6668b9e161 [ 1080.280356][T16388] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1080.280372][T16388] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1080.280386][T16388] RAX: 0000000000000000 RBX: 00007f6668e26180 RCX: 00007f6668b9e159 [ 1080.280397][T16388] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1080.280408][T16388] RBP: 00007f6668c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1080.280418][T16388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1080.280428][T16388] R13: 00007f6668e26218 R14: 00007f6668e26180 R15: 00007ffc7bfbc298 [ 1080.280451][T16388] [ 1080.298995][T16388] memory: usage 307200kB, limit 307200kB, failcnt 17051 [ 1080.299010][T16388] memory+swap: usage 419768kB, limit 9007199254740988kB, failcnt 0 [ 1080.299022][T16388] kmem: usage 3392kB, limit 9007199254740988kB, failcnt 0 [ 1080.299031][T16388] Memory cgroup stats for /syz6: [ 1080.299133][T16388] cache 310702080 [ 1080.299142][T16388] rss 397312 [ 1080.299147][T16388] rss_huge 0 [ 1080.299153][T16388] shmem 310702080 [ 1080.299159][T16388] mapped_file 184438784 [ 1080.299165][T16388] dirty 0 [ 1080.299171][T16388] writeback 0 [ 1080.299177][T16388] workingset_refault_anon 68 [ 1080.299183][T16388] workingset_refault_file 0 [ 1080.299190][T16388] swap 115269632 [ 1080.299196][T16388] swapcached 123498496 [ 1080.299202][T16388] pgpgin 512418 [ 1080.299208][T16388] pgpgout 436466 [ 1080.299214][T16388] pgfault 262842 [ 1080.299220][T16388] pgmajfault 53 [ 1080.299226][T16388] inactive_anon 99393536 [ 1080.299232][T16388] active_anon 211705856 [ 1080.299238][T16388] inactive_file 0 [ 1080.299244][T16388] active_file 0 [ 1080.299250][T16388] unevictable 0 [ 1080.299256][T16388] hierarchical_memory_limit 314572800 [ 1080.299263][T16388] hierarchical_memsw_limit 9223372036854771712 [ 1080.299270][T16388] total_cache 310702080 [ 1080.299276][T16388] total_rss 397312 [ 1080.299282][T16388] total_rss_huge 0 [ 1080.299289][T16388] total_shmem 310702080 [ 1080.299295][T16388] total_mapped_file 184438784 [ 1080.299301][T16388] total_dirty 0 [ 1080.299307][T16388] total_writeback 0 [ 1080.299314][T16388] total_workingset_refault_anon 68 [ 1080.299320][T16388] total_workingset_refault_file 0 [ 1080.299327][T16388] total_swap 115269632 [ 1080.299334][T16388] total_swapcached 123498496 [ 1080.299340][T16388] total_pgpgin 512418 [ 1080.299346][T16388] total_pgpgout 436466 [ 1080.299352][T16388] total_pgfault 262842 [ 1080.299358][T16388] total_pgmajfault 53 [ 1080.299364][T16388] total_inactive_anon 99393536 [ 1080.299371][T16388] total_active_anon 211705856 [ 1080.299377][T16388] total_inactive_file 0 [ 1080.299384][T16388] total_active_file 0 [ 1080.299389][T16388] total_unevictable 0 [ 1080.299396][T16388] anon_cost 0 [ 1080.299401][T16388] file_cost 0 [ 1080.299408][T16388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2655,pid=16388,uid=0 [ 1080.299482][T16388] Memory cgroup out of memory: Killed process 16388 (syz.6.2655) total-vm:200824kB, anon-rss:1248kB, file-rss:20548kB, shmem-rss:78200kB, UID:0 pgtables:288kB oom_score_adj:1000 [ 1080.349093][T15229] usb 8-1: device descriptor read/8, error -71 [ 1080.590324][T15229] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1080.591915][T16625] syz.6.2715 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1080.591953][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.6.2715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.591976][T16625] Tainted: [L]=SOFTLOCKUP [ 1080.591982][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1080.591992][T16625] Call Trace: [ 1080.591998][T16625] [ 1080.592005][T16625] dump_stack_lvl+0x100/0x190 [ 1080.592034][T16625] dump_header+0xfb/0x606 [ 1080.592053][T16625] oom_kill_process.cold+0xd/0x380 [ 1080.592074][T16625] out_of_memory+0x340/0x14f0 [ 1080.592099][T16625] ? __pfx_out_of_memory+0x10/0x10 [ 1080.592124][T16625] mem_cgroup_out_of_memory+0xc6/0x130 [ 1080.592142][T16625] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1080.592158][T16625] ? find_held_lock+0x2b/0x80 [ 1080.592184][T16625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1080.592204][T16625] ? _raw_spin_unlock+0x28/0x50 [ 1080.592231][T16625] try_charge_memcg+0x783/0xf60 [ 1080.592258][T16625] ? __pfx_try_charge_memcg+0x10/0x10 [ 1080.592278][T16625] ? find_held_lock+0x2b/0x80 [ 1080.592299][T16625] ? rcu_read_unlock+0x17/0x60 [ 1080.592320][T16625] ? rcu_read_unlock+0x17/0x60 [ 1080.592344][T16625] ? find_held_lock+0x2b/0x80 [ 1080.592365][T16625] ? rcu_read_unlock+0x17/0x60 [ 1080.592392][T16625] charge_memcg+0x1ae/0x210 [ 1080.592414][T16625] __mem_cgroup_charge+0x2b/0x1c0 [ 1080.592440][T16625] shmem_alloc_and_add_folio+0x451/0xd40 [ 1080.592468][T16625] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1080.592492][T16625] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1080.592520][T16625] shmem_get_folio_gfp+0x75b/0x1980 [ 1080.592547][T16625] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1080.592570][T16625] ? vm_normal_page+0x1d1/0x380 [ 1080.592587][T16625] ? __pfx_vm_normal_page+0x10/0x10 [ 1080.592608][T16625] shmem_write_begin+0x1a4/0x420 [ 1080.592632][T16625] ? __pfx_shmem_write_begin+0x10/0x10 [ 1080.592655][T16625] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1080.592683][T16625] generic_perform_write+0x292/0xa40 [ 1080.592702][T16625] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1080.592732][T16625] ? __pfx_generic_perform_write+0x10/0x10 [ 1080.592757][T16625] ? file_update_time_flags+0x38c/0x520 [ 1080.592783][T16625] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1080.592806][T16625] shmem_file_write_iter+0x10e/0x140 [ 1080.592823][T16625] __kernel_write_iter+0x2ac/0x930 [ 1080.592850][T16625] ? __pfx___kernel_write_iter+0x10/0x10 [ 1080.592874][T16625] ? __up_read+0x333/0x980 [ 1080.592895][T16625] ? dump_user_range+0x65e/0xad0 [ 1080.592924][T16625] dump_user_range+0x3f9/0xad0 [ 1080.592953][T16625] ? __pfx_dump_user_range+0x10/0x10 [ 1080.592984][T16625] ? __pfx_writenote+0x10/0x10 [ 1080.593000][T16625] ? elf_core_dump+0x1f25/0x3d20 [ 1080.593020][T16625] elf_core_dump+0x2d68/0x3d20 [ 1080.593049][T16625] ? __pfx_elf_core_dump+0x10/0x10 [ 1080.593065][T16625] ? kasan_save_stack+0x3f/0x50 [ 1080.593081][T16625] ? kasan_save_stack+0x30/0x50 [ 1080.593096][T16625] ? kasan_save_track+0x14/0x30 [ 1080.593112][T16625] ? __kasan_kmalloc+0xaa/0xb0 [ 1080.593128][T16625] ? vfs_coredump+0x21f6/0x54a0 [ 1080.593150][T16625] ? get_signal+0x1f2a/0x21e0 [ 1080.593167][T16625] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1080.593195][T16625] ? 0xffffffffff600000 [ 1080.593236][T16625] ? lock_acquire+0x1d1/0x380 [ 1080.593252][T16625] ? get_signal+0x1f2a/0x21e0 [ 1080.593276][T16625] ? vfs_coredump+0x281a/0x54a0 [ 1080.593300][T16625] vfs_coredump+0x281a/0x54a0 [ 1080.593332][T16625] ? __pfx_vfs_coredump+0x10/0x10 [ 1080.593356][T16625] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.593378][T16625] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.593397][T16625] ? lock_acquire+0x1d1/0x380 [ 1080.593413][T16625] ? unwind_next_frame+0xbd/0x2090 [ 1080.593439][T16625] ? lock_acquire+0x1d1/0x380 [ 1080.593461][T16625] ? bpf_ksym_find+0x128/0x1c0 [ 1080.593484][T16625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1080.593515][T16625] ? arch_stack_walk+0xa6/0xf0 [ 1080.593542][T16625] ? __sigqueue_free+0xbe/0x2a0 [ 1080.593562][T16625] ? stack_trace_save+0x8e/0xc0 [ 1080.593585][T16625] ? __pfx_stack_trace_save+0x10/0x10 [ 1080.593612][T16625] ? stack_depot_save_flags+0x27/0x9f0 [ 1080.593631][T16625] ? __lock_acquire+0x4c5/0x1ec0 [ 1080.593684][T16625] ? proc_coredump_connector+0x2d3/0x4f0 [ 1080.593707][T16625] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1080.593733][T16625] ? rcu_is_watching+0x13/0xc0 [ 1080.593762][T16625] get_signal+0x1f2a/0x21e0 [ 1080.593788][T16625] ? __pfx_get_signal+0x10/0x10 [ 1080.593811][T16625] arch_do_signal_or_restart+0x91/0x7e0 [ 1080.593836][T16625] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1080.593871][T16625] irqentry_exit+0x402/0xa10 [ 1080.593893][T16625] asm_exc_page_fault+0x26/0x30 [ 1080.593909][T16625] RIP: 0033:0x7f6668b9e161 [ 1080.593924][T16625] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1080.593938][T16625] RSP: 002b:fffffffffffffe90 EFLAGS: 00010217 [ 1080.593953][T16625] RAX: 0000000000000000 RBX: 00007f6668e26090 RCX: 00007f6668b9e159 [ 1080.593964][T16625] RDX: 0000000000000000 RSI: fffffffffffffe90 RDI: 0000000002008000 [ 1080.593974][T16625] RBP: 00007f6668c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1080.593984][T16625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1080.593994][T16625] R13: 00007f6668e26128 R14: 00007f6668e26090 R15: 00007ffc7bfbc298 [ 1080.594017][T16625] [ 1080.620937][T16625] memory: usage 307200kB, limit 307200kB, failcnt 17102 [ 1080.620953][T16625] memory+swap: usage 419768kB, limit 9007199254740988kB, failcnt 0 [ 1080.620964][T16625] kmem: usage 3392kB, limit 9007199254740988kB, failcnt 0 [ 1080.620973][T16625] Memory cgroup stats for /syz6: [ 1080.621084][T16625] cache 310702080 [ 1080.621092][T16625] rss 397312 [ 1080.621098][T16625] rss_huge 0 [ 1080.621104][T16625] shmem 310702080 [ 1080.621123][T16625] mapped_file 159084544 [ 1080.621129][T16625] dirty 0 [ 1080.621135][T16625] writeback 0 [ 1080.621141][T16625] workingset_refault_anon 68 [ 1080.621147][T16625] workingset_refault_file 0 [ 1080.621154][T16625] swap 115269632 [ 1080.621160][T16625] swapcached 123498496 [ 1080.621166][T16625] pgpgin 512418 [ 1080.621171][T16625] pgpgout 436466 [ 1080.621178][T16625] pgfault 262843 [ 1080.621183][T16625] pgmajfault 53 [ 1080.621189][T16625] inactive_anon 99393536 [ 1080.621196][T16625] active_anon 211705856 [ 1080.621202][T16625] inactive_file 0 [ 1080.621208][T16625] active_file 0 [ 1080.621213][T16625] unevictable 0 [ 1080.621219][T16625] hierarchical_memory_limit 314572800 [ 1080.621226][T16625] hierarchical_memsw_limit 9223372036854771712 [ 1080.621234][T16625] total_cache 310702080 [ 1080.621240][T16625] total_rss 397312 [ 1080.621246][T16625] total_rss_huge 0 [ 1080.621252][T16625] total_shmem 310702080 [ 1080.621258][T16625] total_mapped_file 159084544 [ 1080.621264][T16625] total_dirty 0 [ 1080.621270][T16625] total_writeback 0 [ 1080.621276][T16625] total_workingset_refault_anon 68 [ 1080.621283][T16625] total_workingset_refault_file 0 [ 1080.621289][T16625] total_swap 115269632 [ 1080.621295][T16625] total_swapcached 123498496 [ 1080.621302][T16625] total_pgpgin 512418 [ 1080.621308][T16625] total_pgpgout 436466 [ 1080.621314][T16625] total_pgfault 262843 [ 1080.621320][T16625] total_pgmajfault 53 [ 1080.621326][T16625] total_inactive_anon 99393536 [ 1080.621333][T16625] total_active_anon 211705856 [ 1080.621339][T16625] total_inactive_file 0 [ 1080.621345][T16625] total_active_file 0 [ 1080.621351][T16625] total_unevictable 0 [ 1080.621357][T16625] anon_cost 0 [ 1080.621363][T16625] file_cost 0 [ 1080.621369][T16625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2715,pid=16625,uid=0 [ 1080.622068][T16625] Memory cgroup out of memory: Killed process 16625 (syz.6.2715) total-vm:104432kB, anon-rss:1400kB, file-rss:56132kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1080.661331][T15229] usb 8-1: device descriptor read/8, error -71 [ 1080.792656][T15229] usb usb8-port1: unable to enumerate USB device [ 1081.108705][ T31] audit: type=1400 audit(1788325650.834:2888): avc: denied { write } for pid=16713 comm="syz.8.2737" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1083.073384][T16722] busy [ 1083.748955][ T31] audit: type=1400 audit(1788325653.474:2889): avc: denied { mount } for pid=16735 comm="syz.8.2744" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1083.950070][T16736] macsec2: entered promiscuous mode [ 1084.151730][ T5697] usb 9-1: string descriptor 0 read error: -32 [ 1084.165899][ T5697] uvcvideo 9-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 1084.165988][ T5697] uvcvideo 9-1:1.0: Found UVC 1.00 device (046d:0825) [ 1084.166055][ T5697] uvcvideo 9-1:1.1: No supported video formats found. [ 1084.166071][ T5697] uvcvideo 9-1:1.1: Failed to initialize the device (-22). [ 1084.166582][ T5697] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -22 [ 1084.383765][T16745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1084.457296][T16749] can0: slcan on ttyS3. [ 1084.543138][T16747] can0 (unregistered): slcan off ttyS3. [ 1084.990771][T16755] kernel read not supported for file /bus (pid: 16755 comm: syz.8.2751) [ 1085.662109][ T31] audit: type=1800 audit(1788325654.924:2890): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2751" name="bus" dev="mqueue" ino=60822 res=0 errno=0 [ 1086.726675][ T5331] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1086.882646][ T5331] usb 10-1: Using ep0 maxpacket: 8 [ 1086.884488][ T5331] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1086.895939][ T5331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1086.896002][ T5331] usb 10-1: Product: syz [ 1086.896075][ T5331] usb 10-1: Manufacturer: syz [ 1086.896144][ T5331] usb 10-1: SerialNumber: syz [ 1087.059175][ T5331] usb 10-1: config 0 descriptor?? [ 1087.221460][ T5331] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1087.470046][ T5331] gspca_sn9c2028: read1 error -71 [ 1087.475675][ T5331] gspca_sn9c2028: read1 error -71 [ 1087.475740][ T5331] sn9c2028 10-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1087.495721][ T5331] usb 10-1: USB disconnect, device number 4 [ 1087.872759][ T31] audit: type=1400 audit(1788325657.604:2891): avc: denied { write } for pid=16763 comm="syz.7.2753" name="functions" dev="configfs" ino=28126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1087.923578][T16765] LUN: removable file: (no medium) [ 1087.941174][ T31] audit: type=1400 audit(1788325657.664:2892): avc: denied { read } for pid=16763 comm="syz.7.2753" name="file" dev="configfs" ino=61617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1087.978299][ T31] audit: type=1800 audit(1788325657.704:2893): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2753" name="file" dev="configfs" ino=61617 res=0 errno=0 [ 1087.993366][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.995655][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.151093][T16783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1088.590040][T16793] binder: 16792:16793 ioctl c0306201 2000000001c0 returned -14 [ 1088.733728][ T31] audit: type=1400 audit(1788325658.444:2894): avc: denied { ioctl } for pid=16794 comm="syz.7.2760" path="socket:[61641]" dev="sockfs" ino=61641 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1088.794676][ T5331] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1088.953188][ T5331] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1088.963901][ T5331] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1088.972464][ T5331] usb 6-1: config 1 has no interface number 0 [ 1088.983840][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.983879][ T5331] usb 6-1: Product: syz [ 1088.983897][ T5331] usb 6-1: Manufacturer: syz [ 1088.983915][ T5331] usb 6-1: SerialNumber: syz [ 1089.032061][ T5331] usb 6-1: 3:1 : does not exist [ 1089.037293][ T5331] usb 6-1: 3:2 : does not exist [ 1089.384937][T16791] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1089.405789][ T5698] usb 6-1: USB disconnect, device number 107 [ 1089.772536][T16812] netlink: 'syz.6.2764': attribute type 10 has an invalid length. [ 1089.783455][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.783767][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.804717][ T31] audit: type=1400 audit(1788325659.514:2895): avc: denied { write } for pid=16809 comm="syz.8.2765" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1090.391504][ T31] audit: type=1400 audit(1788325660.114:2896): avc: denied { write } for pid=16817 comm="syz.7.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1091.261118][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1092.394675][T16829] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2771'. [ 1092.394767][T16829] tipc: Invalid UDP bearer configuration [ 1092.395059][T16829] tipc: Enabling of bearer rejected, failed to enable media [ 1093.031837][ T31] audit: type=1400 audit(1788325662.754:2897): avc: denied { ioctl } for pid=16834 comm="syz.9.2773" path="socket:[61697]" dev="sockfs" ino=61697 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1093.107395][T16837] ip_tables: iptables: counters copy to user failed while replacing table [ 1093.277596][ T31] audit: type=1400 audit(1788325662.994:2898): avc: denied { ioctl } for pid=16843 comm="syz.8.2775" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1093.462581][T15229] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1093.619123][T15229] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1093.631057][T15229] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1093.642120][T15229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.672651][T16840] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1093.681409][T16825] ceph: No mds server is up or the cluster is laggy [ 1093.694138][T15229] opticon 8-1:1.0: opticon converter detected [ 1093.773419][T15229] usb 8-1: opticon converter now attached to ttyUSB0 [ 1094.152647][ T5698] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1094.165055][T16852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.165382][T16852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.314369][ T5698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1094.315729][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.315826][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.315855][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.319467][ T5698] usb 6-1: config 0 descriptor?? [ 1094.432606][ T5711] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1094.505422][ T31] audit: type=1400 audit(1788325664.234:2899): avc: denied { lock } for pid=16832 comm="syz.7.2772" path="socket:[60975]" dev="sockfs" ino=60975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1094.543396][T16849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.544180][T16849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.582692][ T5711] usb 10-1: Using ep0 maxpacket: 8 [ 1094.583724][ T5711] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1094.585023][ T5711] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1094.585079][ T5711] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1094.585172][ T5711] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1094.585209][ T5711] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1094.585230][ T5711] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1094.585353][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.875317][T16857] netlink: 'syz.6.2779': attribute type 10 has an invalid length. [ 1095.700334][ T5711] usb 10-1: usb_control_msg returned -32 [ 1095.708982][ T5711] usbtmc 10-1:16.0: can't read capabilities [ 1095.786248][ T5698] arvo 0003:1E7D:30D4.003C: item fetching failed at offset 5/7 [ 1095.786540][ T5698] arvo 0003:1E7D:30D4.003C: parse failed [ 1095.786579][ T5698] arvo 0003:1E7D:30D4.003C: probe with driver arvo failed with error -22 [ 1095.821062][ T5698] usb 6-1: USB disconnect, device number 108 [ 1095.830096][ T5331] usb 8-1: USB disconnect, device number 42 [ 1095.921434][ T5331] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1095.937309][ T5331] opticon 8-1:1.0: device disconnected [ 1096.174975][T16859] ima: rule for LSM 'u' is undefined [ 1096.183301][ T31] audit: type=1804 audit(1788325665.904:2900): pid=16859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.8.2780" name="ima_policy_written" res=0 errno=-17 [ 1096.183381][ T31] audit: type=1807 audit(1788325665.904:2901): action=measure func=FILE_CHECK obj_type=u res=0 [ 1096.183416][ T31] audit: type=1802 audit(1788325665.904:2902): pid=16859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.8.2780" res=0 errno=0 [ 1096.183506][T16858] ima: policy update failed [ 1096.235693][ T31] audit: type=1802 audit(1788325665.914:2903): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.8.2780" res=0 errno=0 [ 1096.310355][T16864] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1096.310506][T16864] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1096.310569][T16864] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1097.311525][ T31] audit: type=1400 audit(1788325667.034:2904): avc: denied { append } for pid=16876 comm="syz.5.2785" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1097.482825][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.483214][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.487210][T16883] program syz.8.2787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1097.514816][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.515282][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.811413][T15229] usb 10-1: USB disconnect, device number 5 [ 1097.902798][ T5697] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1098.038524][ T31] audit: type=1400 audit(1788325667.764:2905): avc: denied { write } for pid=16888 comm="syz.9.2788" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1098.070485][ T5697] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1098.072804][ T5697] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1098.072825][ T5697] usb 8-1: config 1 has no interface number 0 [ 1098.076753][ T5697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.076773][ T5697] usb 8-1: Product: syz [ 1098.076786][ T5697] usb 8-1: Manufacturer: syz [ 1098.076799][ T5697] usb 8-1: SerialNumber: syz [ 1098.107412][ T5697] usb 8-1: 3:1 : does not exist [ 1098.107432][ T5697] usb 8-1: 3:2 : does not exist [ 1098.302417][ T5698] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1098.588808][ T5698] usb 10-1: Using ep0 maxpacket: 32 [ 1098.611793][ T5698] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1098.687362][ T5698] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1098.687402][ T5698] usb 10-1: config 0 has no interface number 0 [ 1098.821675][ T5698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.821714][ T5698] usb 10-1: Product: syz [ 1098.821744][ T5698] usb 10-1: Manufacturer: syz [ 1098.821760][ T5698] usb 10-1: SerialNumber: syz [ 1099.911616][ T5698] usb 10-1: config 0 descriptor?? [ 1100.192517][ T5697] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1100.352790][ T5697] usb 6-1: Using ep0 maxpacket: 16 [ 1100.359615][ T5697] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1100.383913][ T5697] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.384014][ T5697] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.384045][ T5697] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.384072][ T5697] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1100.384105][ T5697] usb 6-1: config 7 interface 0 has no altsetting 0 [ 1100.384168][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.666854][T13106] usb 8-1: USB disconnect, device number 43 [ 1100.784417][ T5698] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1100.784456][ T5698] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1100.791140][ T5698] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1100.791311][ T5698] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1100.822714][ T5698] usb 10-1: USB disconnect, device number 6 [ 1100.948510][T16901] netlink: 'syz.7.2791': attribute type 4 has an invalid length. [ 1100.960518][T16901] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2791'. [ 1101.088166][ T5697] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.003D/input/input141 [ 1101.203969][T16903] ima: rule for LSM 'u' is undefined [ 1101.205569][ T31] audit: type=1804 audit(1788325670.934:2906): pid=16903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.7.2792" name="ima_policy_written" res=0 errno=-17 [ 1101.205608][ T31] audit: type=1807 audit(1788325670.934:2907): action=measure func=FILE_CHECK obj_type=u res=0 [ 1101.205633][ T31] audit: type=1802 audit(1788325670.934:2908): pid=16903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.7.2792" res=0 errno=0 [ 1101.243892][T16902] ima: policy update failed [ 1101.244034][ T31] audit: type=1802 audit(1788325670.974:2909): pid=16902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.2792" res=0 errno=0 [ 1101.332574][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1101.390234][ T5697] kye 0003:0458:5010.003D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 1101.495332][ T5697] usb 6-1: USB disconnect, device number 109 [ 1101.609653][T16913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1101.625342][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2795'. [ 1101.736485][T16916] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1101.744953][T16916] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1101.744982][T16916] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1101.992459][T13106] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1102.072847][T16911] fido_id[16911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1102.444248][T13106] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1102.472979][T13106] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.670488][T13106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.670528][T13106] usb 7-1: Product: syz [ 1102.670557][T13106] usb 7-1: Manufacturer: syz [ 1102.670574][T13106] usb 7-1: SerialNumber: syz [ 1102.941152][T16924] busy [ 1103.968895][T13106] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1103.968935][T13106] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1103.968954][T13106] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 1104.029874][T16937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.030231][T16937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.031698][T16939] netlink: 'syz.5.2803': attribute type 13 has an invalid length. [ 1104.149098][T16937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1104.370894][T16913] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2795'. [ 1104.371919][T13106] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 1104.378706][T13106] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1104.427694][T13106] usb 7-1: USB disconnect, device number 41 [ 1104.440550][T13106] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 1104.455362][ T31] audit: type=1804 audit(1788325674.184:2910): pid=16943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.5.2804" name="ima_policy_written" res=0 errno=-17 [ 1104.455419][T16943] ima: rule for LSM 'u' is undefined [ 1104.477807][T16942] ima: policy update failed [ 1104.486381][ T31] audit: type=1807 audit(1788325674.184:2911): action=measure func=FILE_CHECK obj_type=u res=0 [ 1104.486419][ T31] audit: type=1802 audit(1788325674.184:2912): pid=16943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.2804" res=0 errno=0 [ 1104.486453][ T31] audit: type=1802 audit(1788325674.214:2913): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2804" res=0 errno=0 [ 1104.747944][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.747963][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748046][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748056][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748125][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748136][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748213][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748223][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748288][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748298][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748360][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748368][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748426][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748434][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748496][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748505][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748572][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748582][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748657][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748667][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.748740][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.748750][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.786097][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.786111][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.786203][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.786210][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.786281][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.786289][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.786354][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.786360][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.786423][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.786430][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.786491][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.786497][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859553][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859564][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859624][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859631][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859717][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859724][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859782][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859788][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859847][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859853][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859911][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859917][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.859977][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.859983][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860041][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860046][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860110][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860116][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860174][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860180][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860239][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860246][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860304][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860310][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860368][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860374][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860450][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860457][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860516][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860522][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860580][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860586][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860644][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860650][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860728][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860735][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860794][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860800][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860857][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860863][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.860923][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.860929][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.871790][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.871800][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.871868][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.871874][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.871933][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.871939][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.871996][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872002][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872060][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872066][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872125][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872131][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872191][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872197][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872256][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872262][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872320][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872364][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872425][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872432][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872489][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872495][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872554][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872560][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872624][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872630][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1104.872718][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.872725][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.042158][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.042169][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.042242][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.042249][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.042307][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.042313][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.042412][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.042418][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.042478][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.042485][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.058777][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.058788][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.058856][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.058862][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.058920][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.058927][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.058986][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.058993][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.059050][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.059056][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.059118][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.059124][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.059182][T16949] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.059188][T16949] binder: 16947:16949 ioctl 4018620d 200000000240 returned -16 [ 1105.102693][ T31] audit: type=1400 audit(1788325674.814:2914): avc: denied { load_policy } for pid=16947 comm="syz.5.2806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1105.117093][T16953] SELinux: policydb magic number 0xfffffce3 does not match expected magic number 0xf97cff8c [ 1105.117134][T16953] SELinux: failed to load policy [ 1105.240059][T16957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.256527][T16957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.599232][T16957] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1106.422962][T16967] ima: rule for LSM 'u' is undefined [ 1106.428683][ T31] audit: type=1804 audit(1788325676.154:2915): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.8.2811" name="ima_policy_written" res=0 errno=-17 [ 1106.428903][ T31] audit: type=1807 audit(1788325676.154:2916): action=measure func=FILE_CHECK obj_type=u res=0 [ 1106.428939][ T31] audit: type=1802 audit(1788325676.154:2917): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.8.2811" res=0 errno=0 [ 1106.429322][T16965] ima: policy update failed [ 1106.431489][ T31] audit: type=1802 audit(1788325676.154:2918): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.8.2811" res=0 errno=0 [ 1106.632819][ T5690] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1106.744504][T16976] netlink: 'syz.6.2812': attribute type 10 has an invalid length. [ 1106.891155][ T5690] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1106.951801][ T5690] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1106.951862][ T5690] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1106.969559][ T5690] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1107.209899][ T5690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.209943][ T5690] usb 8-1: Product: syz [ 1107.209957][ T5690] usb 8-1: Manufacturer: syz [ 1107.209970][ T5690] usb 8-1: SerialNumber: syz [ 1107.447670][T16977] netlink: 'syz.8.2813': attribute type 10 has an invalid length. [ 1107.903017][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1108.513865][T16969] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1108.514005][T16969] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1108.545402][ T5690] oti6858 8-1:1.0: oti6858 converter detected [ 1108.590221][ T5690] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 1108.593694][ T5711] usb 9-1: USB disconnect, device number 38 [ 1109.672911][ T5690] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1109.706928][T16987] busy [ 1109.852858][ T5690] usb 7-1: Using ep0 maxpacket: 16 [ 1109.858634][ T5690] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1109.865522][ T5690] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.865700][ T5690] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.865757][ T5690] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.865786][ T5690] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1109.865835][ T5690] usb 7-1: config 7 interface 0 has no altsetting 0 [ 1109.865920][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.876314][ T5698] usb 8-1: USB disconnect, device number 44 [ 1110.373690][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.373751][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.930911][ T5698] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1110.931423][ T5698] oti6858 8-1:1.0: device disconnected [ 1111.273537][T13106] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1111.433721][T13106] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1111.444528][T13106] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 1111.444565][T13106] usb 9-1: config 1 has no interface number 0 [ 1111.644493][ T5690] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.003E/input/input143 [ 1111.668559][T13106] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.668598][T13106] usb 9-1: Product: syz [ 1111.668625][T13106] usb 9-1: Manufacturer: syz [ 1111.668642][T13106] usb 9-1: SerialNumber: syz [ 1111.727540][T13106] usb 9-1: 3:1 : does not exist [ 1111.734125][T13106] usb 9-1: 3:2 : does not exist [ 1111.793881][ T5690] kye 0003:0458:5010.003E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 1111.843542][ T5690] usb 7-1: USB disconnect, device number 42 [ 1111.958619][T17006] fido_id[17006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1112.059344][T17005] ima: rule for LSM 'u' is undefined [ 1112.060547][T17004] ima: policy update failed [ 1112.175756][T16992] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1112.188490][ T9] usb 9-1: USB disconnect, device number 39 [ 1112.201926][ T31] audit: type=1804 audit(1788325681.784:2919): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.9.2823" name="ima_policy_written" res=0 errno=-17 [ 1112.201994][ T31] audit: type=1807 audit(1788325681.784:2920): action=measure func=FILE_CHECK obj_type=u res=0 [ 1112.202018][ T31] audit: type=1802 audit(1788325681.784:2921): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.9.2823" res=0 errno=0 [ 1112.202045][ T31] audit: type=1802 audit(1788325681.784:2922): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.9.2823" res=0 errno=0 [ 1112.482823][T17015] netlink: 'syz.5.2824': attribute type 10 has an invalid length. [ 1112.491371][T17015] bridge0: port 3(syz_tun) entered disabled state [ 1112.491626][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.491773][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.505285][T17015] bridge0: port 3(syz_tun) entered blocking state [ 1112.505385][T17015] bridge0: port 3(syz_tun) entered forwarding state [ 1112.505597][T17015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.505713][T17015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.505932][T17015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.506027][T17015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.528506][T17015] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1113.245294][T17019] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1113.245430][T17019] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1113.245556][T17019] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1115.280773][T17028] overlayfs: failed to resolve './file0': -2 [ 1116.667823][ T31] audit: type=1400 audit(1788325686.394:2923): avc: denied { ioctl } for pid=17049 comm="syz.6.2834" path="socket:[62131]" dev="sockfs" ino=62131 ioctlcmd=0x5419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1116.694734][ T31] audit: type=1400 audit(1788325686.424:2924): avc: denied { read } for pid=17046 comm="syz.8.2833" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1116.764158][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2833'. [ 1116.953338][T17053] ima: rule for LSM 'u' is undefined [ 1116.954535][T17052] ima: policy update failed [ 1117.025681][ T31] audit: type=1804 audit(1788325686.684:2925): pid=17053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.9.2835" name="ima_policy_written" res=0 errno=-17 [ 1117.025723][ T31] audit: type=1807 audit(1788325686.684:2926): action=measure func=FILE_CHECK obj_type=u res=0 [ 1117.025748][ T31] audit: type=1802 audit(1788325686.684:2927): pid=17053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.9.2835" res=0 errno=0 [ 1117.025778][ T31] audit: type=1802 audit(1788325686.684:2928): pid=17052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.9.2835" res=0 errno=0 [ 1117.492747][ T4927] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1117.601326][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1117.601396][T17064] ima: rule for LSM 'u' is undefined [ 1117.613812][ T31] audit: type=1804 audit(1788325687.324:2930): pid=17064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.7.2839" name="ima_policy_written" res=0 errno=-17 [ 1117.636237][T17062] ima: policy update failed [ 1117.690829][ T31] audit: type=1807 audit(1788325687.324:2931): action=measure func=FILE_CHECK obj_type=u res=0 [ 1117.701515][ T31] audit: type=1802 audit(1788325687.324:2932): pid=17064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.7.2839" res=0 errno=0 [ 1117.720465][ T4927] usb 7-1: Using ep0 maxpacket: 16 [ 1117.720947][ T4927] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1117.736873][ T4927] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.736912][ T4927] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.736927][ T4927] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.736939][ T4927] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1117.736954][ T4927] usb 7-1: config 7 interface 0 has no altsetting 0 [ 1117.736970][ T4927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.811399][ T31] audit: type=1802 audit(1788325687.364:2933): pid=17062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.2839" res=0 errno=0 [ 1118.190264][ T4927] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.003F/input/input144 [ 1118.236052][ T31] audit: type=1400 audit(1788325687.954:2934): avc: denied { firmware_load } for pid=17068 comm="syz.7.2841" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1118.679274][ T4927] kye 0003:0458:5010.003F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 1119.204540][ T4927] usb 7-1: USB disconnect, device number 43 [ 1119.404326][T17077] syzkaller0: entered promiscuous mode [ 1119.410041][T17077] syzkaller0: entered allmulticast mode [ 1119.486908][T17075] fido_id[17075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1120.062557][ T4927] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1120.130172][ T31] audit: type=1400 audit(1788325689.854:2935): avc: denied { append } for pid=17087 comm="syz.5.2843" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1120.214100][ T4927] usb 8-1: Using ep0 maxpacket: 8 [ 1120.217288][ T4927] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1120.221259][ T4927] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 1120.221281][ T4927] usb 8-1: config 0 has an invalid interface number: 149 but max is -1 [ 1120.221298][ T4927] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.221313][ T4927] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1120.221330][ T4927] usb 8-1: config 0 has no interface number 0 [ 1120.221352][ T4927] usb 8-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 1120.221377][ T4927] usb 8-1: config 0 interface 149 altsetting 215 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 1120.221398][ T4927] usb 8-1: config 0 interface 149 has no altsetting 0 [ 1120.228871][ T4927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.228892][ T4927] usb 8-1: Product: syz [ 1120.228905][ T4927] usb 8-1: Manufacturer: syz [ 1120.228917][ T4927] usb 8-1: SerialNumber: syz [ 1120.234611][ T4927] usb 8-1: config 0 descriptor?? [ 1120.245317][ T4927] hub 8-1:0.149: bad descriptor, ignoring hub [ 1120.245340][ T4927] hub 8-1:0.149: probe with driver hub failed with error -5 [ 1120.556514][T17099] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1120.566021][T17099] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1120.566080][T17099] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1120.822402][ T5690] usb 9-1: new low-speed USB device number 40 using dummy_hcd [ 1121.285657][ T5690] usb 9-1: No LPM exit latency info found, disabling LPM. [ 1121.285703][ T5690] usb 9-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=e6.10 [ 1121.341133][ T5690] usb 9-1: config 255 has an invalid interface number: 22 but max is 1 [ 1121.341162][ T5690] usb 9-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 1121.341182][ T5690] usb 9-1: config 255 has an invalid interface descriptor of length 5, skipping [ 1121.341199][ T5690] usb 9-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 1121.341218][ T5690] usb 9-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 1121.341237][ T5690] usb 9-1: config 255 has no interface number 0 [ 1121.341271][ T5690] usb 9-1: config 255 interface 22 altsetting 2 endpoint 0xB is Bulk; changing to Interrupt [ 1121.341291][ T5690] usb 9-1: config 255 interface 22 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 1121.341312][ T5690] usb 9-1: config 255 interface 22 altsetting 2 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 1121.341334][ T5690] usb 9-1: config 255 interface 22 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 0 [ 1121.341356][ T5690] usb 9-1: config 255 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1121.341373][ T5690] usb 9-1: config 255 interface 22 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 0 [ 1121.341395][ T5690] usb 9-1: config 255 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1121.341411][ T5690] usb 9-1: config 255 interface 22 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1121.341429][ T5690] usb 9-1: config 255 interface 22 altsetting 2 has an invalid endpoint descriptor of length 2, skipping [ 1121.341447][ T5690] usb 9-1: config 255 interface 22 has no altsetting 0 [ 1121.425473][ T31] audit: type=1400 audit(1788325691.134:2936): avc: denied { watch } for pid=17103 comm="syz.9.2850" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1121.628874][ T31] audit: type=1326 audit(1788325691.354:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.9.2850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629dd9e159 code=0x0 [ 1122.329195][T17081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.329249][T17081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.465505][ T31] audit: type=1400 audit(1788325692.194:2938): avc: denied { associate } for pid=17112 comm="syz.9.2853" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1122.512612][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1122.690783][ T31] audit: type=1400 audit(1788325692.424:2939): avc: denied { create } for pid=17113 comm="syz.9.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1122.695216][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1122.714316][T16564] Bluetooth: hci5: command 0x0406 tx timeout [ 1122.720945][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1122.723495][T17081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.723525][T17081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.759208][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.759238][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.759256][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1122.759305][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.772263][ T9] usb 7-1: config 0 descriptor?? [ 1122.871625][ T31] audit: type=1400 audit(1788325692.594:2940): avc: denied { mount } for pid=17113 comm="syz.9.2854" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1122.909613][ T31] audit: type=1400 audit(1788325692.634:2941): avc: denied { unmount } for pid=16049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1122.989610][T17081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.989690][T17081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.083613][T17081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.083654][T17081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.199275][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0040/input/input146 [ 1123.223940][ T5697] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1123.255705][ T9] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1123.302942][ T4927] usb 8-1: USB disconnect, device number 45 [ 1123.382856][ T5697] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1123.394129][ T5697] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 1123.394169][ T5697] usb 10-1: config 1 has no interface number 0 [ 1123.411745][ T5697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.411772][ T5697] usb 10-1: Product: syz [ 1123.411806][ T5697] usb 10-1: Manufacturer: syz [ 1123.411819][ T5697] usb 10-1: SerialNumber: syz [ 1123.438853][ T5690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.438893][ T5690] usb 9-1: Product: 扥唳靨᫯쵢閩름쩤줯艹텾⏖뽗錂땴걱㍤ጾ嶮솷餸檳꽺Ȏ䖙꧓댬縰嚈뢚ꆣ䄗೷웏枹H [ 1123.438915][ T5690] usb 9-1: Manufacturer: ఇ [ 1123.448583][ T5697] usb 10-1: 3:1 : does not exist [ 1123.448599][ T5697] usb 10-1: 3:2 : does not exist [ 1123.478296][ T5690] usb 9-1: can't set config #255, error -71 [ 1123.481620][ T5690] usb 9-1: USB disconnect, device number 40 [ 1123.529643][T17127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17127 comm=syz.8.2857 [ 1123.595700][T17129] netlink: 'syz.8.2858': attribute type 10 has an invalid length. [ 1123.616425][T17129] team0: Port device dummy0 added [ 1123.757325][T17124] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1123.794815][ T5690] usb 10-1: USB disconnect, device number 7 [ 1124.485853][T17149] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1124.488101][T17149] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1124.499665][T17149] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1124.742439][ T5697] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1124.750555][ T72] IPVS: starting estimator thread 0... [ 1124.875132][T17151] IPVS: using max 45 ests per chain, 108000 per kthread [ 1124.944796][T17152] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:21 [ 1124.963773][ T5697] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1124.975311][ T5697] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1124.975353][ T5697] usb 8-1: config 1 has no interface number 0 [ 1125.092239][ T5697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.092271][ T5697] usb 8-1: Product: syz [ 1125.092298][ T5697] usb 8-1: Manufacturer: syz [ 1125.092311][ T5697] usb 8-1: SerialNumber: syz [ 1125.357981][T13106] usb 7-1: USB disconnect, device number 44 [ 1125.378553][ T5697] usb 8-1: 3:1 : does not exist [ 1125.378586][ T5697] usb 8-1: 3:2 : does not exist [ 1125.598420][T17142] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1125.611094][ T9] usb 8-1: USB disconnect, device number 46 [ 1125.812771][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1125.852545][T13106] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1125.882679][ T5697] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1126.013602][T13106] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1126.014124][T13106] usb 7-1: not running at top speed; connect to a high speed hub [ 1126.014148][T13106] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.015109][T13106] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.015126][T13106] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.017745][T13106] usb 7-1: string descriptor 0 read error: -22 [ 1126.017841][T13106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.031754][T13106] usb 7-1: 0:1 : does not exist [ 1126.031773][T13106] usb 7-1: 0:2 : does not exist [ 1126.044179][ T5697] usb 10-1: Using ep0 maxpacket: 8 [ 1126.046591][ T5697] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1126.047456][ T5697] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.047500][ T5697] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1126.049366][ T5697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.049387][ T5697] usb 10-1: Product: syz [ 1126.049401][ T5697] usb 10-1: Manufacturer: syz [ 1126.049414][ T5697] usb 10-1: SerialNumber: syz [ 1126.051772][ T5697] usb 10-1: config 0 descriptor?? [ 1126.056101][ T5697] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found [ 1126.142440][ T4927] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1126.216416][ T31] audit: type=1400 audit(1788325695.944:2942): avc: denied { ioctl } for pid=17161 comm="syz.7.2869" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1126.357182][ T5697] snd_usb_toneport 10-1:0.0: cannot get proper max packet size [ 1126.358246][ T5697] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected [ 1126.385903][T13106] usb 7-1: 6:0: failed to get current value for ch 1 (-22) [ 1126.386136][ T4927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1126.386183][ T4927] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1126.387773][ T4927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.387794][ T4927] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1126.387833][ T4927] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1126.389809][ T4927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.389828][ T4927] usb 6-1: Product: syz [ 1126.389840][ T4927] usb 6-1: Manufacturer: syz [ 1126.389853][ T4927] usb 6-1: SerialNumber: syz [ 1126.407142][ T5697] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1126.413099][T13106] usb 7-1: 6:0: failed to get current value for ch 0 (-22) [ 1126.514194][T15229] usb 10-1: USB disconnect, device number 8 [ 1126.518554][T13106] usb 7-1: USB disconnect, device number 45 [ 1126.605444][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1126.703582][T17160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1126.722523][T17160] block device autoloading is deprecated and will be removed. [ 1126.767747][ T4927] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 1126.767792][ T4927] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1126.771700][ T4927] usb 6-1: 1:1 : invalid channels 0 [ 1126.814718][ T4927] usb 6-1: USB disconnect, device number 110 [ 1126.836216][T14492] udevd[14492]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.966195][T17166] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2870'. [ 1126.984132][ T31] audit: type=1400 audit(1788325696.704:2943): avc: denied { setattr } for pid=17167 comm="syz.7.2871" name="PHONET" dev="sockfs" ino=63006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1127.282565][T17184] tipc: Failed to obtain node identity [ 1127.288257][T17184] tipc: Enabling of bearer rejected, failed to enable media [ 1127.462520][T17190] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1127.462772][T17190] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1127.462820][T17190] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1128.411620][T17199] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1128.420221][T17199] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1128.420253][T17199] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1128.932550][ T4927] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1129.096093][ T4927] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1129.139589][ T4927] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1129.151718][ T4927] usb 7-1: config 1 has no interface number 0 [ 1129.187777][ T4927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.187846][ T4927] usb 7-1: Product: syz [ 1129.187923][ T4927] usb 7-1: Manufacturer: syz [ 1129.188030][ T4927] usb 7-1: SerialNumber: syz [ 1129.390824][ T4927] usb 7-1: 3:1 : does not exist [ 1129.394083][ T4927] usb 7-1: 3:2 : does not exist [ 1129.545501][ T31] audit: type=1400 audit(1788325699.274:2944): avc: denied { mount } for pid=17210 comm="syz.5.2883" name="/" dev="ramfs" ino=63279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1129.933748][ T31] audit: type=1400 audit(1788325699.664:2945): avc: denied { ioctl } for pid=17213 comm="syz.5.2884" path="socket:[63575]" dev="sockfs" ino=63575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1130.048339][T17203] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1130.061900][ T5698] usb 7-1: USB disconnect, device number 46 [ 1130.247808][T17222] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1130.247898][T17222] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1130.256405][T17222] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1131.343675][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2889'. [ 1131.348934][ T31] audit: type=1400 audit(1788325701.074:2946): avc: denied { write } for pid=17229 comm="syz.5.2889" name="functions" dev="configfs" ino=28126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1131.380575][T17230] Config c/1 of g1 needs at least one function. [ 1131.384573][T17230] udc dummy_udc.0: failed to start g1: -22 [ 1131.384597][T17230] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1131.398870][T17230] UDC core: g1: couldn't find an available UDC or it's busy [ 1131.414558][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1131.502570][T15229] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1131.556034][T17237] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1131.564717][T17237] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1131.564804][T17237] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1131.752673][T15229] usb 7-1: Using ep0 maxpacket: 8 [ 1131.764691][T15229] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1131.787380][T15229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1131.787470][T15229] usb 7-1: Product: syz [ 1131.788427][T15229] usb 7-1: Manufacturer: syz [ 1131.788869][T15229] usb 7-1: SerialNumber: syz [ 1131.857733][T15229] usb 7-1: config 0 descriptor?? [ 1131.864292][T13106] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1131.915732][T15229] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1132.013104][T13106] usb 8-1: Using ep0 maxpacket: 16 [ 1132.021120][T13106] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1132.026274][T13106] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.026476][T13106] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.026549][T13106] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.026594][T13106] usb 8-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1132.026693][T13106] usb 8-1: config 7 interface 0 has no altsetting 0 [ 1132.026874][T13106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.386565][T15229] gspca_sn9c2028: read1 error -71 [ 1132.392403][T15229] gspca_sn9c2028: read1 error -71 [ 1132.397724][T15229] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1132.410523][T15229] usb 7-1: USB disconnect, device number 47 [ 1132.465360][T17242] busy [ 1132.652860][T13106] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.0/0003:0458:5010.0041/input/input148 [ 1132.690551][T17254] syzkaller0: entered promiscuous mode [ 1132.697015][T17254] syzkaller0: entered allmulticast mode [ 1132.800637][T13106] kye 0003:0458:5010.0041: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 1132.886078][T15229] usb 8-1: USB disconnect, device number 47 [ 1133.112522][T13106] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1133.272578][T13106] usb 10-1: Using ep0 maxpacket: 16 [ 1133.278495][T13106] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1133.294930][T13106] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.294989][T13106] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.295035][T13106] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.295060][T13106] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1133.295085][T13106] usb 10-1: config 7 interface 0 has no altsetting 0 [ 1133.295116][T13106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.360226][T17259] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1133.360248][T17259] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1133.360260][T17259] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1133.692129][T17263] fido_id[17263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1133.951877][T13106] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.0/0003:0458:5010.0042/input/input149 [ 1134.021006][T13106] kye 0003:0458:5010.0042: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0 [ 1134.077469][T17273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1134.080604][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1134.086590][T17273] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1134.112123][T17274] input: syz1 as /devices/virtual/input/input150 [ 1134.201861][ T5698] usb 10-1: USB disconnect, device number 9 [ 1134.258297][T17277] fido_id[17277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1134.342930][ T9] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1134.472973][ T5690] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1134.493330][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1134.494195][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.495805][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.495823][ T9] usb 6-1: Product: syz [ 1134.495835][ T9] usb 6-1: Manufacturer: syz [ 1134.495848][ T9] usb 6-1: SerialNumber: syz [ 1134.623208][ T5690] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1134.624228][ T5690] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1134.624248][ T5690] usb 8-1: config 1 has no interface number 0 [ 1134.626716][ T5690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.626735][ T5690] usb 8-1: Product: syz [ 1134.626747][ T5690] usb 8-1: Manufacturer: syz [ 1134.626762][ T5690] usb 8-1: SerialNumber: syz [ 1134.637285][ T5690] usb 8-1: 3:1 : does not exist [ 1134.637305][ T5690] usb 8-1: 3:2 : does not exist [ 1134.990120][T17285] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1135.112708][ T5690] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1135.242447][ T5690] usb 10-1: device descriptor read/64, error -71 [ 1135.482505][ T5690] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1135.514756][ T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1135.514803][ T9] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1135.514822][ T9] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1135.612616][ T5690] usb 10-1: device descriptor read/64, error -71 [ 1135.724486][ T5690] usb usb10-port1: attempt power cycle [ 1135.918145][T17273] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1135.919840][ T9] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 1135.936242][ T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1135.944352][ T9] usb 6-1: USB disconnect, device number 111 [ 1135.946235][ T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1136.063460][ T5690] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1136.083950][ T5690] usb 10-1: device descriptor read/8, error -71 [ 1136.322410][ T5690] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1136.342836][ T5690] usb 10-1: device descriptor read/8, error -71 [ 1136.452760][ T5690] usb usb10-port1: unable to enumerate USB device [ 1136.498850][T17288] syzkaller0: entered promiscuous mode [ 1136.498877][T17288] syzkaller0: entered allmulticast mode [ 1137.254861][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1138.084806][ T31] audit: type=1400 audit(1788325707.764:2947): avc: denied { execute } for pid=17299 comm="syz.6.2908" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1138.084876][ T31] audit: type=1400 audit(1788325707.784:2948): avc: denied { checkpoint_restore } for pid=17299 comm="syz.6.2908" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1138.725323][ T31] audit: type=1804 audit(1788325708.454:2949): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.6.2910" name="ima_policy_written" res=0 errno=-17 [ 1138.725411][T17307] ima: rule for LSM 'u' is undefined [ 1138.752464][ T31] audit: type=1807 audit(1788325708.454:2950): action=measure func=FILE_CHECK obj_type=u res=0 [ 1138.752501][ T31] audit: type=1802 audit(1788325708.454:2951): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.6.2910" res=0 errno=0 [ 1138.754230][T17306] ima: policy update failed [ 1138.754343][ T31] audit: type=1802 audit(1788325708.484:2952): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.2910" res=0 errno=0 [ 1139.025278][T17313] libceph: resolve '1270.1' (ret=-3): failed [ 1139.100558][T17310] ima: rule for LSM 'u' is undefined [ 1139.102662][ T31] audit: type=1804 audit(1788325708.824:2953): pid=17310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.5.2911" name="ima_policy_written" res=0 errno=-17 [ 1139.102702][ T31] audit: type=1807 audit(1788325708.824:2954): action=measure func=FILE_CHECK obj_type=u res=0 [ 1139.102727][ T31] audit: type=1802 audit(1788325708.824:2955): pid=17310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.2911" res=0 errno=0 [ 1139.137734][T17319] FAULT_INJECTION: forcing a failure. [ 1139.137734][T17319] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.137763][T17319] CPU: 0 UID: 0 PID: 17319 Comm: syz.6.2914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.137785][T17319] Tainted: [L]=SOFTLOCKUP [ 1139.137791][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1139.137801][T17319] Call Trace: [ 1139.137807][T17319] [ 1139.137814][T17319] dump_stack_lvl+0x100/0x190 [ 1139.137841][T17319] should_fail_ex.cold+0x5/0xa [ 1139.137867][T17319] should_failslab+0xc2/0x120 [ 1139.137886][T17319] __kmalloc_cache_noprof+0x91/0x6d0 [ 1139.137910][T17319] ? tcf_exts_init_ex+0x277/0x690 [ 1139.137933][T17319] tcf_exts_init_ex+0x277/0x690 [ 1139.137954][T17319] fl_change+0xf00/0x7cd0 [ 1139.137978][T17319] ? __lock_acquire+0x4c5/0x1ec0 [ 1139.137997][T17319] ? tcf_chain0_head_change.isra.0+0x52/0x130 [ 1139.138016][T17319] ? find_held_lock+0x2b/0x80 [ 1139.138037][T17319] ? tcf_chain0_head_change.isra.0+0xec/0x130 [ 1139.138058][T17319] ? __pfx_fl_change+0x10/0x10 [ 1139.138075][T17319] ? fl_get+0x99/0x3d0 [ 1139.138092][T17319] ? find_held_lock+0x2b/0x80 [ 1139.138113][T17319] ? fl_get+0x20a/0x3d0 [ 1139.138128][T17319] ? fl_get+0x20a/0x3d0 [ 1139.138153][T17319] ? fl_get+0x214/0x3d0 [ 1139.138170][T17319] ? __pfx_fl_get+0x10/0x10 [ 1139.138191][T17319] ? __pfx_fl_change+0x10/0x10 [ 1139.138208][T17319] tc_new_tfilter+0x9c3/0x24c0 [ 1139.138239][T17319] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1139.138261][T17319] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1139.138289][T17319] ? __lock_acquire+0x4c5/0x1ec0 [ 1139.138315][T17319] ? lock_acquire+0x1d1/0x380 [ 1139.138330][T17319] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1139.138348][T17319] ? find_held_lock+0x2b/0x80 [ 1139.138370][T17319] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1139.138388][T17319] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1139.138411][T17319] rtnetlink_rcv_msg+0x95e/0xe90 [ 1139.138430][T17319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1139.138453][T17319] ? ref_tracker_free+0x37e/0x6c0 [ 1139.138475][T17319] netlink_rcv_skb+0x159/0x420 [ 1139.138498][T17319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1139.138516][T17319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1139.138547][T17319] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1139.138573][T17319] netlink_unicast+0x585/0x850 [ 1139.138599][T17319] ? __pfx_netlink_unicast+0x10/0x10 [ 1139.138622][T17319] ? __pfx_sock_has_perm+0x10/0x10 [ 1139.138648][T17319] netlink_sendmsg+0x8b0/0xda0 [ 1139.138674][T17319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.138699][T17319] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1139.138726][T17319] ____sys_sendmsg+0xa4d/0xbe0 [ 1139.138744][T17319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.138769][T17319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.138793][T17319] ? lock_acquire+0x1d1/0x380 [ 1139.138809][T17319] ? get_pid_task+0x2a/0x250 [ 1139.138831][T17319] ___sys_sendmsg+0x190/0x1e0 [ 1139.138853][T17319] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.138873][T17319] ? get_pid_task+0x106/0x250 [ 1139.138903][T17319] ? find_held_lock+0x2b/0x80 [ 1139.138937][T17319] __sys_sendmsg+0x160/0x210 [ 1139.138953][T17319] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.138981][T17319] do_syscall_64+0x123/0x790 [ 1139.139002][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.139018][T17319] RIP: 0033:0x7f6668b9e159 [ 1139.139033][T17319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.139048][T17319] RSP: 002b:00007f6669a08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.139066][T17319] RAX: ffffffffffffffda RBX: 00007f6668e25fa0 RCX: 00007f6668b9e159 [ 1139.139077][T17319] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1139.139087][T17319] RBP: 00007f6669a08090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.139097][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1139.139107][T17319] R13: 00007f6668e26038 R14: 00007f6668e25fa0 R15: 00007ffc7bfbc298 [ 1139.139129][T17319] [ 1139.221865][T17309] ima: policy update failed [ 1139.222666][ T31] audit: type=1802 audit(1788325708.944:2956): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2911" res=0 errno=0 [ 1139.912465][ T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1140.043078][ T5690] usb 8-1: USB disconnect, device number 48 [ 1140.079996][ T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1140.088479][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.088503][ T9] usb 6-1: Product: syz [ 1140.088516][ T9] usb 6-1: Manufacturer: syz [ 1140.088529][ T9] usb 6-1: SerialNumber: syz [ 1140.157319][ T9] usb 6-1: config 0 descriptor?? [ 1140.364384][ T9] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 1140.452130][T16564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1140.475502][T16564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1140.489392][T16564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1140.503235][T16564] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1140.515180][T16564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1140.569752][ T9] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1140.569802][ T9] peak_usb 6-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 1142.612687][ T51] Bluetooth: hci5: command tx timeout [ 1142.655316][ T9] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1142.847996][ T9] usb 6-1: USB disconnect, device number 112 [ 1144.703011][ T51] Bluetooth: hci5: command tx timeout [ 1145.102403][ T5698] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1145.252832][ T5698] usb 6-1: Using ep0 maxpacket: 16 [ 1145.258956][ T5698] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1145.273231][ T5698] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.284247][ T5698] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.297321][ T5698] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.307365][ T5698] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1145.312428][T13106] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1145.328157][ T5698] usb 6-1: config 7 interface 0 has no altsetting 0 [ 1145.335934][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.432659][T15229] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1145.450324][T17382] busy [ 1145.463217][T13106] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1145.464282][T13106] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1145.464301][T13106] usb 7-1: config 1 has no interface number 0 [ 1145.477583][T13106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.477605][T13106] usb 7-1: Product: syz [ 1145.477617][T13106] usb 7-1: Manufacturer: syz [ 1145.477630][T13106] usb 7-1: SerialNumber: syz [ 1145.803822][T15229] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1145.890849][T15229] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 1145.890888][T15229] usb 10-1: config 1 has no interface number 0 [ 1145.957501][ T5698] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0043/input/input151 [ 1146.005879][T15229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.005920][T15229] usb 10-1: Product: syz [ 1146.005945][T15229] usb 10-1: Manufacturer: syz [ 1146.005962][T15229] usb 10-1: SerialNumber: syz [ 1146.358558][T17370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1146.393963][ T5698] kye 0003:0458:5010.0043: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 1146.416590][T15229] usb 10-1: 3:1 : does not exist [ 1146.416617][T15229] usb 10-1: 3:2 : does not exist [ 1146.585808][ T5711] usb 6-1: USB disconnect, device number 113 [ 1146.635530][T17329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.637390][T13106] usb 7-1: 3:1 : does not exist [ 1146.637415][T13106] usb 7-1: 3:2 : does not exist [ 1146.642850][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.642992][T17329] bridge_slave_0: entered allmulticast mode [ 1146.644157][T17329] bridge_slave_0: entered promiscuous mode [ 1146.657937][T17329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.658006][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.658133][T17329] bridge_slave_1: entered allmulticast mode [ 1146.665461][T17329] bridge_slave_1: entered promiscuous mode [ 1146.681579][T17390] fido_id[17390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1146.773160][ T51] Bluetooth: hci5: command tx timeout [ 1146.802562][ T5698] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1146.881351][T17377] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1146.930894][T13106] usb 7-1: USB disconnect, device number 48 [ 1146.932570][ T9] usb 10-1: USB disconnect, device number 14 [ 1146.943448][T17329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.946072][T17329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.986346][T17329] team0: Port device team_slave_0 added [ 1146.988494][T17329] team0: Port device team_slave_1 added [ 1147.008024][ T5698] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1147.019025][ T5698] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.019077][ T5698] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1147.019109][ T5698] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1147.019134][ T5698] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.019173][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.066334][T17329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.066350][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.066368][T17329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.069568][T17329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.069581][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.069601][T17329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.210541][T16048] udevd[16048]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1147.258223][T17329] hsr_slave_0: entered promiscuous mode [ 1147.260574][T17329] hsr_slave_1: entered promiscuous mode [ 1147.261439][T17329] debugfs: 'hsr0' already exists in 'hsr' [ 1147.261456][T17329] Cannot create hsr debugfs directory [ 1147.502575][ T32] INFO: task syz.4.2537:15883 blocked for m ** replaying previous printk message ** [ 1147.502575][ T32] INFO: task syz.4.2537:15883 blocked for more than 143 seconds. [ 1147.502616][ T32] Tainted: G L syzkaller #0 [ 1147.502659][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1147.502670][ T32] task:syz.4.2537 state:D stack:25208 pid:15883 tgid:15882 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 1147.502732][ T32] Call Trace: [ 1147.502742][ T32] [ 1147.502756][ T32] __schedule+0x1259/0x6920 [ 1147.502783][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1147.502820][ T32] ? __pfx___schedule+0x10/0x10 [ 1147.502840][ T32] ? find_held_lock+0x2b/0x80 [ 1147.502868][ T32] ? schedule+0x225/0x2c0 [ 1147.502894][ T32] schedule+0xdd/0x2c0 [ 1147.502915][ T32] schedule_preempt_disabled+0x13/0x30 [ 1147.502937][ T32] __mutex_lock+0xccb/0x1bd0 [ 1147.502966][ T32] ? write_versions+0x9d/0xba0 [ 1147.502995][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1147.503024][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1147.503048][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1147.503076][ T32] ? write_versions+0x9d/0xba0 [ 1147.503098][ T32] write_versions+0x9d/0xba0 [ 1147.503122][ T32] ? find_held_lock+0x2b/0x80 [ 1147.503150][ T32] ? __pfx_write_versions+0x10/0x10 [ 1147.503176][ T32] ? __pfx_write_versions+0x10/0x10 [ 1147.503202][ T32] ? _copy_from_user+0x59/0xd0 [ 1147.503234][ T32] ? __pfx_write_versions+0x10/0x10 [ 1147.503257][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 1147.511015][ T32] vfs_write+0x2aa/0x1050 [ 1147.511064][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1147.511090][ T32] ? lock_acquire+0x1d1/0x380 [ 1147.511110][ T32] ? __fget_files+0x34/0x3d0 [ 1147.511135][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1147.511164][ T32] ? find_held_lock+0x2b/0x80 [ 1147.511192][ T32] ? __fget_files+0x215/0x3d0 [ 1147.511221][ T32] ? __fget_files+0x21f/0x3d0 [ 1147.511252][ T32] ksys_write+0x12a/0x250 [ 1147.511272][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1147.511300][ T32] do_syscall_64+0x123/0x790 [ 1147.511327][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.511349][ T32] RIP: 0033:0x7f8ffd19e159 [ 1147.511368][ T32] RSP: 002b:00007f8ffe0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1147.511391][ T32] RAX: ffffffffffffffda RBX: 00007f8ffd425fa0 RCX: 00007f8ffd19e159 [ 1147.511406][ T32] RDX: 0000000000000009 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1147.511420][ T32] RBP: 00007f8ffd235024 R08: 0000000000000000 R09: 0000000000000000 [ 1147.511434][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.511448][ T32] R13: 00007f8ffd426038 R14: 00007f8ffd425fa0 R15: 00007ffda5f372c8 [ 1147.511475][ T32] [ 1147.511504][ T32] [ 1147.511504][ T32] Showing all locks held in the system: [ 1147.511517][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1147.511533][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1147.511628][ T32] locks held by getty/5359: 2, on CPU#1: [ 1147.511662][ T32] #0: ffff888037c3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1147.511727][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1147.511793][ T32] locks held by kworker/0:4/5698: 7, on CPU#0: [ 1147.511810][ T32] #0: ffff888021acd540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1147.511877][ T32] #1: ffffc90004a37d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1147.511943][ T32] #2: ffff88802c47c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1147.512009][ T32] #3: ffff8880370851d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1147.512066][ T32] #4: ffff88802cb941a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1147.512121][ T32] #5: ffffffff8fc51738 (drm_unplug_srcu){.+.+}-{0:0}, at: drm_dev_enter+0x53/0x170 [ 1147.512181][ T32] #6: ffff888042935c10 (&gdrm->ctrl_lock){+.+.}-{4:4}, at: gud_usb_transfer+0x15a/0x7a0 [ 1147.512246][ T32] locks held by kworker/u8:6/12123: 3, on CPU#1: [ 1147.512262][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1147.512362][ T32] #1: ffffc9000beffd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1147.512430][ T32] #2: ffffffff90ccf1c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1147.516043][ T32] locks held by syz.1.2285/14886: 3, on CPU#0: [ 1147.516060][ T32] #0: ffff88807c8ce0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1147.516852][ T32] #1: ffff88802ce4c460 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1147.516917][ T32] #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1147.516988][ T32] locks held by syz.4.2537/15883: 3, on CPU#1: [ 1147.517004][ T32] #0: ffff888075f7f7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1147.517065][ T32] #1: ffff88809f76a460 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1147.517127][ T32] #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 1147.517189][ T32] locks held by syz.8.2864/17148: 2, on CPU#0: [ 1147.517204][ T32] #0: ffffffff90d7e748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1147.517269][ T32] #1: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x203/0x410 [ 1147.517334][ T32] locks held by syz-executor/17329: 3, last CPU#1: [ 1147.517350][ T32] #0: ffffffff91453a08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1147.517415][ T32] #1: ffffffff90ccf1c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 1147.517469][ T32] #2: ffff8880a4778e70 (&dev->lock){+.+.}-{4:4}, at: gro_cells_init+0x21c/0x300 [ 1147.517537][ T32] locks held by syz.9.2925/17377: 2, last CPU#0: [ 1147.517553][ T32] #0: ffff88802d5bac18 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: folio_lruvec_lock_irqsave+0x2c/0x5f0 [ 1147.519489][ T32] #1: ffffffff9b997188 (&____s->seqcount#2){----}-{0:0}, at: __mem_cgroup_threshold+0x23/0x430 [ 1147.519558][ T32] locks held by syz.6.2933/17397: 1, on CPU#1: [ 1147.519573][ T32] #0: ffff888068c5c0a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_arch_destroy_vm+0x1ad/0x230 [ 1147.519636][ T32] locks held by syz.5.2935/17400: 1, on CPU#1: [ 1147.519669][ T32] #0: ffff88807c259d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1147.519727][ T32] locks held by syz.5.2935/17401: 4, last CPU#0: [ 1147.519742][ T32] #0: ffff88807c259d38 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 1147.519800][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 1147.519858][ T32] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2100 [ 1147.519917][ T32] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1147.519982][ T32] [ 1147.519990][ T32] ============================================= [ 1147.519990][ T32] [ 1147.520001][ T32] NMI backtrace for cpu 1 [ 1147.520015][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.520040][ T32] Tainted: [L]=SOFTLOCKUP [ 1147.520047][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1147.520059][ T32] Call Trace: [ 1147.520066][ T32] [ 1147.520073][ T32] dump_stack_lvl+0x100/0x190 [ 1147.520100][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1147.520127][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1147.520148][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1147.520182][ T32] sys_info+0x141/0x190 [ 1147.520204][ T32] watchdog+0xcb1/0x1030 [ 1147.520229][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1147.520248][ T32] ? __pfx_watchdog+0x10/0x10 [ 1147.520268][ T32] ? __kthread_parkme+0x18f/0x230 [ 1147.520291][ T32] ? kthread+0x13a/0x450 [ 1147.520314][ T32] ? __pfx_watchdog+0x10/0x10 [ 1147.520332][ T32] kthread+0x373/0x450 [ 1147.520355][ T32] ? __pfx_kthread+0x10/0x10 [ 1147.520380][ T32] ret_from_fork+0x730/0xd60 [ 1147.520401][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.520422][ T32] ? __switch_to+0x800/0x10f0 [ 1147.520446][ T32] ? __pfx_kthread+0x10/0x10 [ 1147.520471][ T32] ret_from_fork_asm+0x1a/0x30 [ 1147.520500][ T32] [ 1147.520522][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1147.520548][ C0] NMI backtrace for cpu 0 [ 1147.520561][ C0] CPU: 0 UID: 0 PID: 17377 Comm: syz.9.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.520581][ C0] Tainted: [L]=SOFTLOCKUP [ 1147.520586][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1147.520595][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0xe/0x20 [ 1147.520615][ C0] Code: ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe 07 00 00 00 e9 e8 fd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 1147.520629][ C0] RSP: 0018:ffffc9000dc5f310 EFLAGS: 00000246 [ 1147.520641][ C0] RAX: dffffc0000000000 RBX: ffffea00011c8f40 RCX: ffffffff8259dce7 [ 1147.520652][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1147.520662][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1147.520670][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffea00011c8f48 [ 1147.520679][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000000a [ 1147.520688][ C0] FS: 0000000000000000(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 1147.520703][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1147.520713][ C0] CR2: 0000001b2efefff8 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 1147.520722][ C0] Call Trace: [ 1147.520727][ C0] [ 1147.520732][ C0] folio_mapping+0x157/0x250 [ 1147.520746][ C0] truncate_cleanup_folio+0x11d/0x5d0 [ 1147.520767][ C0] truncate_inode_folio+0x3f/0x70 [ 1147.520786][ C0] shmem_undo_range+0x3ae/0x1570 [ 1147.520808][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1147.520835][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 1147.520857][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 1147.520874][ C0] ? find_held_lock+0x2b/0x80 [ 1147.520891][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 1147.520914][ C0] shmem_evict_inode+0x3b1/0xca0 [ 1147.520950][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1147.520969][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1147.520983][ C0] ? lock_acquire+0x1d1/0x380 [ 1147.520997][ C0] ? find_held_lock+0x2b/0x80 [ 1147.521015][ C0] ? evict+0x37e/0xad0 [ 1147.521032][ C0] ? evict+0x37e/0xad0 [ 1147.521050][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1147.521069][ C0] evict+0x3c2/0xad0 [ 1147.521085][ C0] ? fsnotify_grab_connector+0x4b/0x290 [ 1147.521107][ C0] ? __pfx_evict+0x10/0x10 [ 1147.521124][ C0] ? lock_acquire+0x1d1/0x380 [ 1147.521139][ C0] ? iput.part.0+0x981/0x1050 [ 1147.521159][ C0] iput.part.0+0x989/0x1050 [ 1147.521178][ C0] iput+0x35/0x40 [ 1147.521195][ C0] dentry_unlink_inode+0x284/0x470 [ 1147.521213][ C0] dentry_kill+0x25d/0xc20 [ 1147.521233][ C0] dput.part.0+0xd7/0x240 [ 1147.521251][ C0] dput+0x1f/0x30 [ 1147.521268][ C0] __fput+0x519/0xb50 [ 1147.521285][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1147.521306][ C0] task_work_run+0x150/0x240 [ 1147.521324][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1147.521343][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1147.521361][ C0] do_exit+0x951/0x2ae0 [ 1147.521379][ C0] ? __pfx_do_exit+0x10/0x10 [ 1147.521395][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1147.521411][ C0] ? find_held_lock+0x2b/0x80 [ 1147.521428][ C0] ? get_signal+0x7e0/0x21e0 [ 1147.521443][ C0] do_group_exit+0xd5/0x2a0 [ 1147.521465][ C0] get_signal+0x1ec7/0x21e0 [ 1147.521482][ C0] ? putname+0xb1/0x110 [ 1147.521498][ C0] ? __pfx_get_signal+0x10/0x10 [ 1147.521513][ C0] ? do_futex+0x190/0x440 [ 1147.521532][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1147.521551][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1147.521572][ C0] ? __x64_sys_openat+0x12d/0x210 [ 1147.521592][ C0] exit_to_user_mode_loop+0x139/0x700 [ 1147.521608][ C0] ? rcu_is_watching+0x13/0xc0 [ 1147.521626][ C0] do_syscall_64+0x661/0x790 [ 1147.521642][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.521658][ C0] RIP: 0033:0x7f629dd9e159 [ 1147.521669][ C0] Code: Unable to access opcode bytes at 0x7f629dd9e12f. [ 1147.521675][ C0] RSP: 002b:00007f629ec490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1147.521688][ C0] RAX: fffffffffffffe00 RBX: 00007f629e025fa8 RCX: 00007f629dd9e159 [ 1147.521704][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f629e025fa8 [ 1147.521713][ C0] RBP: 00007f629e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.521722][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.521731][ C0] R13: 00007f629e026038 R14: 00007ffefdcb1570 R15: 00007ffefdcb1658 [ 1147.521745][ C0] [ 1147.536435][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1148.760666][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.771342][ T32] Tainted: [L]=SOFTLOCKUP [ 1148.775668][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1148.785730][ T32] Call Trace: [ 1148.789013][ T32] [ 1148.791961][ T32] dump_stack_lvl+0x100/0x190 [ 1148.796650][ T32] vpanic+0x553/0x970 [ 1148.800638][ T32] ? __pfx_vpanic+0x10/0x10 [ 1148.805155][ T32] panic+0xd1/0xe0 [ 1148.808881][ T32] ? __pfx_panic+0x10/0x10 [ 1148.813302][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1148.819465][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1148.825628][ T32] ? watchdog.cold+0x1ec/0x234 [ 1148.830394][ T32] watchdog.cold+0x1fd/0x234 [ 1148.834988][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1148.840796][ T32] ? __pfx_watchdog+0x10/0x10 [ 1148.845477][ T32] ? __kthread_parkme+0x18f/0x230 [ 1148.850510][ T32] ? kthread+0x13a/0x450 [ 1148.854759][ T32] ? __pfx_watchdog+0x10/0x10 [ 1148.859417][ T32] kthread+0x373/0x450 [ 1148.863468][ T32] ? __pfx_kthread+0x10/0x10 [ 1148.868047][ T32] ret_from_fork+0x730/0xd60 [ 1148.872614][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1148.877700][ T32] ? __switch_to+0x800/0x10f0 [ 1148.882359][ T32] ? __pfx_kthread+0x10/0x10 [ 1148.886933][ T32] ret_from_fork_asm+0x1a/0x30 [ 1148.891704][ T32] [ 1148.894915][ T32] Kernel Offset: disabled [ 1148.899226][ T32] Rebooting in 86400 seconds..