last executing test programs: 3m14.952715835s ago: executing program 2 (id=130): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r7, 0x1000004, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xa, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x23, '\x00', r6, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x5, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x10}, {0x0, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x4, 0x4}, {0x3, 0x3, 0xb, 0xc}, {0x0, 0x2, 0x5, 0xa}], 0x10, 0x2c000}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 3m13.948624771s ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xc3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 3m13.356369682s ago: executing program 2 (id=134): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000d00010400000040000002007ad95d857600005c0000000000000008000000eaff0000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000063117c00000000008510000002000000850000002300000095000000000000009500a50500000000c44b1defc554982be068738cdaa6a11d8b19eed281f8068f17615104b8aeb47338e4053308b6fc684c46dc6575beccc991af6e0ada0e581e185c6f635675af6cc32536cb69e8de4248c0fd42d60fa34adc1ba2afcca512d3b20f410452c9a40dde5140a4df40def2017194981e95c48d597ed3013ff3a629768bc3192132ebfadad2b9a9a61add0f89"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x109400) io_setup(0x5, &(0x7f00000003c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r6, 0xbda}, 0x8) 3m11.77351022s ago: executing program 2 (id=140): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) sendmsg$alg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="c3b9da367494632152ddef80ad5e75af", 0x10}], 0x1, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(r4, 0x0, &(0x7f0000000740)) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x44045) r6 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xd, 0x20002ff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 3m11.318330608s ago: executing program 2 (id=142): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x2) socket(0x2, 0x80805, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x10, 0x180) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) 3m10.92474899s ago: executing program 2 (id=145): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) (async) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00334788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 3m10.614516943s ago: executing program 32 (id=145): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) (async) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00334788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 2m44.913931471s ago: executing program 5 (id=235): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2m44.464322035s ago: executing program 5 (id=237): writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018015000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) 2m44.261167833s ago: executing program 5 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000\"N000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc1105511, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e50226d2", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x83, 0x40, 0x8, 0x0, 0x0, 0x0, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYBLOB="0600060000000000060004000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x24000805) 2m41.723874621s ago: executing program 5 (id=247): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x8, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1000000, 0x5, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x4, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fe800, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x8, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x4, 0x2, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec2, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) socket(0x40000000015, 0x5, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x8, 0x7d, 0xfffffffffffffffd, 0x5, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r7 = io_uring_setup(0xaa7, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x8, 0x0, 0x225}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000002280), r9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="5bf627bd7000fddbdf251000000706001100f102000008000100", @ANYRES32=0x0, @ANYBLOB="0500100003000000"], 0x2c}}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x2300000000000017, &(0x7f00000002c0), 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0100e00080211000001080211000000505050505050730018008c108302726712ea1b02acf28009ddef7a20"], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) dup(r3) 2m40.528603957s ago: executing program 5 (id=250): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x2010, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="08f64fd5252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newneigh={0x38, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, r5, 0x20, 0xa6, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0x16, 0xfffeffff, 0x2, 0x4}}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044090}, 0x40090) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="e80d0200000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b15, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x2010, r1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="08f64fd5252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5}, 0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newneigh={0x38, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, r5, 0x20, 0xa6, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0x16, 0xfffeffff, 0x2, 0x4}}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044090}, 0x40090) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="e80d0200000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$EVIOCGMASK(r7, 0x5b15, 0x0) (async) 2m37.122707063s ago: executing program 5 (id=258): prlimit64(0x0, 0x4, &(0x7f00000002c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x5, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448df, &(0x7f0000000500)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6829bdcb0491000004ecffff1100800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a010300000000000000000a00000920000000020a01110000"], 0x5c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000001c0)=0xfffffff9, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="0497cd50fd2410fe23559dc7ebebf5f2263303a304b0c3d69c1df7cb9eef7e0fbe87466b99aa0de9f8f2515f30ec89e229360ab11e69d3c2b66ac0089c49c413f2a0ab7acf936b0ae666ec1a447c44d5dc6a811b962932602753a6982ea1e57c0e1fc10dee55fe12497e2f987b52530d579838cd6eb3cfd70400f15b60060d59d366a0f5bb3c6f32f5a171f9d50aea5094a2f03003f98ca0ab0e22fbde3f50", @ANYRES64=0x0], 0x10) r9 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x9, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcf5, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x2000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x201, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4000, 0x20000000, 0x0, 0x0, 0xa2b1, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0xfffffffd, 0x0, 0xdffffffc, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0xffffffffffffffff, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0xc0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) 2m21.593758431s ago: executing program 33 (id=258): prlimit64(0x0, 0x4, &(0x7f00000002c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x5, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448df, &(0x7f0000000500)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6829bdcb0491000004ecffff1100800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a010300000000000000000a00000920000000020a01110000"], 0x5c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000001c0)=0xfffffff9, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="0497cd50fd2410fe23559dc7ebebf5f2263303a304b0c3d69c1df7cb9eef7e0fbe87466b99aa0de9f8f2515f30ec89e229360ab11e69d3c2b66ac0089c49c413f2a0ab7acf936b0ae666ec1a447c44d5dc6a811b962932602753a6982ea1e57c0e1fc10dee55fe12497e2f987b52530d579838cd6eb3cfd70400f15b60060d59d366a0f5bb3c6f32f5a171f9d50aea5094a2f03003f98ca0ab0e22fbde3f50", @ANYRES64=0x0], 0x10) r9 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x9, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcf5, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x2000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x201, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4000, 0x20000000, 0x0, 0x0, 0xa2b1, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0xfffffffd, 0x0, 0xdffffffc, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0xffffffffffffffff, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0xc0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) 14.965858664s ago: executing program 0 (id=653): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x3, 0x9, 0x0, 'queue1\x00', 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$nfs4(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$inet(r6, &(0x7f00000003c0), &(0x7f0000000400)=0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 12.10956763s ago: executing program 4 (id=667): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f000000010000", 0x7) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'z', 0x20, 0xffd}, 0x28, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000084c052f040000000000010902a82101000080080904005f020300020009210100030122a800090581030004030701"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \"('], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11012, r10, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 11.784180041s ago: executing program 0 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc1105511, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e50226d2", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) memfd_create(&(0x7f00000000c0)='=\x00', 0x2) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x83, 0x40, 0x8, 0x0, 0x0, 0x0, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYBLOB="0600060000000000060004000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x24000805) 10.262470405s ago: executing program 6 (id=674): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 9.2252848s ago: executing program 6 (id=675): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xffffffa4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000226000/0x1000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f000005a000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000004c000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xfff1}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r0) 8.908658402s ago: executing program 6 (id=676): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 8.743674963s ago: executing program 6 (id=677): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) syz_extract_tcp_res(0x0, 0x80000000, 0xd) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="10", 0x1, 0xdc1227e323c3a629, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000004400)={0x9, @win={{0x1, 0x3, 0x48, 0x4}, 0x5, 0xe, 0x0, 0x1, 0x0, 0x3}}) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5319, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r7, 0x43403d0e, &(0x7f0000000140)) setsockopt$inet_tcp_int(r6, 0x6, 0x2a, &(0x7f0000000040)=0xce, 0x4) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltclass={0x8d8, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x7, 0xd}, {0xb, 0x7}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_cbq={{0x8}, {0x894, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x3, 0xc, 0x0, 0x2e, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x6, 0x9f9f, 0xa8, 0x5, 0xa0, 0x7, 0x8, 0x1, 0x35, 0x2, 0x2, 0x10000000, 0x1, 0x8, 0x7f, 0x7ff, 0xfb, 0x9, 0x7, 0x9, 0x1, 0x6, 0x4, 0x9, 0x4, 0x7fff, 0x1, 0x10000, 0xe1, 0x341, 0x8000, 0x5, 0x5, 0x4ec1, 0x1, 0x8, 0x2, 0x1, 0x80, 0x3f, 0x10001, 0x64aa, 0x4, 0x0, 0x661a, 0xcc, 0x7, 0x3, 0xfff, 0x1ff, 0x80000001, 0x5, 0x3, 0xd, 0x0, 0x7, 0x2, 0x9, 0xd, 0x0, 0x1783, 0xfffffff9, 0x9, 0x9, 0x5, 0xfff, 0x4, 0x7ee, 0x5, 0xf144, 0xfff, 0x6, 0x8, 0x6, 0x2, 0xe2e327cc, 0xd3e5afa, 0x6, 0x1000, 0x0, 0x5, 0xcac, 0xe8, 0x9, 0x3967, 0xf25, 0x0, 0x7, 0x1, 0xfffffffb, 0x6, 0x0, 0x1, 0x8000, 0x4, 0x5, 0xa, 0x6, 0x0, 0x4, 0x1000, 0x10000, 0xfff, 0xd, 0x3, 0xc, 0x220b, 0x7fffffff, 0x4, 0xfffffffb, 0x3ff, 0x80000000, 0x4851, 0x6, 0x40, 0x9, 0x8, 0x62, 0x6, 0x7, 0x8, 0x3, 0x12, 0x0, 0x81, 0x71cb, 0xf671, 0x7f, 0x8, 0xffffffff, 0x4, 0x2, 0x401, 0x2, 0x0, 0x10001, 0xe26, 0x0, 0xd, 0x5, 0xf, 0x3, 0x8, 0xfffff801, 0x6, 0x2, 0x8, 0x0, 0x6dd9, 0x19e6000, 0x4f, 0x95, 0xb0, 0x7f, 0x1, 0xd4, 0x9, 0x3, 0xd072, 0xa, 0x1, 0x400, 0x3, 0x6, 0x5, 0x1, 0x729a, 0x9, 0x6, 0x7, 0xd7d, 0x5, 0x6, 0x8, 0xc, 0xf707, 0x7, 0x6, 0x7d, 0xe6, 0x1, 0xfff, 0x0, 0x8, 0x5898, 0x9, 0xe, 0x4, 0x3, 0x7fff, 0xffffffff, 0x6, 0x6, 0x6, 0xf1, 0x2, 0x88, 0x9, 0x1, 0x6, 0x5, 0xa, 0x8, 0x401, 0x2, 0x498a, 0x7, 0x7, 0x8001, 0x32, 0x7, 0x3, 0x27, 0x3, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x4, 0x53a, 0x0, 0xd, 0x81, 0xe0ce, 0x0, 0x1, 0x4, 0x3, 0x0, 0x7, 0x1f, 0x0, 0x3, 0x2, 0x2, 0x9, 0x6, 0x1200000, 0x1ff, 0x8, 0x3, 0x1ff, 0x4, 0x9, 0x1, 0xb, 0xfffffff9, 0x6, 0x3, 0x3, 0x7f, 0x2, 0x7, 0x8]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x9}, 0x1, 0x3}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xffff}, 0x8, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x401, 0x4, 0x8, 0x6, 0x9, 0x7, 0x5, 0xfffffffd, 0x5, 0x56, 0xc8, 0xfffffffc, 0xc1, 0x8, 0x4, 0x1, 0x5, 0x6, 0x9f8, 0xc9d7, 0xe, 0x3, 0xca, 0x3a, 0x3, 0xb, 0xc2c5, 0xe, 0x1000, 0x7, 0x6, 0x6, 0x8, 0x0, 0x0, 0x9, 0x0, 0x9, 0x6, 0x8, 0x1, 0x7, 0x5, 0x1ff, 0x6, 0x3, 0xffff, 0x5, 0xfffffffe, 0x6, 0x6, 0x8, 0xffff7fff, 0xfffffffc, 0x1, 0x7, 0x2, 0x7f, 0x6, 0x0, 0x101, 0x1000, 0x7, 0xaf, 0x2, 0x6, 0xf, 0xffffffff, 0xa, 0x9, 0x4, 0xff, 0xa94d, 0x1, 0x4, 0x8, 0x5, 0x8558, 0x9, 0x43, 0x33, 0x180000, 0x9b, 0x410, 0x1, 0x1, 0x3, 0xb54, 0x6, 0x6, 0x7, 0xffff, 0x9fdd, 0x7fff, 0x7fff, 0x5, 0x3, 0xffff0902, 0x4, 0x2, 0x1, 0x1, 0x4, 0x249, 0x1a0a, 0x9, 0x0, 0x4, 0x1, 0x49, 0x7b5b59f5, 0x5, 0x3, 0xa249, 0xe, 0x6, 0x0, 0x7, 0x9, 0x7, 0xff, 0x100, 0x2, 0x8, 0xfffffffa, 0x5d8b, 0x5, 0x61a, 0x10000, 0x0, 0x3ff, 0x1ff, 0x1, 0x401, 0x7, 0x7, 0x22505879, 0x6, 0x8, 0x9, 0xf72, 0xfffffff9, 0x7, 0x1, 0x1, 0x80000001, 0xffff9969, 0x9, 0xf138, 0xffffffff, 0x4, 0x1, 0xa91, 0x2a4, 0x7ff, 0x6, 0x1d0c8795, 0x4, 0x4, 0x800, 0xfffffff8, 0x59e, 0x0, 0x10000, 0x1, 0xfffffffc, 0x7, 0x5, 0xffff, 0x9, 0x3, 0x9afa, 0x3, 0x7, 0xfffffffc, 0x2, 0x9, 0x80, 0x80, 0x4a8, 0x7f, 0xb2, 0x80000000, 0xb, 0x8, 0x6, 0x8, 0x0, 0x800, 0x3a9, 0x9, 0x3, 0x113a, 0xc04, 0x6e, 0x303c, 0x0, 0x7, 0x4, 0x711a, 0x3, 0xffff8001, 0x2, 0xbe, 0x8, 0xfffffff8, 0x5, 0x7, 0x7, 0x33a6, 0x4, 0xffff, 0x1, 0x8210, 0x7, 0x7, 0x639, 0x2, 0x9, 0x4, 0x4, 0x369a, 0xfffffffc, 0x6, 0x80, 0x1000, 0xd, 0x3, 0x7fff, 0x6, 0x2, 0x1, 0x7, 0xc1a7, 0x9, 0x8f5b, 0x9, 0xa, 0x9, 0x53, 0x87, 0x3, 0x3, 0x6, 0x80000001, 0x10, 0x0, 0x6, 0x4, 0x8, 0x8, 0x1, 0xc0000000, 0x3, 0x8, 0x7]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x4, 0xb6, 0x3, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x34, 0x0, 0x1f, 0x3, 0x9, 0xffff, 0xf, 0x63}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x7, 0xb, 0x5, 0x8, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf1, 0x0, 0x3, 0x3, 0xffff, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x7}, 0xd9, 0x4}}]}}]}, 0x8d8}}, 0x4000050) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000fc0)={0x0, &(0x7f0000000ac0)=[@nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x46, 0x4, 0x1, 0x7fffffffffffffff}}, @in_dx={0x69, 0x20, {0x7a22}}, @cpuid={0x64, 0x18, {0x40, 0x3ff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c03, 0xe4b, 0xfffffffffffffffe, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x6, 0xa39}}, @wr_crn={0x67, 0x20}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0xc4b9}}, @uexit={0x0, 0x18, 0x100000000}, @nested_load_code={0x12e, 0x81, {0x1, "b9690a00000f32c4c2692f7f1366b829008ed00f20e035000001000f22e0c4a2ad8e5bee0f01c548b83b660000000000000f23d80f21f835800000100f23f8f75d69c744240091000000c7442402697f0000ff2c2466baf80cb85844d28bef66bafc0cb80d400000ef"}}, @wr_drn={0x68, 0x20, {0x4, 0x6}}, @nested_load_syzos={0x136, 0x13f, {0x2, 0x2, [@wrmsr={0x65, 0x20, {0x8c7}}, @in_dx={0x69, 0x20, {0xb78, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x8969, 0x1, 0x675}}, @code={0xa, 0x6f, {"f43e2e67f30f1efa66ba4000b8a372400defc403f917d6f9c744240014faf1dbc744240267000000c7442406000000000f011c24b8010000000f01c1c442690299f19670b70f20e035004000000f22e0450f786fd8260ffa9cae04000000"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xa95c, 0x5, 0x8}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x96, 0x0, 0x6, 0x3}}, @rdmsr={0x66, 0x18, {0x619}}, @uexit={0x0, 0x18, 0xd63}, @nested_load_syzos={0x136, 0xe0, {0x0, 0x4, [@nested_amd_invlpga={0x17d, 0x20, {0x54004, 0x5189}}, @rdmsr={0x66, 0x18, {0x63b}}, @uexit={0x0, 0x18, 0x4b}, @out_dx={0x6a, 0x28, {0xc012, 0x2, 0xd9fa}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x5}, @nested_create_vm={0x12d, 0x18, 0x2}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc02, 0x100, 0x8000000000000001, 0x8000000000000000}}, @cpuid={0x64, 0x18, {0x7a9f, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}], 0x4e8}) ioctl$OCFS2_IOC_INFO(r8, 0x80106f05, &(0x7f0000000080)={&(0x7f0000005640)=[&(0x7f0000000000)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000000040)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000001000)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xc}, &(0x7f0000001140)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001180)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f00000011c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000001200)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000001240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000005840)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0xa}, &(0x7f0000001300)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0xb}, &(0x7f0000001440)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000001480)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000001500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000001540)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x8}, &(0x7f0000001680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000016c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, 0x0, &(0x7f0000001740)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000001780)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000017c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000001800)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000001840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000001880)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f00000018c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, 0x0, &(0x7f0000001940)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x6ef897319a218af7}, [{0x7fff, 0x474fe2ba}, {0x1, 0xfff}, {0x6, 0x6a}, {0x7f, 0x1}, {0x6, 0x8}, {0x6, 0xdfe}, {0x81, 0x9}, {0x9, 0x7f6}, {0x942a, 0x5}, {0xcad8710, 0x6f}, {0x4, 0x5}, {0xb7b, 0xfb}, {}, {0x1000, 0x9c}, {0x5}, {0x7, 0xf8}, {0x1c7175b3, 0x2}, {0x5, 0xb4}, {0x8000, 0x1}, {0xfffffffffffffffa, 0x6}, {0xfffffffffffffffe, 0x8}, {0x7, 0x7ff}, {0x3, 0x4}, {0xc60c, 0x5}, {0x10, 0x7ff}, {0x5, 0x3}, {0x100, 0x7fffffffffffffff}, {0x9, 0xfffffffffffffff8}, {0x400, 0x100000001}, {0x0, 0x79e4}, {0xaaac, 0x9}, {0x1000, 0x5}, {0xfffffffffffffff7, 0x410b}, {0x7, 0xfffffffffffffffe}, {0x8000000000000001, 0x8}, {0xc219}, {0x9, 0x6}, {0x53d0000000000000, 0xff}, {0x3, 0x9}, {0x3ff, 0x7}, {0xe, 0x100000000}, {0x8000, 0xfffffffffffff05e}, {0x8, 0x7}, {0x8000000000000001, 0x8}, {0xc8ea, 0x7f}, {0xfffffffffffffffd, 0x7fffffff}, {0x1, 0xbc}, {0x7, 0x8}, {0x8, 0xffffffff}, {0xf9}, {0xfffffffffffffffd, 0x314963d3}, {0x2, 0x9}, {0x3, 0x3}, {0x5e, 0xcf7}, {0x9, 0x4}, {0x80000000, 0x5}, {0x0, 0xc}, {0x0, 0x6}, {0x8, 0x3f65}, {0x10001, 0x1}, {0x8, 0xa}, {0x4, 0x8}, {0x2, 0x7f}, {0x9, 0x6}, {0x5, 0x2}, {0xbba6, 0x5}, {0xffffffffffffffff, 0x1}, {0x4, 0x2}, {0x3, 0x10}, {0xf44e, 0xf12}, {0x100000000, 0x4}, {0x6, 0x57d6276}, {0x4, 0x80000000}, {0xe}, {0x1, 0x10}, {0x3, 0x4}, {0xfffffffffffffff8}, {0x6, 0x8}, {0xfffffffffffff001, 0xfffffffffffffff7}, {0x1, 0x400}, {0x6, 0x3}, {0x7ff}, {0x800, 0x9}, {0xfffffffffffff726, 0x5}, {0x6eb77ee9, 0xfffffffffffffffa}, {0x7, 0x8}, {0x0, 0xc}, {0x1, 0x101}, {0x6, 0x8}, {0x2, 0x1ff}, {0x6, 0x5ddf9f95}, {0x400, 0x6}, {0x8}, {0x80, 0x7fffffff}, {0x1f, 0x7}, {0x3, 0x3}, {0xfffffffffffffbb1, 0x4}, {0x9, 0x10}, {0x7ff, 0x11b}, {0x5, 0xfffffffffffff473}, {0x10000, 0x7}, {0x8, 0x1}, {0x101, 0x9}, {0x7, 0x5}, {0x8, 0x2}, {0x9, 0x7000000000}, {0x7}, {0x40, 0x3bc}, {0x6f, 0x100000000}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0xffffffff00000000}, {0x7fffffff}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0x8698}, {0xb, 0xffffffff80000001}, {0x8000}, {0x3c24, 0x3a}, {0xc9be, 0x4}, {0x4, 0x5b}, {0x6, 0xffffffff8d196f64}, {0x100000001, 0x9}, {0x8001, 0x4}, {0xfffffffffffffff9, 0x7}, {0x1000, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x5}, {0x0, 0xfffffffffffffffc}, {0x6, 0xbd0f}, {0x6, 0x1}, {0x6, 0x400}, {0xce, 0x8}, {0x7}, {0x3, 0xff}, {0x800, 0x4}, {0x8, 0x3}, {0x9, 0xad26}, {0xc77, 0x1000}, {0x400, 0x9}, {0xffffffff80000000, 0xbba1}, {0xfffffffffffffffd, 0x1}, {0x9ea, 0x7fffffff}, {0x4, 0xd}, {0xfffffffffffff1b8, 0xa}, {0x3eaae939, 0x5}, {0x1, 0x4}, {0x81, 0x100000000}, {0x7, 0x235a}, {0x8, 0x7}, {0x7, 0x4}, {0xad1c, 0x4}, {0xc3, 0x264}, {0x8, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x4c2, 0x2}, {0x734, 0x6}, {0x2, 0x67}, {0x4, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x9, 0x6}, {0x2, 0xa5}, {0x4, 0x2}, {0x4, 0x8}, {0xffffffffffff172b}, {0x3, 0x400}, {0x401, 0x3fb0}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0xb}, {0x8000000000000000, 0x3}, {0x10, 0x7}, {0x401, 0x9}, {0xd1fa, 0x9905}, {0x8, 0xfe}, {0xf, 0x4}, {0x1, 0x7}, {0x8000000000000001, 0x6}, {0x6, 0x3bf0}, {0x2, 0xb02}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x100000001, 0x9}, {0x9, 0x3}, {0x10001, 0xf4}, {0x5}, {0xe3f, 0x81}, {0x30, 0xd}, {0x1, 0x7}, {0x0, 0x134}, {0xa4, 0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x7ff, 0x9}, {0x7732, 0x9}, {0x800, 0x9}, {0x200}, {0xcc, 0xb}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0xa, 0x1000}, {0xfffffffffffff800, 0x8000000000000001}, {0x2, 0x2}, {0x1, 0x7f}, {0x1, 0x2}, {0x80000000000000, 0x80000001}, {0x5, 0x930}, {0x9, 0x8}, {0xa, 0x2}, {0x5, 0x817}, {0x401, 0x7}, {0x9, 0x3}, {0xfffffffffffffb7c, 0xffffffffffffffff}, {0x6, 0x3fe0000}, {0x3, 0x1}, {0x8, 0x2}, {0x8, 0x9}, {0x100, 0x9}, {0x8, 0x8000}, {0x2, 0x2000000000000}, {0x20, 0x100}, {0x7, 0x4}, {0x5, 0x9}, {0x17ab, 0x18}, {0x6, 0xa781}, {0x3, 0x7}, {0xd, 0x8}, {0x1, 0x80}, {0x2bb, 0x9653}, {0x7ff, 0x3ff}, {0x0, 0x4}, {0x4, 0x28000}, {0x800, 0x9}, {0x100000001, 0x100000000}, {0x8, 0x10000}, {0x4, 0xaa}, {0x1, 0x2}, {0x8000000000000000, 0x4b}, {0x80000000000, 0xba0}, {0x3, 0x2}, {0x43, 0xfffffffffffffffa}, {0xe, 0xfffffffffffffff8}, {0x2, 0x6}, {0x99ae, 0x4e8}, {0xfffffffffffffff9, 0x5}, {0x1, 0x101}, {0x0, 0xfff}, {0x3ff, 0x3}, {0xffffffffffffffff, 0x401}]}, &(0x7f0000002980)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000029c0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000002a00)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0xfffffffa}, &(0x7f0000002b80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x1bb9}, &(0x7f0000002cc0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000002d00)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000002d80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002dc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002e00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0xa}, &(0x7f0000002f40)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000002f80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x3}, &(0x7f00000030c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003100)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000003180)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f00000031c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0xfffffffffffffffe, 0x2}, {0x200, 0x800}, {0x40, 0x1}, {0x7}, {0x40, 0xfffffffffffffff8}, {0xfffffffffffffff9, 0xff}, {0x4d, 0x200}, {0xfffffffffffffffb, 0x7}, {0x0, 0x3ff}, {0x6}, {0x2}, {0x5, 0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x36, 0x3ea}, {0x0, 0x8000000000000001}, {0x77f, 0x7d}, {0x8, 0x4}, {0x0, 0xffffffffffffff81}, {0x1, 0x7}, {0x7, 0x3}, {0xfffffffffffffff9, 0xda4}, {0x4, 0x5}, {0x8000000000000000, 0xfff}, {0x2, 0x8}, {0xc0000000, 0x367b9ab7}, {0x10, 0x4}, {0x9, 0x80000001}, {0x8, 0xff}, {0xb65, 0x8}, {0x3, 0x8}, {0x3, 0x7f}, {0x2, 0xffffffffffffffc}, {0x3, 0x1}, {0x200, 0x6}, {0x9, 0x8}, {0x3}, {0x9, 0x3}, {0x8, 0x1000}, {0x0, 0x4}, {0x8000000000000000, 0xfff}, {0x10000, 0x9}, {0x7, 0x8}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x2, 0x7}, {0x8000000000000000, 0xd14e000000000000}, {0x8, 0x1}, {0x7, 0x5}, {0x3b, 0x3}, {0x7, 0x7fffffff}, {}, {0x0, 0x88}, {0x7f, 0xfffffffffffffffe}, {0x8, 0xffffffffac70cf32}, {0x2, 0x4}, {0x9, 0x8001}, {0x0, 0x9}, {0x7, 0x8}, {0xffff, 0x8}, {0x1, 0x5ab}, {0x6, 0x7ff}, {0x0, 0x100000000}, {0x625, 0x7}, {0x8, 0x100000000}, {0x7, 0x2ddf}, {0x0, 0x100000000}, {0x6, 0x3}, {0x7, 0x777}, {0x1, 0xffffffff7fffffff}, {0x1000, 0xffff}, {0x8, 0x6}, {0x4, 0x7}, {0x401, 0x1}, {0x7fff, 0x3}, {0x80000000, 0x40}, {0x2, 0x38}, {0x6, 0xfffffffffffffff9}, {0xfff, 0x1ff}, {0x7, 0xb06}, {0x3, 0xf}, {0x200, 0x2}, {0x7, 0x7}, {0x745, 0x1}, {0x5, 0x3ff}, {0x5, 0xbd9a}, {0xffffffff, 0x70}, {0x7, 0x9}, {0x5, 0xabf}, {0x401, 0xbbc}, {0x8}, {0xfffffffffffffff8, 0x7fffffffffffffff}, {0x3, 0x8}, {0x1, 0x7}, {0xfffffffffffffb9c}, {0xfffffffffffffffa, 0x1000000001}, {0xc020000000000000, 0x40}, {0x8, 0x10000}, {0x4, 0x6}, {0x7, 0x80}, {0x5, 0x101}, {0x1, 0x2}, {0x1, 0x8001}, {0x101, 0x6}, {0x72, 0x10000}, {0x100, 0x10001}, {0x457874bd}, {0x9, 0x3ff}, {0x81, 0x101}, {0xffffffffffffb4fd, 0x7}, {0x1, 0xc70f}, {0x7f, 0x6}, {0x5, 0x7}, {0x4, 0x4f}, {0x0, 0x6e0c2b99}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0xf, 0x8}, {0x100, 0x3}, {0x1, 0x98}, {0x9, 0xb3}, {0xd, 0x10001}, {0x4, 0x29}, {0x101}, {0x0, 0x8}, {0x4, 0x7}, {0x8537, 0x25}, {0x0, 0xd}, {0x1, 0xd07}, {0x5, 0x8001}, {0x7d7c2cb2, 0x95ce}, {0x12b61f95, 0x7}, {0x9, 0x6}, {0x4e9, 0x7fffffff}, {0x605a, 0x9}, {0x7f, 0xecd3}, {0x7fffffff, 0x9}, {0x1, 0xfb2}, {0x8, 0x4}, {0x7, 0x4}, {0x5456, 0xe5}, {0xc, 0x9}, {0x3ff, 0x87}, {0x2, 0x7}, {0x9, 0x4}, {0xea3, 0x6}, {0x2, 0x1}, {0x7f, 0x2}, {0x81, 0x34}, {0x2, 0x9}, {0xa00, 0x100}, {0x5a64, 0x3}, {0x8000000000000000, 0x3}, {0x6, 0x40}, {0x33, 0x3}, {0x1, 0xb8c3}, {0x8, 0x5}, {0x56be, 0x5}, {0xad4, 0xff}, {0xd950, 0x4}, {0x3, 0x4}, {0x1ff, 0x10001}, {0xbd, 0x161}, {0x9, 0x4}, {0x8, 0x7}, {0x9, 0xef47}, {0x40, 0x5}, {0x5, 0x5}, {0x3, 0x40000000}, {0x0, 0x8}, {0x9, 0x8}, {0x8, 0x10000}, {0xf7, 0x9}, {0xa, 0x7}, {0x2ef, 0x6}, {0x0, 0x3}, {0x9, 0xfffffffffffffffe}, {0x2, 0x8}, {0x80, 0x380000}, {0x7, 0x9}, {0xfffffffffffffff8, 0xfb}, {0x9, 0x1}, {0x3, 0x9}, {0x8000000000000000, 0x5}, {0x800, 0xea3}, {0xae27, 0x5}, {0x6, 0x5}, {0x400, 0x8}, {0x7, 0x8}, {0x4, 0x240}, {0xe554, 0x9}, {0x1, 0x7581414d}, {0x4}, {0x7ff, 0xf9}, {0x0, 0x3}, {0xcb4, 0x9}, {0x40, 0x2}, {0x6, 0x1}, {0x6, 0x101}, {0xbee, 0xe}, {0x1ff, 0x7}, {0xfffffffffffffff7, 0x9}, {0x6, 0x100}, {0x100000000, 0x319}, {0x154a1e82, 0x7}, {0x1, 0x7fffffffffffffff}, {0xbbfd, 0xcf}, {0x7, 0xffffffffffffe4e7}, {0x0, 0x4}, {0x69c, 0x5}, {0x200, 0x4}, {0x100, 0x9b}, {0x3, 0x1}, {0x10000, 0x3}, {0xb376, 0x5}, {0x3, 0x80000001}, {0x8, 0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x0, 0x401}, {0xb}, {0x40, 0x48}, {0x3, 0x677}, {0x9, 0x8000000000000001}, {0xe, 0x8}, {0x80, 0x3}, {0x2f, 0x7fffffffffffffff}, {0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x69c, 0xffffffffffffffff}, {0x9, 0x8c5}, {0x7, 0x7}, {0x7, 0x7ff}, {0x3, 0x6}, {0x10001, 0x2b30000000000}, {0x6, 0x4}, {0x564a, 0x40}, {0x8, 0x4}, {0x5a000000000, 0x9}, {0xab4, 0x4}, {0x1997}, {0xd, 0x800}, {0x8000000000000001, 0x8}, {0xc, 0xc5b}, {0x7, 0x3}, {0x81, 0x100000000}, {0x3f, 0x8}, {0x3, 0x1}, {0x1eb5, 0x4}, {0xfffffffffffffffd, 0x5}]}, &(0x7f0000004200)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000004240)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004280)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f00000042c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x3}, &(0x7f0000004400)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x9}, &(0x7f0000004540)=@journal={{0x4f32494e, 0x7, 0x10, 0x3}}, &(0x7f0000004580)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000045c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x7, 0x7}, {0x9fa, 0x9}, {0x2, 0x80000000}, {0xf269, 0xffffffffffffffff}, {0x1, 0x800100}, {0xffff, 0x8}, {0x2, 0x7fff}, {0x5, 0x2}, {0x7}, {0x5, 0x9}, {0xffffffffffffffff, 0x7}, {0xffffffffffffd11d, 0x4324}, {0x1, 0x8000}, {0xffffffffffffffff, 0x3}, {0x1, 0x1}, {0x101}, {0x68, 0x7}, {0x8000000000000001, 0x9}, {0x200, 0xfffffffffffffff9}, {0x7, 0x6}, {0x3ff, 0x4}, {0x1, 0x7fffffff}, {0x6, 0xfffffffffffffffe}, {0x7, 0x7}, {0x7, 0x1}, {0xffff, 0xa6d3}, {0x5}, {0x7, 0x8}, {0x3ff, 0x8}, {0x1, 0x80}, {0x5, 0x4}, {0x4, 0x5}, {0x5, 0x1}, {0x101, 0x6}, {0x101, 0x3}, {0x4, 0xfffffffffffffff8}, {0x1000, 0x6}, {0x100000001, 0x20000000000}, {0x8, 0x7c41cd28}, {0x7f, 0x8000000000000000}, {0xffff, 0xffffffffffffffff}, {0x78, 0x4}, {0x5, 0xa1}, {0x2, 0xffff}, {0x10, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x2cf, 0x4}, {0xfffffffeffffffff, 0x401}, {0x1, 0x313}, {0x3}, {0x4, 0x5}, {0x8, 0x5}, {}, {0x1, 0x3}, {0x7, 0xc}, {0x5, 0xaf0}, {0x8000}, {0x200, 0x2}, {0x4, 0x1ff}, {0x3ff, 0x3}, {0x8000, 0x1}, {0xffffffff80000001, 0x8}, {0xffffffffffffffff, 0x8}, {0x5, 0xe}, {0xfffffffffffff800, 0x7}, {0x3, 0x7fffffffffffffff}, {0x1, 0x2}, {0x37}, {0x401, 0x9}, {0x3, 0x6}, {0x8000, 0x1}, {0x7, 0xa8a0}, {0x3, 0x9}, {0x9, 0xd7a}, {0x1}, {0xfffffffffffffffb, 0x7}, {0x2, 0x9}, {0x4, 0xf}, {0x3, 0x6}, {0x1, 0x7}, {0x7ff, 0x10}, {0x0, 0x6}, {0x3bc, 0x3}, {0x7, 0x38}, {0x1, 0x3347088f}, {0x10, 0x9}, {0x9, 0x5}, {0x2, 0x66e}, {0x800, 0x3}, {0x81, 0x7}, {0xfffffffffffffffe, 0x7fff}, {0x6, 0x4}, {0x5, 0x3}, {0x5, 0x81}, {0x5, 0x8000000000000001}, {0x1000, 0x5}, {0x400, 0x4}, {0xc3, 0x401}, {0x8, 0x1}, {0x1e0b1265, 0x8000000000000001}, {0x6, 0x6}, {0x1}, {0x239e, 0x3}, {0x1, 0x2}, {0xe, 0x1000000000}, {0xfe, 0x5}, {0x4, 0x8}, {0xfffffffffffffffd, 0x8}, {0x6, 0xc7}, {0x6, 0x3}, {0x933, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x21}, {0x80000001, 0x62cfd376}, {0x7, 0x9}, {0x6, 0x3}, {0x2, 0xffffffffffffffe9}, {0xd, 0x6b0}, {0xe8, 0x2}, {0x4, 0x80}, {0x0, 0x751d}, {0x1, 0x8}, {0x2, 0xe}, {0xffffffffcdf78859, 0xf}, {0xf2, 0x3a43}, {0x4, 0x8}, {0x7fffffff, 0x8}, {0x4, 0x149e}, {0x4, 0x6}, {0xa, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x5b1e}, {0x3, 0x6d42}, {0x3, 0x1}, {0x95b7, 0xb889bb}, {0x3b75, 0x1b}, {0xfffffffffffffff8, 0x6}, {0xd6, 0x5}, {0x2, 0x4}, {0x8}, {0x6, 0x4}, {0x8, 0x3}, {0xf, 0xfff}, {0x666814b5, 0xffffffffffffffff}, {0xffff, 0x6}, {0x9, 0x6}, {0x8f8b, 0x9}, {0x6, 0x8000080000000}, {0xffffffff}, {0x2, 0xc}, {0x100, 0x1}, {0x2, 0x3}, {0xff, 0x138000}, {0x8, 0x7}, {0x5, 0x9}, {0x0, 0xf2c3}, {0x8000000000000001, 0x3}, {0x7}, {0xfffffffffffffffe, 0xef}, {0x9, 0x1e93}, {0x6, 0x7}, {0xffffffff, 0x4}, {0x90}, {0x7fff}, {0xfffffffffffffffa, 0x7}, {0xe, 0x7fffffffffffffff}, {0x583, 0x2}, {0x6c, 0x4}, {0xcca6, 0x8}, {0xf97, 0x9}, {0x80, 0x7}, {0x6, 0x2}, {0x87, 0xffff}, {0xffffffffffff7fff, 0x7}, {0x5, 0x10000}, {0x9, 0x2}, {0x2, 0xff}, {0xfffffffffffffffa, 0xf2}, {0x6182, 0x8000000000000001}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x50}, {0x6, 0x9}, {0x9, 0xa}, {0x0, 0xffffffffffffffff}, {0xfffffffffffffff9, 0xffffffff}, {0x8, 0x7fff}, {0xe98, 0x7fffffffffffffff}, {0x1000, 0xffffffffffffff01}, {0x1000, 0x7}, {0x39, 0x9}, {0x1, 0x6}, {0x0, 0x80d}, {0x81, 0xffffffffffffff91}, {0x3, 0xffffffffffffffff}, {0x0, 0x59b}, {0x1, 0x12}, {0xffffffffffffff86, 0x400000000000000}, {0xf000000000000000, 0xff}, {0x9}, {0x6, 0xbd}, {}, {0x8000000000000000, 0x1}, {0x5, 0x7000000000000000}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x6, 0x3}, {0x101, 0x8e7c}, {0xffffffffffffffff, 0x7}, {0xa8, 0x5946}, {0x37, 0x5}, {0x8, 0x4}, {0xf, 0x4}, {0x734f, 0x9}, {0x2, 0x1d0b}, {0x9, 0x9}, {0x100, 0x100000001}, {0x6, 0x4}, {0x4f1, 0x6}, {0x59d, 0xffffffffffffffff}, {0x1000101, 0x9}, {0x3, 0x3}, {0x80, 0x3}, {0x518, 0x3}, {0x7, 0x28fc50b5}, {0xdd, 0x2929}, {0x8, 0xfffffffffffffff2}, {0x10000, 0x6}, {0xfc1a, 0xa4}, {0x101, 0x1}, {0x3, 0xb}, {0x2, 0x2}, {}, {0x7, 0x7}, {0x1c, 0xa0}, {0x43, 0x79a9}, {0x3ff, 0x82}, {0x4, 0x6}, {0x8000000000000000, 0xff}, {0x5, 0xea8}, {0xfffffffffffffe00, 0x10001}, {0x101, 0x5}, {0x5, 0x2}, {0x8, 0x1}, {0x3, 0xf}, {0x15bf, 0x5}, {0x4d, 0xfffffffffffffffe}, {0x9, 0x2a2}, {0x4, 0x3}]}], 0x32}) socket$inet_sctp(0x2, 0x5, 0x84) 8.63405107s ago: executing program 0 (id=678): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r3 = eventfd2(0x2, 0x1) io_submit(r2, 0xf000, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x7000000000000000, 0x0, 0x1, r3}]) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0x7e) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x300, 0x1070bd2a, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfffffffffffffe53, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x5, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x3, 0x4, 0xa}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@getlink={0x34, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x2, 0x4a868d2e6292bf75, 0x1, 0x8, 0x3, 0x9}, 0x20) 7.443275246s ago: executing program 0 (id=679): r0 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x7a, 0x0, 0x1, 0x7, 0x10000, @value=r4}, 0x28) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/49, 0x31}, 0x202) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) syslog(0x9, 0x0, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r8, 0x82000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0xa3, 0x20b, 0x7, 0x81, 0x4, 0x3ff0, 0x7}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200, 0x0, 0x1f}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.645902314s ago: executing program 4 (id=681): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) 5.49055445s ago: executing program 4 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1a0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {0x13}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @default, 0x8848, @void, @val, @val={0x3, 0x1, 0x5c}, @void, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x1c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x11, 0x3, "d3536c63b4f6bfadfbba56bd20"}]}, @NL80211_ATTR_FTM_RESPONDER={0x118, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9b, 0x2, "7dd522cd0648e18a2cd0450303a1d118fbb40d24f2e59fec3865ff4925ae605803baf2023e7c98a71295ee632aa6a7b0f94b125102c91a00d9c6fa3e3f9c958993725440b96d73c582fcab1e2a458f36d13d854904562da0689ce38d7f3941f3ce2f70d0cb99088aec6ce465ef309bbeabe81a8334a624a6a9006a8209fc2f71f3413bf507ca4911cfd4de922d7cf067de4871a0ae82f3"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "2025329886c3563dfa4a6084b8f9ee4416e8c7903a861ba226ca57290092967a817c2201ac3d0caaee860b646f35a71d6e3d1dba049e955a0fad72e14d1a9d2a20cc8b0afe6f0f44af0ce26fe2b0b0f8ec3764a08e954ab2617b2a45b69ad256b3e955c4b3bbeb631b7fea"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x1a0}}, 0x40) 5.489099885s ago: executing program 6 (id=685): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141000) r7 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000000c0)={0x20a, @time={0xffffffff, 0x85}, 0xd, {0x1, 0x74}, 0xc, 0x3, 0x2}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r9, @ANYBLOB="010029bd7000ffdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a00000000000800040001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 4.394537484s ago: executing program 6 (id=686): connect$rds(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x40, @empty}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = eventfd(0x1) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x1a, 0x2, @thr={&(0x7f0000000400)="0e6a1b7f691d1f422244dd8a439c3f6c3d0b183b721b29f1beea245b855c16c11fb037a29511635a0fbff2d282e2ad191b2d8215d310c5a54885d4351bafc6329dea2b349a189961e0e9fdac612cabc7673bd6992ac92ddf56bff08ce86007e0b0b4cb00ffd6a31d25defcdaa4ec289f3ae8f47becbbde374c8886e8a80c60c2803ad338", &(0x7f00000004c0)="cb4ea83567d874f9507026cd98427445c34d02475777e19e5a910ce554da1216e863e75745c173ffe4d10d98613ab56953337ba8ac82d8d4e9a0c207c2b744105165ac2702e58eac9500d1074ca6a5a1ca7dd0b5940515eacd081a2778beb341ba459570941387cb3e264d8f795fa4e302beca8c1fabc102dbc47842fb064737bb7c72bf513cd5a27edad68da24aa591780bbb5d1f41c32f32eb8129e83d8369"}}, &(0x7f0000000300)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff81001d0086dd60ee955800327300fe8000000000000000000000000000aafe80000000000000000000000033c48aa3000749660000005141a7c0afd4cd7804000000000000000d992a607cbbc54958f2248eae93bfe854e3d02c1cf9d84e8a"], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f00000001c0)={0xd, 0x381, "f23360e12c4e0100010000c4efc0418b5cae00", 0x4, 0x10001, 0x5, 0x0, 0x1}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000300)=""/214, 0xd6) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) close_range(r2, r1, 0x2) 4.098020837s ago: executing program 4 (id=688): syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0030000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x81, 0x0, 0xfffff00c}, {0x6, 0x80, 0x0, 0x1}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bc1ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000080)=0x7, 0x4) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) read(r2, &(0x7f00000002c0)=""/75, 0x4b) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) bind$phonet(r2, &(0x7f0000000340)={0x23, 0x6, 0x4, 0x10}, 0x10) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f00000003c0)={0x2, 0x3}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x21, 0x1, 0x10000000, 0x5, 0x9}}}, @common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x0, 0x9, 0x6, 0x3, 0x9, 0xa, 0x17d, 0x7, 0xff, 0x81, 0x0, 0xb99, 0x6, 0x300, 0x8, 0x7c04], 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000280)=0x28) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x401, 0x80, 0x2a}, 0x18) 3.923587534s ago: executing program 0 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc1105511, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e50226d2", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x83, 0x40, 0x8, 0x0, 0x0, 0x0, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYBLOB="0600060000000000060004000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x24000805) 3.41705038s ago: executing program 4 (id=691): r0 = socket(0x10, 0x803, 0x0) r1 = syz_usb_connect(0x3, 0xce4, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x6d, 0x6c, 0x6a, 0x40, 0x40a, 0x2, 0x8bd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd2, 0x2, 0x4, 0x53, 0x60, 0x6, "", [{{0x9, 0x4, 0x4, 0xb, 0x10, 0xd5, 0x2b, 0x5f, 0x40, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x0, 0x40, "c5f9f97ffb93c02a50"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x81, 0xc9, "fdbb9851aa"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x81, 0x3, 0x8, "62d56ca7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x7, 0xf5, 0x6, 0x1e}]}], [{{0x9, 0x5, 0xe, 0x8, 0x400, 0x8, 0x2, 0x6, [@generic={0xc, 0xd, "6718dd52f8408553fea4"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x81, 0x7, 0x8, [@generic={0x26, 0xb, "4ea7e75da20e774e5b0b41d7fc1a9f9f4404e7d0de485ad9d251c18f10e2aa3adef6346d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x40, 0x2, [@generic={0xe7, 0x24, "f9bd17dd57617ef9ff9b017548eff78d2a475bd1bf4a44b75f787f2e84f9b8650f845a3235d1a3e3ec91b8ac8e4a115f754fe86ff915be4563cf616d471bf71a943d3259a1f34fe584e7bd45d2ef9fd07c4d7a0289ea86d6ead61c36ce9f0b9ed17ec9fea5d2d02ecdfd9faffeeb8856b9b8c019bdf1a41b7e66887c4dc3e72f7afa378015d92cca477b5a39014af5a60e64d5406f49fbbf8e58ebadc4b0796a5faf1761b019b3f2e2fb8f13adf32b0be67791784fc7d7f048ba5302300462852471df7e24ef187ffb0e88a7db3112ebb459804363db63c7a571b5a8e9548a7d96cd586120"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x0, 0x3, 0x4, [@generic={0x96, 0xc, "d49cb1ec4f72b1a5149ae68967f6326af736ddc00699221b985b41ecf6f23ed61ac572b6f9794203f70e945aa926fc0ff5a7397e89b7ef2978f704738a07de5f34937d6bfe7c292fe7e4c2cc786acb6c773376215ea2c090865217fdc883e406d17d96468657020353ea434a15ab12900155fbbc264233b0ce3b9661a6001771ce679e8638e5149220050788fbe9ab1abfc5c547"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x6, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x8, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x4}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x200, 0x3, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x82, 0x10}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ef, 0x4, 0x0, 0x1c, [@generic={0xf2, 0xe, "ce30017c0b9836ccea287cedf0509534ed7f7c426986146464eb281ce3e74795aa88f2aeab5adb1f65037f28a6275b3880178fef518a4879823fd7ae2bcfc1cf903c2f4a06acd7267786871df5304748c68723cb2f875d62d90837393a16c845260f5623d25f152dde9bf8ecf1fd5685b69c2e68e6376c7769d2e6769c23947906d8848d8aef315b4568e222739e6131338374fee87b0b1dd6f08085dc253bc6851ed3384dc63e036ac89f673f4834d3b0d62b4136c35747bd4189132d0d2c624e3f69cb42bb0b381851bdd289281160615b01e53aaf583471c74619ce1bc986e35508f106a6958242b4211c08c69f18"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x3c, 0xde, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x2807a12c14394b9, 0x5, 0xb, 0x40, [@generic={0xef, 0x15, "26b86ce94f01f59233c58355ea734ec8a247dceeedbadb40884d770c2ced7aafff92833a360bb113696e5ff3472963568562efad1c716bed77893155e07da05d3ee9882df6a52f1abcc0aa7d8d1da31fc0a559fc130538abd1e9b4a5f8cae6336e5a682119dd855a4e9af385c6414ef6ed0d8948c5ba31a94ba706bd545f89b88d9409d853237dcb8b16bfc1b981f8585794ef64aa9a939ccd07b2e69d424b959908f0326a57fcd1af29085c11d441714ef90be153546f24adece2355d36cf3a72210223ded17b5722459fee4be74fac4dce7612bfbf0c37afbe6ae234529f6a33c60ebdb90fa92ec92e9a29ef"}, @generic={0xd8, 0x2, "66e07772093eb8cfeae9a502b16eeeea7f531316b97006dbf5a487b272869debcc0c8dc9ffafacd2d8639e5dd6345b6a30236154edb1633448d061f6953c0c2ce5b70bef88d463736fcf8bb2bee3063d0bc2f636f10b702c8ea86f1f0d7ac45c41acdbf1e2373005aa12d366086ce01fdf35bf0933c3bcdd3204fcfbb48178773db0e46f7b798f7eb3334b4d72c325772ea06815c311d9a3cbfbad4c069be15ce0ad6dfde65c28a4dcf496b988c773d8a8830ea8eadda366231f71d1608e0e06a3a4c30fb393d0fc781489a521aae10d948a327cf4aa"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0xfb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}, @generic={0xe4, 0xe, "4a0b6fba829b7aa4ffa19e6cb9696a5959d3141e3d5776e9fea81a2675e21858946d147b9afa29cc00636b76c8c05c202765c31c72d711f3587dba133f6b54693aa0afcaf450bae9ea1a5088a8fe5808a188fa1cb3256732846a804c6693fdaeb50bc5cf278cf6cac551d3dfa0753822a45372b51a42f75a9afa1fbe0d8140efa957e1048f7feeb78429501a53cf6fc0b8e10ab9ae3c20df97e21b18f24618f15644293a97d43391878bfb6a2da764ea4547fcb53b1384db79105455f85d90d56d4c568dcc3a81a7ec8cfdf35d02385a124a6f01962e6a6f9c3f3ed6da82b2ff8349"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x4, 0xfd, 0xb, [@generic={0xfd, 0x10, "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"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xe, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x7, 0x8, [@generic={0x7a, 0x9, "65ccdd938104b18ce35b7618516ecfb228de4f3fe906cdf6baa9a2ee364b2bfc4010fb08a96c54430c12faccfef3791e2f2e45b7d52d726b7b29450249a75d3b714970be2564a89d42f6de45d19cde00291f15e744ad2854b57535edc4dc3efb30d46b2aa420e1dfc4c6c76ba63fe508ac6c5145cfdcd43e"}, @generic={0x94, 0x2, "877cbd070d35a6b5018f9fd96cdedec9abc3c5e976d8d12f04372235b8c43cde97499817ff45f89439ecc4b9569a9bb3dcb29af3b98d4b2b9eda959f7da51be9959007f01c7645d5af99fbd744ae484275537d4722b2ee9cf91f80b453e48db166aff06b39ac5149ce0cc8a05a7cc4f20243a763e478e60a74e713736d0185b4e17821fa78688521554ec7d24e8b6dc833db"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x0, 0x40, 0x98, [@generic={0x46, 0x8, "6f125f191f3e7e550837e11c7eda01cbe31141b508e43e6944f88ac812757244f94d981ac1c3d256053fc7b056c3f523245f9a277143f531769e4502ac157fe050c6e4bd"}, @generic={0x6e, 0x8, "f25883908285afd8998444168c4dfb4d189dc33ee33e7ec110a45c4aa17256765bec6fc1c7d105d377d73af124469d0b609952f95db24e3c009fe5bb710dfc8cca0af3532ae82253da1e39796948cc35cd6a62af7ec5c7996300a195debdf122c2ba1f6873f68727ad06a62a"}]}}]}}, {{0x9, 0x4, 0xc6, 0x7, 0x9, 0xff, 0x5d, 0x81, 0xf5, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3000, 0x87a0, 0x6, "277567965a93"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0xce, 0x3, "", "000c1b"}, @as_header={0x7, 0x24, 0x1, 0xa6, 0x10, 0x1001}]}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0x9, 0x1e, [@generic={0x32, 0x31, "7c052766757b69a12ec9cd0140aa138036c63bf5d11f972b19c6e253cb832cea655ad17f8f3733b4571d432cf27526b4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x28, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xf3, 0xf, 0xff, [@generic={0xa3, 0xb, "709eeb3f08b1832b0642a1a7766c92da63048f7a130d52890b073d880e9dbd2c4025cc109cc791376f6e96ead160a8b867f60d15eb0a0340e3571586e90098d6bc4af06e65b7dd8b7ae3181b0e69c4d76d063667b8d239133410fbeabc6035d534317b3195622e06f9a718d63e28bcf2b24b4e1694264d0740c64db4c08620bb50aed10e5e4792fa43a2faacde42f6b3f8bf9f0b337f9a320d9e5dbf30ece544ef"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x70, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}, @generic={0x15, 0xc, "171490cd47d8d5f864f3294d44c7dea64b0f8a"}]}}, {{0x9, 0x5, 0xe, 0xe, 0x40, 0x8, 0x1b, 0x4, [@generic={0xbc, 0x21, "6d3d05f6da04996d37052f15442a6fb17e96c46b32e64f385a0cbb859e90b763ac6e3b843ea00b261076f1f6ecb4cceb67462c62126257c9ace275ddb7cedc3c8c36df2b6ec8998e675d508fea0c2e2d6e3c4f11d23804a268500caa9aa0d0169a7ea8a98ce023e5abd384f03b4f8e54d52fbd4955704db69d5e53adde8370a32371885d48c1587f677c7932f7abf0f2f8678cccfc6d39b55388591be1fcaf986eaccc959db9b1b5553d370f63371f709d2041900ebb36c564f1"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xc, 0x1a, 0x7, [@generic={0xc0, 0x7, "8f0bb02d13c43f5cedf3c5692369eba0eb43075d0eba454f61ad42aa3392ce67419e3ff61367117431973d7ffbe8aa8e6787a9dd708adfdd5182adbc8eb79694713c7362e5ae72783e5efa184b2de3649b242799618b62b4b5df88a8f4d32f1549b063199d00fda25f7a300d7b20597552a81f104230fd42ac9bb9e75b9728943dcb2c688f369f49a169f9877c18308aa17743360fa09af50eefae13674751d677546d06799345dfb26e7aeace90f69f7e0de749f5637e291151a190ad42"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x4, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x3, 0x0, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xea, 0xf92}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x5, 0x7f, 0xff, [@generic={0xa6, 0x8, "0bc7d3bea3f35bb1f72237688628600c7f5f5d1ab0cf779be1063fe1d651ca90fbbd2dce84e9cd21a3646c4df8d55b24cae4ea049b5fe8ca3b0b4819522a346181a2e31379e390ae16eb47c96b7ab2cbcf2b8607d913d390979b7585d7a3ad257f260dcf943710b2c774b0abc10685e1a4001b143c3dbd81d018dcea0f8c94e358a29c6c332cb5ec13b7bdfc0d906ea1317bba712103e8a13e0ff9021a081e242c2af393"}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x6, 0xff}, 0x4d, &(0x7f0000001000)=ANY=[@ANYBLOB="0558ac000603100b0b10010c040004070300e30b10010240000901b4040714100419c0d0c7bcaba34ba7206faabc80a5afa50710c549333500141004027816c671ac0971"], 0x1, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000001200)={0x14, &(0x7f0000001100)={0x40, 0x11, 0x3d, {0x3d, 0x3, "4a8abca25e79fb12bfdc4bc62f43b500a9a94a56fdc9a34eafec30513174af43a48402a6a1445b7e3587b0a37975c55513c0292dc8dbd29cdc5a2f"}}, &(0x7f0000001180)=ANY=[@ANYBLOB="00037600000076033f05e1002f34c0308dedddd8a20d1bb8b336b7b9428c54fbf689f38f6274a01dd83cd3c25054ec0986fc9c00a29c221eb6df4a809a6b7480941ade21ed748797e7eb8ea199a1d6fd03788552a37df92178c8532aad3e37a379fd11078b9719be7b6b32bcde344a222400e1183b6cf29799ba5076"]}, &(0x7f0000001500)={0x44, &(0x7f0000001240)={0x0, 0x13, 0xc5, "71ad6f0cfdcf96af47e26eb030b2da489112737b2f27f165d7b383905609514d7cfaa7ceb7a172e9f0b2683db527e33f8fc799839f7b8e5b38da020e7fa0d03bbcc55811c07ccb9046b7dce266ea69a97eeb3d45428c75f5508a61b2760d217b5b741a8183d07d62837dc8eda6fa87e651aa81cdae14efb5463978182a21865b98a2ce2ee3f00ed99adbff2e0986866dd4e83980caa1f35c42d9f190600a284922d8e934fcfe76ffdf2b329f5c77bb25f761ffed43e8fc76f367712c01a1f399d040de0161"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x79}, &(0x7f00000013c0)={0x20, 0x81, 0x1, "92"}, &(0x7f0000001400)={0x20, 0x82, 0x1, ' '}, &(0x7f0000001440)={0x20, 0x83, 0x2, "9d8b"}, &(0x7f0000001480)={0x20, 0x84, 0x2, "cb9f"}, &(0x7f00000014c0)={0x20, 0x85, 0x3, "3e10ae"}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x440b0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x101082, 0x1) 3.328121692s ago: executing program 3 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x28000600) rmdir(0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) creat(&(0x7f0000000080)='./file0\x00', 0xc7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x100000001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0xffff, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 3.127987328s ago: executing program 1 (id=693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x102, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) unshare(0x8040480) (rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x40010, r1, 0xffffc000) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x204000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8c02, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)=0x4) r9 = dup(r7) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c014}, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10800, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES32=r2, @ANYBLOB="2c04e8a31af344728befdffce7e4ec35d8c32bced581d57ba7f7124fdb1848442759bbe82023b3d12093d4dcaf937f7652bf869b0c0d6e5d4c1881e0ec9b8baa7ee70d571dbee134fc3e734319b63f39ba353233df116599c6acae708cc6ca021b01fbca"]) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) (async) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x40, 0x1) (async, rerun: 64) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) (async, rerun: 64) fsopen(0x0, 0x0) 2.465850925s ago: executing program 1 (id=694): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xaf9, 0x5, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x3, 0x0, {0x0, 0x1}, 0x52, 0x10009}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r1, 0xc008644e, &(0x7f0000000140)={0x3c5}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x2, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 2.308162269s ago: executing program 3 (id=695): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) 2.215285715s ago: executing program 1 (id=696): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x86b1}}, './file0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2c, 0xfffffc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x900}}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 2.046641811s ago: executing program 1 (id=697): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="02000000000080000800010076746900000000"], 0xa0}}, 0x4048000) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@bridge_dellink={0x24, 0x13, 0x1, 0x0, 0x8000000, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x40800) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x80, 0x7fff, {{0x1c, 0x4, 0x0, 0x1d, 0x70, 0x67, 0x0, 0x1e, 0x4, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp={0x44, 0x8, 0x94, 0x0, 0x8, [0x1781]}, @ssrr={0x89, 0x13, 0x16, [@multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @noop, @end, @timestamp_addr={0x44, 0x3c, 0x7b, 0x1, 0xe, [{@remote, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x10000}, {@multicast2, 0x7}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x9786684d8e8eab31, &(0x7f0000000600)={@rand_addr, @loopback, 0x0}, &(0x7f0000000640)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1fc, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000}, 0xc4) 1.998797703s ago: executing program 3 (id=698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.809809239s ago: executing program 1 (id=699): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.576326042s ago: executing program 1 (id=700): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed42b203c4b8"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="1201400002002c9505934c435d415600402505a1a4400097020301090240000101ff60070904009c03020600020a24010000000000000005240004000d240f01070000009c06f5ff100905820208ae4affff090503022000620800"], &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x9, 0xf, 0xc7, 0x8}, 0x27, &(0x7f0000000240)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xaa, 0x4, 0xcc, 0xf0f, 0x4, [0xffc0c0, 0x0, 0xffc0c0, 0xff0030]}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xc8, &(0x7f00000002c0)=@string={0xc8, 0x3, "f8fcf4c479f1a8f29aced03dfb476cfb57091bbcf79153a8eadfb3729d7c289a40c8d44529d15dfef58286cef5bffe1b34467167dbb8dc564b000000000000001f9908d832c5d9604a829832c58ae1d7b7f05ebd0a53bced7017202108691e4752a6c3136459654f98c5f84b9fc31bc57fa9028e2608ce9769d82ea1efcbcfc9b0faf8fd3381fc8e9f2d23c450db022866b09286745dc4dff6fd1fa17edfb4a5c9497fbb83b4808cdcc982b6a7f255e9d8db23f44f7021e7290d37c7d984caafa83ead0a7921"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x95, &(0x7f0000000540)=ANY=[@ANYBLOB="120101026e779208927311d8c7640102030109028300010008200e09047b0100ffffff020921060094012223076810ecd40db19005c3dd4c46374c5eca3b19cca9240347d27d3c8e0c46a6c2999e82fe61fce4e4af4f9fa0f6d3138ec06610391f14a199779463b11a01f0318931a8f28f2d259fb8b4774830f1af7e4f774b0d046691913676a1b9478d83c77137afdc21"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(0x0, 0x80) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 817.286731ms ago: executing program 3 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000900)=ANY=[@ANYBLOB="68020000000501040000000000000000070000015402010003000000000800000603080001420cd14d3f"], 0x268}}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) socket(0x18, 0x800, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 780.417517ms ago: executing program 0 (id=702): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000100)={0x0, 0x800, 0x6, 0x0, 0x1005, 0x2, 0x0, &(0x7f0000000000)=[{0x18, 0x1ff, 0x4}, {0x21, 0x1ff, 0x2}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020}, 0x2037) dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x0, 0x2, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c51}, 0xb2a1}) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x9, 0x4, 0x0, 0x10, @tick=0x5, {0xfb, 0x8}, {0x3, 0x3}, @raw8={"9ff32c531489e2f1f936ec7c"}}, {0x80, 0xb, 0x9, 0x81, @time={0x3, 0x6}, {0xd, 0x8}, {0x8, 0x4e}, @control={0x3, 0xfffffffc, 0x3}}, {0x40, 0x4, 0x5, 0x6e, @time={0x3, 0x3}, {0x8, 0x7}, {0x5, 0x3}, @note={0x8, 0x3, 0x6, 0x20, 0x5}}, {0x9, 0x4, 0x0, 0x5, @time={0x9, 0x1}, {0xff}, {0x9}, @quote={{0xf8, 0xf}, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x7, @time={0x1, 0x2}, {0x30, 0x6}, {0x7, 0x80}, @queue={0x10, {0xffffffff, 0x1}}}}}, {0x1, 0x3, 0x6, 0x9, @time={0xfb, 0xff}, {0x3, 0x1a}, {0xfb, 0x9}, @connect={{0x80, 0x5}, {0x6, 0x80}}}, {0x8, 0x6, 0xcd, 0x5e, @tick=0x8, {0x4, 0x1}, {0x3, 0xc8}, @note={0x0, 0x0, 0xfe, 0x65, 0xb}}], 0xa8) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000020a67eaef77dbf46c7832d33007a10be82c9bb57e69c412515471a989a1a3b8df47746c99d4727374a404f4947685cf7fe336e301678b0492dd7413693c71f55a2266c81042b0fce248a1f17cb5de689aac517762a326ed999deb184162b136378b07c75a5835e08736cc5e128addec2110d3b300237e71b12b4e59f94", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf2502000000080001000300"], 0x1c}, 0x1, 0x0, 0x0, 0xdbbca5e2e2fbaaf}, 0x400a000) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x40084504, &(0x7f0000ffcffc)=0x3) 373.473713ms ago: executing program 3 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x1) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019300)=ANY=[@ANYBLOB="1c00000068000100fdfc0000fbdbdf25020000000000000004000400eb522bf694c80940672203fa367d0f1a74707aee2013f8e23675fd18c428ea3f65fe1a57ff04108c5a7bf22c9bbdbf5ad6f17ffd48db908046b4ce6dacef7243fe9c72d9585b3d6e7861b6e16b0e56a7d04b52d1e105d0eb4474247958bbb398a058cb1e1102630d38929fd6cd4c6ecf5f948859c2a57424f8f23b5803841a55691fbedb863d7674ae536387806b7f3002443e56969aae35de67fc0f5e225ae7c3ca3ad6f9df904f1f1c30"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) prlimit64(0x0, 0x7, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019400)=ANY=[@ANYBLOB="3800000010000104000000000000000000000000ad4a8f50a457d298ec8dbe0b0e19d7d988b7b62bc125263fe60047fab91be6e81d13537770a5b3a62ea3ad4b74787dbabefd1390631f1344c3dc844ea15bc38b2d4fc9c9cc927aee637c0d88d40d041db3da2ba252db0000000000", @ANYRES32=0x0, @ANYBLOB="c14d0000000000001800128008000100677265000c0002800500090009000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 31.993193ms ago: executing program 4 (id=704): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x86b1}}, './file0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2c, 0xfffffc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x900}}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 0s ago: executing program 3 (id=705): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141000) r6 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a00000000000800040001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) kernel console output (not intermixed with test programs): Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 173.491983][ T7200] Call Trace: [ 173.491988][ T7200] [ 173.491995][ T7200] dump_stack_lvl+0x100/0x190 [ 173.492021][ T7200] should_fail_ex.cold+0x5/0xa [ 173.492043][ T7200] should_failslab+0xc2/0x120 [ 173.492065][ T7200] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 173.492083][ T7200] ? __alloc_skb+0x5b7/0x710 [ 173.492099][ T7200] ? __alloc_skb+0x140/0x710 [ 173.492120][ T7200] __alloc_skb+0x140/0x710 [ 173.492134][ T7200] ? __alloc_skb+0x5b7/0x710 [ 173.492150][ T7200] ? __pfx___alloc_skb+0x10/0x10 [ 173.492174][ T7200] netlink_alloc_large_skb+0x69/0x150 [ 173.492201][ T7200] netlink_sendmsg+0x680/0xda0 [ 173.492230][ T7200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.492258][ T7200] ? selinux_socket_sendmsg+0x198/0x2f0 [ 173.492286][ T7200] ____sys_sendmsg+0xa4d/0xbe0 [ 173.492307][ T7200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.492334][ T7200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.492367][ T7200] ___sys_sendmsg+0x190/0x1e0 [ 173.492393][ T7200] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.492416][ T7200] ? __lock_acquire+0x49f/0x1a40 [ 173.492436][ T7200] ? get_pid_task+0x106/0x250 [ 173.492487][ T7200] __sys_sendmsg+0x160/0x210 [ 173.492507][ T7200] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.492543][ T7200] do_syscall_64+0x115/0x870 [ 173.492569][ T7200] ? clear_bhb_loop+0x40/0x90 [ 173.492591][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.492608][ T7200] RIP: 0033:0x7f7939b9de99 [ 173.492624][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.492640][ T7200] RSP: 002b:00007f793aa62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.492658][ T7200] RAX: ffffffffffffffda RBX: 00007f7939e25fa0 RCX: 00007f7939b9de99 [ 173.492669][ T7200] RDX: 0000000000004084 RSI: 0000200000000140 RDI: 0000000000000003 [ 173.492680][ T7200] RBP: 00007f793aa62090 R08: 0000000000000000 R09: 0000000000000000 [ 173.492690][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.492700][ T7200] R13: 00007f7939e26038 R14: 00007f7939e25fa0 R15: 00007ffcea4a80c8 [ 173.492724][ T7200] [ 173.735630][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.823354][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 173.853942][ T805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.864240][ T805] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.875967][ T805] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.886954][ T805] usb 4-1: config 1 interface 1 has no altsetting 0 [ 173.928878][ T805] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 173.938447][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.948118][ T805] usb 4-1: Product: syz [ 173.953497][ T805] usb 4-1: Manufacturer: syz [ 173.958321][ T805] usb 4-1: SerialNumber: syz [ 174.166620][ T7092] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.240693][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.247781][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.290012][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.297144][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.434746][ T7092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.458494][ T7177] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 174.512022][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 174.513647][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 174.579785][ T7177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.684954][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.702242][ T805] usb 4-1: selecting invalid altsetting 0 [ 174.709006][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 174.741077][ T29] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 174.784897][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.830357][ T29] usb 2-1: config 0 descriptor?? [ 174.898605][ T805] usb 4-1: USB disconnect, device number 21 [ 174.983743][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1036 jiffies old. [ 175.036454][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.282834][ T29] Bluetooth: Can't get state to change to load configuration err [ 175.319520][ T29] Bluetooth: Loading sysconfig file failed [ 175.356314][ T29] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 175.381291][ T29] usb 2-1: USB disconnect, device number 17 [ 175.543738][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.914683][ T30] audit: type=1400 audit(1784356267.532:790): avc: denied { append } for pid=7244 comm="syz.1.333" name="pfkey" dev="proc" ino=4026533314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 177.476548][ T7092] veth0_vlan: entered promiscuous mode [ 177.668730][ T7092] veth1_vlan: entered promiscuous mode [ 177.826623][ T7092] veth0_macvtap: entered promiscuous mode [ 177.850372][ T7092] veth1_macvtap: entered promiscuous mode [ 177.902458][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.963104][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.024903][ T6625] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.055697][ T6625] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.090353][ T6625] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.124330][ T6625] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.182234][ T7245] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 178.263439][ T7255] xt_TCPMSS: Only works on TCP SYN packets [ 178.276907][ T7245] bond1: entered promiscuous mode [ 178.292873][ T7245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.363409][ T30] audit: type=1400 audit(1784356268.972:791): avc: denied { write } for pid=7253 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.599632][ T7256] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 178.614886][ T7256] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 178.632443][ T7256] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 178.674152][ T7256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.743665][ T7256] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 180.098503][ T7245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.113179][ T7245] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 180.153882][ T7245] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 180.171307][ T7245] bond1: (slave ip6gre1): making interface the new active one [ 180.179045][ T7245] ip6gre1: entered promiscuous mode [ 180.187265][ T7245] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 180.208197][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.228159][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.312327][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.325702][ T187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.351213][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.399742][ T7267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7267 comm=syz.0.337 [ 180.412150][ T5342] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.593270][ T5342] usb 5-1: Using ep0 maxpacket: 32 [ 180.612998][ T5342] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 180.656681][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.697340][ T5342] usb 5-1: config 0 descriptor?? [ 181.473215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.703229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.915974][ T5342] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 181.942435][ T5342] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 181.970699][ T5342] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 182.085555][ T5698] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.140964][ T5719] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 182.341613][ T7285] sch_tbf: burst 127 is lower than device batadv_slave_0 mtu (1514) ! [ 182.343758][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 182.345384][ T5698] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 182.345425][ T5698] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.345446][ T5698] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.345468][ T5698] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.345490][ T5698] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.345526][ T5698] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.345562][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.371583][ T5719] usb 7-1: not running at top speed; connect to a high speed hub [ 182.405139][ T5719] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 182.564428][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.597759][ T5719] usb 7-1: Product: à  [ 182.601960][ T5719] usb 7-1: Manufacturer: Щ [ 182.609037][ T5719] usb 7-1: SerialNumber: 똱薬颡ᬑ雄霅斳⨱瞽쩴勌ك걧ঈâ—ì㮎샟í㵛멿å©è´„緅먔㠇ﵳ᩹é·ä´ƒî¢»ë²ê§ î›ˆë‹’Ꭹ瑱í›ä‘¯ê™ á¢¡ç¶¤ã—…ꇾ୛䊫쀟á¾è·ªâ¹žï¯ ï‰™å†‡ã§¥ã™™à£¤çŠ¼é™¬ì‚¬á·¥ê‹å„â“™ëŸà¶‹é³é¯°è»…ףּᓘî [ 182.647858][ T5698] usb 2-1: usb_control_msg returned -32 [ 182.670118][ T5698] usbtmc 2-1:16.0: can't read capabilities [ 182.721860][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.761324][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.845217][ T30] audit: type=1400 audit(1784356273.452:792): avc: denied { create } for pid=7286 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.908845][ T7288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.937948][ T30] audit: type=1400 audit(1784356273.522:793): avc: denied { connect } for pid=7286 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.994027][ T30] audit: type=1400 audit(1784356273.542:794): avc: denied { write } for pid=7286 comm="syz.0.344" path="socket:[16939]" dev="sockfs" ino=16939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.225554][ T5698] usb 2-1: USB disconnect, device number 18 [ 183.709507][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.780594][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.854523][ T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 184.047094][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 184.077703][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.155212][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 184.175570][ T24] pvrusb2: ********** [ 184.184985][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 184.215859][ T24] pvrusb2: Important functionality might not be entirely working. [ 184.245826][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 184.269995][ T24] pvrusb2: ********** [ 184.352273][ T2362] pvrusb2: Invalid write control endpoint [ 184.569326][ T2362] pvrusb2: Invalid write control endpoint [ 184.605186][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 184.643291][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 184.655575][ T24] usb 4-1: USB disconnect, device number 22 [ 184.680058][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 184.713542][ T2362] pvrusb2: Device being rendered inoperable [ 184.737777][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 184.771102][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 184.823542][ T2362] pvrusb2: Attached sub-driver cx25840 [ 184.843238][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 184.881880][ T7302] FAULT_INJECTION: forcing a failure. [ 184.881880][ T7302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.885198][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 184.912597][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.1.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.912627][ T7302] Tainted: [L]=SOFTLOCKUP [ 184.912633][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 184.912643][ T7302] Call Trace: [ 184.912649][ T7302] [ 184.912656][ T7302] dump_stack_lvl+0x100/0x190 [ 184.912683][ T7302] should_fail_ex.cold+0x5/0xa [ 184.912707][ T7302] _copy_from_iter+0x1f4/0x1690 [ 184.912735][ T7302] ? __pfx__copy_from_iter+0x10/0x10 [ 184.912755][ T7302] ? _parse_integer_limit+0x1ac/0x220 [ 184.912784][ T7302] ? _kstrtoull+0x13c/0x1f0 [ 184.912808][ T7302] ? __pfx__kstrtoull+0x10/0x10 [ 184.912835][ T7302] tun_get_user+0x3ba/0x3c20 [ 184.912872][ T7302] ? __pfx_tun_get_user+0x10/0x10 [ 184.912899][ T7302] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.912930][ T7302] ? find_held_lock+0x2b/0x80 [ 184.912956][ T7302] ? tun_get+0x191/0x370 [ 184.912978][ T7302] ? tun_get+0x191/0x370 [ 184.913007][ T7302] tun_chr_write_iter+0xdc/0x200 [ 184.913035][ T7302] vfs_write+0x6ac/0x1050 [ 184.913060][ T7302] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 184.913089][ T7302] ? __pfx_vfs_write+0x10/0x10 [ 184.913111][ T7302] ? find_held_lock+0x2b/0x80 [ 184.913152][ T7302] ksys_write+0x12a/0x250 [ 184.913175][ T7302] ? __pfx_ksys_write+0x10/0x10 [ 184.913206][ T7302] do_syscall_64+0x115/0x870 [ 184.913232][ T7302] ? clear_bhb_loop+0x40/0x90 [ 184.913254][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.913271][ T7302] RIP: 0033:0x7f7939b9de99 [ 184.913287][ T7302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.913303][ T7302] RSP: 002b:00007f793aa62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.913321][ T7302] RAX: ffffffffffffffda RBX: 00007f7939e25fa0 RCX: 00007f7939b9de99 [ 184.913333][ T7302] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 184.913343][ T7302] RBP: 00007f793aa62090 R08: 0000000000000000 R09: 0000000000000000 [ 184.913353][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.913368][ T7302] R13: 00007f7939e26038 R14: 00007f7939e25fa0 R15: 00007ffcea4a80c8 [ 184.913389][ T7302] [ 185.073487][ T30] audit: type=1400 audit(1784356275.542:795): avc: denied { unlink } for pid=7303 comm="syz.0.348" name="#3" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 185.248987][ T5719] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 185.257169][ T5719] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 185.267725][ T5719] usb 7-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 185.276574][ T5719] usb 7-1: found format II with max.bitrate = 65534, frame size=5 [ 185.286637][ T5719] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 185.524597][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 186.515743][ T5719] usb 7-1: USB disconnect, device number 2 [ 186.794145][ T30] audit: type=1400 audit(1784356277.412:796): avc: denied { ioctl } for pid=7323 comm="syz.0.355" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.844173][ T7324] binder: 7323:7324 ioctl c0306201 200000000480 returned -14 [ 186.902215][ T30] audit: type=1400 audit(1784356277.412:797): avc: denied { set_context_mgr } for pid=7323 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 186.943889][ T5719] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 186.973364][ T30] audit: type=1400 audit(1784356277.482:798): avc: denied { read } for pid=7325 comm="syz.1.356" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.043301][ T30] audit: type=1400 audit(1784356277.602:799): avc: denied { setopt } for pid=7327 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.105247][ T5719] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 187.105859][ T30] audit: type=1400 audit(1784356277.602:800): avc: denied { shutdown } for pid=7327 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.122432][ T5719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.145781][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.193387][ T30] audit: type=1400 audit(1784356277.602:801): avc: denied { read } for pid=7327 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.209419][ T5719] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 187.250164][ T5719] usb 7-1: config 0 has no interface number 0 [ 187.268600][ T5719] usb 7-1: config 0 has no interface number 1 [ 187.286357][ T5719] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 187.314958][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.333277][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 187.345110][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 187.361374][ T5719] usb 7-1: config 0 descriptor?? [ 187.385812][ T5719] usb 7-1: unknown number of interfaces: 2 [ 187.400006][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.433781][ T24] usb 2-1: Product: syz [ 187.445995][ T24] usb 2-1: Manufacturer: syz [ 187.461527][ T24] usb 2-1: SerialNumber: syz [ 187.498488][ T24] usb 2-1: config 0 descriptor?? [ 187.530969][ T24] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 187.615627][ T5719] usb 7-1: USB disconnect, device number 3 [ 187.903373][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 187.903404][ T30] audit: type=1400 audit(1784356278.502:804): avc: denied { write } for pid=7335 comm="syz.3.354" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 188.044841][ T24] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 188.118884][ T24] usb 2-1: USB disconnect, device number 19 [ 188.136481][ T30] audit: type=1400 audit(1784356278.502:805): avc: denied { open } for pid=7335 comm="syz.3.354" path="/74/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 188.212861][ T30] audit: type=1400 audit(1784356278.512:806): avc: denied { ioctl } for pid=7335 comm="syz.3.354" path="/74/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 188.311234][ T30] audit: type=1400 audit(1784356278.562:807): avc: denied { setopt } for pid=7325 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.652649][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.667890][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.797535][ T30] audit: type=1400 audit(1784356280.412:808): avc: denied { connect } for pid=7355 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.880162][ T7356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input20 [ 190.331813][ T5698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.349549][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.714523][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 190.716693][ T4926] Bluetooth: hci0: command 0x0406 tx timeout [ 190.723545][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 190.754647][ T7343] fuse: fd is not a fuse device [ 193.583518][ T7370] mmap: syz.3.370 (7370) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 193.896566][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 194.320966][ T805] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 194.328943][ T30] audit: type=1400 audit(1784356284.892:809): avc: denied { accept } for pid=7392 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 194.443599][ T5719] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 194.619074][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 194.876132][ T805] usb 7-1: Using ep0 maxpacket: 8 [ 194.887757][ T805] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.898231][ T805] usb 7-1: config 179 has no interface number 0 [ 194.904862][ T805] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.916149][ T5719] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 195.041597][ T7410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7410 comm=syz.0.376 [ 195.056650][ T805] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 195.067932][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.078119][ T805] usb 7-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.089949][ T5719] usb 4-1: config 0 descriptor?? [ 195.714679][ T5786] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 195.832256][ T805] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 195.888258][ T805] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 195.907902][ T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.935419][ T7393] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 195.957870][ T5786] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 195.967494][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.979368][ T5786] usb 2-1: config 0 descriptor?? [ 196.258036][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.373'. [ 196.327922][ T5719] ath6kl: Failed to submit usb control message: -71 [ 196.334826][ T5719] ath6kl: unable to send the bmi data to the device: -71 [ 196.342476][ T5719] ath6kl: Unable to send get target info: -71 [ 196.358747][ T5719] ath6kl: Failed to init ath6kl core: -71 [ 196.361756][ T187] usb 7-1: USB disconnect, device number 4 [ 196.366191][ T5719] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 196.450416][ T5786] ath6kl: Failed to submit usb control message: -71 [ 196.464186][ T5719] usb 4-1: USB disconnect, device number 23 [ 196.478175][ T5786] ath6kl: unable to send the bmi data to the device: -71 [ 196.503134][ T5786] ath6kl: Unable to send get target info: -71 [ 196.522217][ T5786] ath6kl: Failed to init ath6kl core: -71 [ 196.531589][ T5786] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 196.558751][ T5786] usb 2-1: USB disconnect, device number 20 [ 197.033427][ T7421] netlink: 76 bytes leftover after parsing attributes in process `syz.6.380'. [ 197.170286][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 197.913639][ T187] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 198.081892][ T7439] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 198.103261][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 198.126792][ T187] usb 4-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 198.170387][ T187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 198.202593][ T187] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 198.225207][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.238914][ T7439] bond1: entered promiscuous mode [ 198.255519][ T187] usb 4-1: config 0 descriptor?? [ 198.278451][ T7439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.765392][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 198.796824][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 198.827028][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 198.840679][ T7452] fuse: Bad value for 'rootmode' [ 198.997611][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.008517][ T5698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.021936][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.055746][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.081376][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.108820][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.140579][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.203234][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.226758][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.268673][ T187] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 199.326969][ T187] zydacron 0003:13EC:0006.0003: hidraw0: USB HID v0.06 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 199.399731][ T187] usb 4-1: USB disconnect, device number 24 [ 199.424572][ T5786] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 199.608013][ T5786] usb 7-1: Using ep0 maxpacket: 16 [ 199.618542][ T7457] fido_id[7457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 199.656220][ T5786] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.669227][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 199.681955][ T5786] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.698054][ T5786] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.708606][ T5786] usb 7-1: config 1 interface 1 has no altsetting 0 [ 199.719279][ T5786] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 199.729403][ T5786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.737632][ T5786] usb 7-1: Product: syz [ 199.741914][ T5786] usb 7-1: Manufacturer: syz [ 199.747978][ T5786] usb 7-1: SerialNumber: syz [ 200.183262][ T5698] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.229337][ T7452] netlink: 'syz.6.388': attribute type 1 has an invalid length. [ 200.262204][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.388'. [ 200.314282][ T5786] usb 7-1: selecting invalid altsetting 0 [ 200.386237][ T5698] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 200.663294][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.699479][ T5698] usb 2-1: config 0 descriptor?? [ 201.485747][ T5786] usb 7-1: USB disconnect, device number 5 [ 201.856123][ T5698] ath6kl: Failed to submit usb control message: -71 [ 201.877208][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.897329][ T5698] ath6kl: unable to send the bmi data to the device: -71 [ 201.933987][ T5698] ath6kl: Unable to send get target info: -71 [ 201.981892][ T5698] ath6kl: Failed to init ath6kl core: -71 [ 202.014541][ T5698] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 202.076398][ T5698] usb 2-1: USB disconnect, device number 21 [ 202.169361][ T7491] binder: 7489:7491 ioctl c0306201 200000000480 returned -14 [ 202.353908][ T7498] bond3: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 202.403589][ T7505] netlink: 56 bytes leftover after parsing attributes in process `syz.0.402'. [ 202.427665][ T30] audit: type=1400 audit(1784356293.032:810): avc: denied { connect } for pid=7493 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.522102][ T7507] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 202.556953][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 202.675755][ T7513] ip6erspan0: entered allmulticast mode [ 203.630229][ T30] audit: type=1400 audit(1784356294.212:811): avc: denied { create } for pid=7525 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 203.731551][ T30] audit: type=1400 audit(1784356294.272:812): avc: denied { write } for pid=7525 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.833601][ T5786] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 204.022486][ T30] audit: type=1400 audit(1784356294.632:813): avc: denied { read write } for pid=7556 comm="syz.1.405" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.074650][ T30] audit: type=1400 audit(1784356294.662:814): avc: denied { open } for pid=7556 comm="syz.1.405" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.152274][ T5786] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 204.184739][ T5786] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.215679][ T5786] usb 7-1: config 0 has no interfaces? [ 204.233307][ T5786] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 204.239223][ T30] audit: type=1400 audit(1784356294.662:815): avc: denied { ioctl } for pid=7556 comm="syz.1.405" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.243367][ T5786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.453159][ T30] audit: type=1400 audit(1784356294.782:816): avc: denied { bind } for pid=7556 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.106929][ T5786] usb 7-1: config 0 descriptor?? [ 205.111978][ T30] audit: type=1400 audit(1784356295.192:817): avc: denied { mount } for pid=7570 comm="syz.0.406" name="/" dev="ramfs" ino=18641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 205.211211][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.263833][ T30] audit: type=1400 audit(1784356295.822:818): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 205.661499][ T30] audit: type=1400 audit(1784356296.272:819): avc: denied { bind } for pid=7592 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.849197][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 4122 jiffies old. [ 206.321448][ T5786] usb 7-1: can't set config #0, error -71 [ 206.346879][ T5786] usb 7-1: USB disconnect, device number 6 [ 206.720980][ T7613] fuse: Bad value for 'rootmode' [ 206.841298][ T7625] fuse: Bad value for 'fd' [ 207.831913][ T7654] syzkaller1: entered allmulticast mode [ 208.557224][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.821418][ T7671] Illegal XDP return value 790298624 on prog (id 51) dev syz_tun, expect packet loss! [ 209.011137][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 209.011148][ T30] audit: type=1400 audit(1784356299.622:822): avc: denied { read } for pid=7676 comm="syz.3.423" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.133050][ T30] audit: type=1400 audit(1784356299.662:823): avc: denied { open } for pid=7676 comm="syz.3.423" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.223647][ T30] audit: type=1400 audit(1784356299.662:824): avc: denied { ioctl } for pid=7676 comm="syz.3.423" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 210.631823][ T194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.492723][ T7720] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.543098][ T7720] netlink: 48 bytes leftover after parsing attributes in process `syz.6.432'. [ 212.913305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 213.262241][ T7741] openvswitch: netlink: Missing valid actions attribute. [ 213.283573][ T7741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.581821][ T7741] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 214.239896][ T7469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.262125][ T7741] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 214.263385][ T7742] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 214.542192][ T30] audit: type=1400 audit(1784356305.152:825): avc: denied { write } for pid=7745 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.118029][ T7764] fuse: Bad value for 'fd' [ 215.333578][ T5698] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 215.493366][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 215.565301][ T5698] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.594072][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.798031][ T7744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.825724][ T5698] usb 4-1: config 0 descriptor?? [ 215.993841][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 216.011429][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.047645][ T29] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.074263][ T29] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.074755][ T5698] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 216.130172][ T29] usb 7-1: config 1 interface 1 has no altsetting 0 [ 216.157633][ T29] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 216.185713][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.206845][ T29] usb 7-1: Product: syz [ 216.225814][ T29] usb 7-1: Manufacturer: syz [ 216.230646][ T29] usb 7-1: SerialNumber: syz [ 216.279159][ T5698] [drm:udl_init] *ERROR* Selecting channel failed [ 216.397184][ T5698] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 216.420934][ T5698] [drm] Initialized udl on minor 2 [ 216.455715][ T5698] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 216.479336][ T7764] netlink: 'syz.6.440': attribute type 1 has an invalid length. [ 216.531937][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.440'. [ 216.609374][ T7809] ip6erspan0: entered allmulticast mode [ 216.643506][ T5698] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 216.959992][ T5698] usb 4-1: USB disconnect, device number 25 [ 217.037609][ T30] audit: type=1400 audit(1784356307.612:826): avc: denied { write } for pid=7816 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.489996][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 217.535957][ T29] usb 7-1: selecting invalid altsetting 0 [ 217.618992][ T29] usb 7-1: USB disconnect, device number 7 [ 217.814009][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 217.970047][ T30] audit: type=1400 audit(1784356308.582:827): avc: denied { ioctl } for pid=7857 comm="syz.3.449" path="socket:[18114]" dev="sockfs" ino=18114 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.032232][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.064631][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.091540][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.126594][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.172400][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.373256][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.546936][ T10] usb 2-1: config 0 descriptor?? [ 218.705235][ T30] audit: type=1400 audit(1784356309.322:828): avc: denied { write } for pid=7877 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.759367][ T30] audit: type=1400 audit(1784356309.372:829): avc: denied { write } for pid=7877 comm="syz.3.452" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 218.804710][ T187] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 218.985597][ T187] usb 7-1: Using ep0 maxpacket: 16 [ 219.166089][ T187] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 219.196732][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.225579][ T187] usb 7-1: Product: syz [ 219.248159][ T187] usb 7-1: Manufacturer: syz [ 219.261238][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 219.284345][ T187] usb 7-1: SerialNumber: syz [ 219.303046][ T187] usb 7-1: config 0 descriptor?? [ 219.355092][ T7744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.893206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 220.411711][ T187] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 220.457372][ C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 220.506169][ T29] usb 2-1: USB disconnect, device number 22 [ 221.150285][ T7936] fuse: Unknown parameter '0x0000000000000009' [ 221.274531][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.460154][ T7951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.489107][ T5719] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 221.693653][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 221.708644][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.751438][ T5719] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.795681][ T5719] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.837726][ T7951] XFS (nullb0): Invalid superblock magic number [ 221.850208][ T5719] usb 4-1: config 1 interface 1 has no altsetting 0 [ 222.871166][ T5719] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 223.258709][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.297226][ T5719] usb 4-1: Product: syz [ 223.340805][ T5719] usb 4-1: Manufacturer: syz [ 223.376946][ T5719] usb 4-1: SerialNumber: syz [ 223.445977][ T187] usb 7-1: USB disconnect, device number 8 [ 223.889885][ T7936] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 223.944499][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 224.216587][ T7936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.293030][ T5719] usb 4-1: selecting invalid altsetting 0 [ 224.683550][ T5719] usb 4-1: USB disconnect, device number 26 [ 225.165234][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.218907][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.847267][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 225.883349][ T8093] ip6erspan0: entered allmulticast mode [ 226.398689][ T7469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.833503][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8109 comm=syz.1.477 [ 228.218812][ T30] audit: type=1400 audit(1784356318.832:830): avc: denied { ioctl } for pid=8098 comm="syz.6.476" path="socket:[19405]" dev="sockfs" ino=19405 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.353940][ T30] audit: type=1400 audit(1784356318.892:831): avc: denied { bind } for pid=8098 comm="syz.6.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.972308][ T8141] input: syz0 as /devices/virtual/input/input23 [ 230.874849][ T194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.180586][ T7744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.507660][ T30] audit: type=1400 audit(1784356323.092:832): avc: denied { read } for pid=8180 comm="syz.6.488" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 232.646196][ T30] audit: type=1400 audit(1784356323.092:833): avc: denied { open } for pid=8180 comm="syz.6.488" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 232.699453][ T8194] IPVS: stopping master sync thread 7507 ... [ 232.733640][ T29] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 232.794329][ T30] audit: type=1400 audit(1784356323.092:834): avc: denied { ioctl } for pid=8180 comm="syz.6.488" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x5511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 232.935109][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 232.954376][ T29] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 232.990540][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.020395][ T29] usb 2-1: config 0 descriptor?? [ 233.246543][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 233.467904][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.980338][ T30] audit: type=1400 audit(1784356324.212:835): avc: denied { connect } for pid=8217 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.030530][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 234.042811][ T29] usb 2-1: media controller created [ 234.069949][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.270216][ T29] az6027: usb out operation failed. (-71) [ 234.295245][ T29] az6027: usb out operation failed. (-71) [ 234.309092][ T29] stb0899_attach: Driver disabled by Kconfig [ 234.326579][ T29] az6027: no front-end attached [ 234.326579][ T29] [ 234.349909][ T29] az6027: usb out operation failed. (-71) [ 234.365721][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 234.408450][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 234.461773][ T29] dvb-usb: schedule remote query interval to 400 msecs. [ 234.488618][ T29] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 234.513596][ T5719] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 234.614351][ T5706] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 234.636698][ T29] usb 2-1: USB disconnect, device number 23 [ 235.651566][ T5719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.664965][ T5719] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.678186][ T5719] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.809331][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.839589][ T5719] usb 7-1: config 0 descriptor?? [ 235.858913][ T5719] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 235.896326][ T29] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 235.912444][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 235.955915][ T5706] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 235.990769][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.116412][ T5706] usb 4-1: config 0 descriptor?? [ 236.690021][ T30] audit: type=1400 audit(1784356327.302:836): avc: denied { ioctl } for pid=8234 comm="syz.6.497" path="socket:[20640]" dev="sockfs" ino=20640 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.864846][ T5706] usb 4-1: can't set config #0, error -71 [ 236.903611][ T5706] usb 4-1: USB disconnect, device number 27 [ 236.913540][ T29] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 237.167543][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.262382][ T8291] capability: warning: `syz.3.502' uses deprecated v2 capabilities in a way that may be insecure [ 237.283806][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.330631][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 237.392623][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 237.453212][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 237.486899][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 237.536714][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.738578][ T29] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 237.767735][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.791014][ T29] usb 2-1: Product: syz [ 237.803651][ T29] usb 2-1: Manufacturer: syz [ 237.843865][ T29] usb 2-1: SerialNumber: syz [ 237.986297][ T6403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.049969][ T29] usb 2-1: config 0 descriptor?? [ 238.059091][ T8270] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 238.073143][ T29] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 238.305826][ T8312] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 238.312360][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.608493][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 238.676364][ T8316] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 238.682896][ T8316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.708913][ T8270] Bluetooth: hci6: Frame reassembly failed (-84) [ 238.728322][ T57] Bluetooth: hci6: Frame reassembly failed (-84) [ 238.749653][ T29] usb 7-1: USB disconnect, device number 9 [ 238.790259][ T8320] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 238.796797][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.813464][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 238.839391][ T8316] vhci_hcd vhci_hcd.0: Device attached [ 238.857892][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 238.877247][ T8312] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(5) [ 238.883762][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.934781][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 239.199390][ T8342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.379892][ T30] audit: type=1400 audit(1784356329.992:837): avc: denied { ioctl } for pid=8346 comm="syz.6.508" path="socket:[20891]" dev="sockfs" ino=20891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.491658][ T8322] vhci_hcd: connection closed [ 239.491854][ T57] vhci_hcd vhci_hcd.4: stop threads [ 239.491884][ T57] vhci_hcd vhci_hcd.4: release socket [ 239.495107][ T8338] vhci_hcd: connection closed [ 239.495868][ T8313] vhci_hcd: connection reset by peer [ 239.495879][ T57] vhci_hcd vhci_hcd.4: disconnect device [ 239.496016][ T8317] vhci_hcd: connection closed [ 239.496033][ T57] vhci_hcd vhci_hcd.4: stop threads [ 239.496047][ T57] vhci_hcd vhci_hcd.4: release socket [ 239.496108][ T57] vhci_hcd vhci_hcd.4: disconnect device [ 239.496255][ T57] vhci_hcd vhci_hcd.4: stop threads [ 239.496268][ T57] vhci_hcd vhci_hcd.4: release socket [ 239.496321][ T57] vhci_hcd vhci_hcd.4: disconnect device [ 239.496471][ T57] vhci_hcd vhci_hcd.4: stop threads [ 239.496484][ T57] vhci_hcd vhci_hcd.4: release socket [ 239.496537][ T57] vhci_hcd vhci_hcd.4: disconnect device [ 240.726951][ T5613] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 240.727755][ T5616] Bluetooth: hci6: command 0xfc11 tx timeout [ 241.674632][ T187] usb 2-1: USB disconnect, device number 24 [ 241.954680][ T30] audit: type=1400 audit(1784356332.552:838): avc: denied { getopt } for pid=8376 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.002720][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 242.723461][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 243.003471][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 243.034159][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.050083][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.089694][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.111915][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 243.128012][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.128256][ T8415] fuse: Bad value for 'rootmode' [ 243.143893][ T24] usb 2-1: Product: syz [ 243.178438][ T24] usb 2-1: Manufacturer: syz [ 243.204028][ T24] usb 2-1: SerialNumber: syz [ 243.451799][ T24] usb 2-1: 0:1 : does not exist [ 243.461322][ T24] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 243.513805][ T187] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 243.553232][ T5698] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 243.571361][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 243.602537][ T24] usb 2-1: USB disconnect, device number 25 [ 243.642545][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.686864][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.697627][ T187] usb 7-1: Using ep0 maxpacket: 16 [ 243.713649][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 243.723688][ T187] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.752829][ T5698] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 243.768122][ T187] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.783255][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.806970][ T187] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.821260][ T5698] usb 4-1: Product: syz [ 243.831434][ T5698] usb 4-1: Manufacturer: syz [ 243.846524][ T187] usb 7-1: config 1 interface 1 has no altsetting 0 [ 243.861804][ T5698] usb 4-1: SerialNumber: syz [ 243.875517][ T187] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 243.893034][ T5698] usb 4-1: config 0 descriptor?? [ 243.908149][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.917049][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 243.943368][ T187] usb 7-1: Product: syz [ 243.957767][ T187] usb 7-1: Manufacturer: syz [ 243.972950][ T187] usb 7-1: SerialNumber: syz [ 244.231566][ T8415] netlink: 'syz.6.518': attribute type 1 has an invalid length. [ 244.282819][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.518'. [ 244.301363][ T8461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=576 (1152 ns) > initial count (24 ns). Using initial count to start timer. [ 244.314901][ T8415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.385773][ T187] usb 7-1: selecting invalid altsetting 0 [ 244.455903][ T5698] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 244.514760][ T5698] usb 4-1: USB disconnect, device number 28 [ 244.556128][ T187] usb 7-1: USB disconnect, device number 10 [ 244.724333][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.103984][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 245.118928][ T5342] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 245.136344][ T5342] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 245.150225][ T5342] usb 5-1: USB disconnect, device number 11 [ 245.285704][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 245.300697][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.310538][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.354168][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.391469][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.453354][ T5342] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 245.572119][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.603436][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.627787][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.649471][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.691118][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.716896][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.732054][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.757484][ T5342] usb 5-1: Using ep0 maxpacket: 16 [ 245.848125][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.871404][ T5342] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 245.901521][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.915644][ T5342] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 245.927793][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.940761][ T5342] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.279833][ T5342] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.289873][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.321806][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.335676][ T5342] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.374307][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.392199][ T5342] usb 5-1: config 0 has no interface number 0 [ 246.424838][ T5342] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 246.440987][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.464769][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.478615][ T5342] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 246.493988][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.526803][ T5342] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.541206][ T8579] xt_hashlimit: size too large, truncated to 1048576 [ 246.559203][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.581331][ T5342] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.607465][ T30] audit: type=1400 audit(1784356337.222:839): avc: denied { ioctl } for pid=8574 comm="syz.6.528" path="socket:[19858]" dev="sockfs" ino=19858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.610849][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.652345][ T5342] usb 5-1: config 0 interface 125 has no altsetting 0 [ 246.681445][ T5342] usb 5-1: config 0 interface 125 has no altsetting 2 [ 246.727063][ T5342] usb 5-1: string descriptor 0 read error: -71 [ 246.796685][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.818814][ T5342] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 248.021469][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 248.028163][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.063056][ T5342] usb 5-1: config 0 descriptor?? [ 248.081172][ T5342] usb 5-1: can't set config #0, error -71 [ 248.090171][ T24] usb 2-1: string descriptor 0 read error: -71 [ 248.106756][ T5342] usb 5-1: USB disconnect, device number 12 [ 248.112956][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 248.135708][ T24] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 248.174897][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.234421][ T24] usb 2-1: config 0 descriptor?? [ 248.352825][ T24] usb 2-1: can't set config #0, error -71 [ 248.428923][ T24] usb 2-1: USB disconnect, device number 26 [ 249.189052][ T8615] macsec1: entered promiscuous mode [ 249.426145][ T8624] fuse: Bad value for 'rootmode' [ 249.445198][ T194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.913508][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 250.104054][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.110438][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.273227][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 250.301970][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.342239][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 250.388062][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.520773][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 250.544705][ T10] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 250.572264][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.643670][ T10] usb 2-1: Product: syz [ 250.674878][ T10] usb 2-1: Manufacturer: syz [ 251.051267][ T10] usb 2-1: SerialNumber: syz [ 251.386156][ T8657] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 251.410078][ T8657] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 251.630741][ T8654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.747043][ T8624] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 251.799437][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 251.951211][ T8624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.951941][ T30] audit: type=1400 audit(1784356342.562:840): avc: denied { write } for pid=8697 comm="syz.4.540" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 251.993395][ T30] audit: type=1400 audit(1784356342.562:841): avc: denied { open } for pid=8697 comm="syz.4.540" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 252.205298][ T10] usb 2-1: selecting invalid altsetting 0 [ 252.222627][ T8662] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 252.266499][ T8701] 0x000000000002-0x000000000004 : "" [ 252.280894][ T8701] ftl_cs: FTL header corrupt! [ 252.293496][ T30] audit: type=1400 audit(1784356342.882:842): avc: denied { ioctl } for pid=8697 comm="syz.4.540" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 252.385997][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 252.728795][ T10] usb 2-1: USB disconnect, device number 27 [ 252.939499][ T30] audit: type=1400 audit(1784356343.552:843): avc: denied { setopt } for pid=8752 comm="syz.6.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.987537][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.033599][ T5705] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 253.207455][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25988, setting to 64 [ 253.239412][ T5705] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 253.295001][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.618502][ T5705] usb 4-1: Product: syz [ 253.637405][ T5705] usb 4-1: Manufacturer: syz [ 253.654769][ T5705] usb 4-1: SerialNumber: syz [ 253.688900][ T5705] usb 4-1: config 0 descriptor?? [ 253.714337][ T8702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.113953][ T194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.137054][ T5705] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 254.396396][ T5705] usb 4-1: USB disconnect, device number 29 [ 254.402370][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 255.681480][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.012165][ T8825] fuse: Bad value for 'rootmode' [ 256.036777][ T8825] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 256.155598][ T5342] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 256.325104][ T5342] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 256.347233][ T5342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.353299][ T5705] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 256.384054][ T5342] usb 7-1: config 0 descriptor?? [ 256.543273][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 256.639787][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.913628][ T30] audit: type=1400 audit(1784356347.462:844): avc: denied { write } for pid=8846 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 257.051270][ T5705] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 257.077975][ T30] audit: type=1400 audit(1784356347.472:845): avc: denied { listen } for pid=8846 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 257.105888][ T5705] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.154380][ T5705] usb 4-1: config 1 interface 1 has no altsetting 0 [ 257.182879][ T5705] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 257.205171][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.231586][ T5705] usb 4-1: Product: syz [ 257.245866][ T5705] usb 4-1: Manufacturer: syz [ 257.261261][ T5705] usb 4-1: SerialNumber: syz [ 257.518821][ T8825] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 257.573948][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 257.728444][ T30] audit: type=1400 audit(1784356348.342:846): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 257.734021][ T8825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.761302][ T5342] usb 7-1: Cannot set autoneg [ 257.807521][ T5342] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 258.176194][ T5342] usb 7-1: USB disconnect, device number 11 [ 258.204722][ T5705] usb 4-1: selecting invalid altsetting 0 [ 258.317488][ T5705] usb 4-1: USB disconnect, device number 30 [ 259.075616][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.197023][ T5342] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 259.403924][ T5342] usb 7-1: Using ep0 maxpacket: 8 [ 259.422007][ T5342] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.456279][ T5342] usb 7-1: config 179 has no interface number 0 [ 259.649419][ T5342] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 259.675055][ T6403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.719664][ T5342] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 259.783650][ T5342] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.897237][ T5342] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.931215][ T5342] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 259.952560][ T5342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.024697][ T8933] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 260.070484][ T5342] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 260.658530][ T30] audit: type=1400 audit(1784356351.272:847): avc: denied { create } for pid=8979 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 260.964142][ T6403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.981698][ T9011] binder: 9010:9011 ioctl c0286405 200000003240 returned -22 [ 261.032498][ T9011] binder: 9010:9011 ioctl c018937b 200000003600 returned -22 [ 261.061900][ T9011] binder: 9010:9011 ioctl c018937b 200000003740 returned -22 [ 261.293250][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 261.473072][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.518024][ T29] usb 5-1: config index 0 descriptor too short (expected 198, got 134) [ 261.560568][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.614566][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.678464][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 261.728224][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.759242][ T29] usb 5-1: Product: syz [ 261.777683][ T29] usb 5-1: Manufacturer: syz [ 261.791903][ T29] usb 5-1: SerialNumber: syz [ 261.895342][ T29] usb 5-1: 0:1 : does not exist [ 263.128192][ T9111] xt_HMARK: proto mask must be zero with L3 mode [ 263.795801][ T5705] usb 7-1: USB disconnect, device number 12 [ 263.998567][ T9134] fuse: Bad value for 'rootmode' [ 264.058199][ T29] usb 5-1: unit 0 not found! [ 264.353246][ T29] usb 5-1: USB disconnect, device number 13 [ 264.403289][ T805] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 264.510747][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.617866][ T805] usb 7-1: Using ep0 maxpacket: 16 [ 264.663758][ T805] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.695556][ T805] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.721883][ T805] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.761001][ T805] usb 7-1: config 1 interface 1 has no altsetting 0 [ 264.779306][ T805] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 264.806606][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.832150][ T805] usb 7-1: Product: syz [ 264.854427][ T805] usb 7-1: Manufacturer: syz [ 264.869963][ T805] usb 7-1: SerialNumber: syz [ 265.172012][ T9134] netlink: 'syz.6.574': attribute type 1 has an invalid length. [ 265.219411][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.574'. [ 265.496745][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.148188][ T9134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.212749][ T9226] binder: 9225:9226 ioctl c0306201 200000000480 returned -14 [ 266.231623][ T805] usb 7-1: selecting invalid altsetting 0 [ 266.356449][ T805] usb 7-1: USB disconnect, device number 13 [ 266.687478][ T9248] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 266.715409][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.831793][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.103241][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 267.296504][ T29] usb 4-1: config 2 has an invalid descriptor of length 83, skipping remainder of the config [ 267.325324][ T29] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.384666][ T29] usb 4-1: config 2 interface 0 has no altsetting 0 [ 267.412247][ T29] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 267.436077][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.451832][ T29] usb 4-1: Product: syz [ 267.465088][ T29] usb 4-1: Manufacturer: syz [ 267.483986][ T29] usb 4-1: SerialNumber: syz [ 267.493943][ T30] audit: type=1400 audit(1784356358.102:848): avc: denied { connect } for pid=9279 comm="syz.6.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.497788][ T9282] netlink: 52 bytes leftover after parsing attributes in process `syz.6.585'. [ 267.756124][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.765172][ T30] audit: type=1400 audit(1784356358.362:849): avc: denied { create } for pid=9259 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 267.793723][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.834354][ T9260] scsi_nl_rcv_msg: discarding partial skb [ 267.841517][ T30] audit: type=1400 audit(1784356358.452:850): avc: denied { write } for pid=9259 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 267.876376][ T29] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 267.900940][ T29] usb 4-1: USB disconnect, device number 31 [ 269.247565][ T9317] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 269.418939][ T9317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.581905][ T9362] binder: 9361:9362 ioctl c0306201 200000000480 returned -14 [ 270.022234][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 270.224736][ T9] usb 4-1: config index 0 descriptor too short (expected 45, got 28) [ 270.249342][ T9] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 270.281078][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.318076][ T9383] fuse: Bad value for 'rootmode' [ 270.341328][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 270.384742][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.415899][ T9] usb 4-1: Product: syz [ 270.428705][ T9] usb 4-1: Manufacturer: syz [ 270.507592][ T30] audit: type=1400 audit(1784356361.122:851): avc: denied { read } for pid=9387 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.674057][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 270.834203][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 270.862866][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.906886][ T29] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.946111][ T29] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.980097][ T29] usb 7-1: config 1 interface 1 has no altsetting 0 [ 271.007773][ T29] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 271.027139][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.064776][ T29] usb 7-1: Product: syz [ 271.082436][ T29] usb 7-1: Manufacturer: syz [ 271.097574][ T29] usb 7-1: SerialNumber: syz [ 271.206673][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.495053][ T9] usb 4-1: SerialNumber: syz [ 271.518533][ T9383] netlink: 'syz.6.595': attribute type 1 has an invalid length. [ 271.557979][ T9] rtl8150 4-1:1.0: couldn't find required endpoints [ 271.563816][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.595'. [ 271.583678][ T9] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 271.658750][ T9383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.689614][ T29] usb 7-1: selecting invalid altsetting 0 [ 271.710860][ T30] audit: type=1400 audit(1784356362.332:852): avc: denied { setopt } for pid=9414 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.671450][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.842022][ T29] usb 7-1: USB disconnect, device number 14 [ 272.975365][ T9317] bond6: (slave veth3): Enslaving as an active interface with a down link [ 273.133800][ T9330] bond6: (slave dummy0): making interface the new active one [ 273.173138][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.191509][ T9502] binder: 9501:9502 ioctl c0306201 200000000480 returned -14 [ 273.210534][ T9330] dummy0: entered promiscuous mode [ 273.240593][ T9330] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 273.322669][ T9482] bond6 (unregistering): (slave veth3): Releasing active interface [ 273.346758][ T9507] capability: warning: `syz.6.606' uses 32-bit capabilities (legacy support in use) [ 273.407643][ T9482] bond6 (unregistering): (slave dummy0): Releasing active interface [ 273.426931][ T9482] bond6 (unregistering): Released all slaves [ 273.460093][ T9515] netlink: 'syz.0.605': attribute type 27 has an invalid length. [ 273.661699][ T24] usb 4-1: USB disconnect, device number 32 [ 273.766959][ T9515] bond0: (slave bond_slave_1): Releasing backup interface [ 274.188853][ T9511] netlink: 72 bytes leftover after parsing attributes in process `syz.4.607'. [ 274.224739][ T9511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.607'. [ 274.955962][ T9597] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 275.075211][ T29] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 276.712948][ T9613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9613 comm=syz.0.616 [ 276.806994][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.981604][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.666955][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.680697][ T29] usb 4-1: Product: syz [ 277.684940][ T29] usb 4-1: Manufacturer: syz [ 277.689531][ T29] usb 4-1: SerialNumber: syz [ 277.927065][ T9626] binder: 9612:9626 ioctl c0306201 200000000480 returned -14 [ 277.974168][ T29] usb 4-1: can't set config #1, error -71 [ 278.004088][ T29] usb 4-1: USB disconnect, device number 33 [ 278.214049][ T30] audit: type=1400 audit(1784356368.822:853): avc: denied { setopt } for pid=9643 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.233879][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.900804][ T29] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 278.978805][ T30] audit: type=1400 audit(1784356369.592:854): avc: denied { write } for pid=9659 comm="syz.1.624" path="socket:[22596]" dev="sockfs" ino=22596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.100230][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.158126][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 279.800942][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 279.832153][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 279.875733][ T9668] netlink: 27 bytes leftover after parsing attributes in process `syz.6.625'. [ 279.890632][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.945601][ T29] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 279.956319][ T9668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 279.977145][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 279.986618][ T29] usb 4-1: Product: syz [ 279.994464][ T29] usb 4-1: Manufacturer: syz [ 280.001744][ T29] usb 4-1: SerialNumber: syz [ 280.014382][ T29] usb 4-1: config 0 descriptor?? [ 280.485516][ T29] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 280.507804][ T29] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 280.914232][ T29] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 280.921881][ T29] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 280.935802][ T29] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 281.122601][ T9637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.234700][ T9637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.324542][ T9706] FAULT_INJECTION: forcing a failure. [ 281.324542][ T9706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.337689][ T9706] CPU: 0 UID: 0 PID: 9706 Comm: syz.1.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.337716][ T9706] Tainted: [L]=SOFTLOCKUP [ 281.337722][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 281.337733][ T9706] Call Trace: [ 281.337739][ T9706] [ 281.337746][ T9706] dump_stack_lvl+0x100/0x190 [ 281.337773][ T9706] should_fail_ex.cold+0x5/0xa [ 281.337795][ T9706] _copy_to_user+0x32/0xd0 [ 281.337819][ T9706] simple_read_from_buffer+0xcb/0x170 [ 281.337849][ T9706] proc_fail_nth_read+0x1af/0x230 [ 281.337874][ T9706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.337901][ T9706] ? rw_verify_area+0xce/0x6d0 [ 281.337923][ T9706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.337946][ T9706] vfs_read+0x1e4/0xb40 [ 281.337973][ T9706] ? __pfx_vfs_read+0x10/0x10 [ 281.337997][ T9706] ? __fget_files+0x215/0x3d0 [ 281.338029][ T9706] ? __fget_files+0x21f/0x3d0 [ 281.338063][ T9706] ksys_read+0x12a/0x250 [ 281.338085][ T9706] ? __pfx_ksys_read+0x10/0x10 [ 281.338109][ T9706] ? trace_hardirqs_off+0x70/0x170 [ 281.338137][ T9706] do_syscall_64+0x115/0x870 [ 281.338162][ T9706] ? clear_bhb_loop+0x40/0x90 [ 281.338189][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.338207][ T9706] RIP: 0033:0x7f7939b5e6ce [ 281.338222][ T9706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.338239][ T9706] RSP: 002b:00007f793aa1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.338257][ T9706] RAX: ffffffffffffffda RBX: 00007f793aa206c0 RCX: 00007f7939b5e6ce [ 281.338269][ T9706] RDX: 000000000000000f RSI: 00007f793aa200a0 RDI: 0000000000000009 [ 281.338280][ T9706] RBP: 00007f793aa20090 R08: 0000000000000000 R09: 0000000000000000 [ 281.338290][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.338300][ T9706] R13: 00007f7939e26218 R14: 00007f7939e26180 R15: 00007ffcea4a80c8 [ 281.338325][ T9706] [ 281.596713][ T29] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 281.610176][ T29] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 282.046903][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.055194][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.163943][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.379286][ T9637] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 282.415857][ T9729] loop2: detected capacity change from 0 to 7 [ 282.645768][ T9735] FAULT_INJECTION: forcing a failure. [ 282.645768][ T9735] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 282.661551][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.6.635 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.661578][ T9735] Tainted: [L]=SOFTLOCKUP [ 282.661584][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 282.661593][ T9735] Call Trace: [ 282.661599][ T9735] [ 282.661605][ T9735] dump_stack_lvl+0x100/0x190 [ 282.661626][ T9735] should_fail_ex.cold+0x5/0xa [ 282.661642][ T9735] ? prepare_alloc_pages+0x16d/0x5f0 [ 282.661665][ T9735] should_fail_alloc_page+0xeb/0x140 [ 282.661686][ T9735] prepare_alloc_pages+0x1f0/0x5f0 [ 282.661709][ T9735] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 282.661733][ T9735] ? rcu_is_watching+0x12/0xc0 [ 282.661749][ T9735] ? trace_mm_page_alloc+0x164/0x1c0 [ 282.661762][ T9735] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 282.661785][ T9735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.661812][ T9735] ? is_bpf_text_address+0x8a/0x1a0 [ 282.661833][ T9735] ? bpf_ksym_find+0x128/0x1c0 [ 282.661854][ T9735] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 282.661874][ T9735] ? is_bpf_text_address+0x94/0x1a0 [ 282.661887][ T9735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.661904][ T9735] ? __kernel_text_address+0xd/0x30 [ 282.661926][ T9735] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 282.661957][ T9735] ? policy_nodemask+0xed/0x4f0 [ 282.661979][ T9735] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 282.662012][ T9735] __kasan_populate_vmalloc+0xf0/0x210 [ 282.662032][ T9735] alloc_vmap_area+0x95d/0x2bb0 [ 282.662048][ T9735] ? kasan_save_track+0x14/0x30 [ 282.662059][ T9735] ? __kasan_kmalloc+0xaa/0xb0 [ 282.662072][ T9735] ? __pfx_alloc_vmap_area+0x10/0x10 [ 282.662091][ T9735] ? __get_vm_area_node+0x101/0x330 [ 282.662113][ T9735] __get_vm_area_node+0x1ca/0x330 [ 282.662137][ T9735] __vmalloc_node_range_noprof+0x228/0x1630 [ 282.662161][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 282.662173][ T9735] ? find_held_lock+0x2b/0x80 [ 282.662189][ T9735] ? __lock_acquire+0x49f/0x1a40 [ 282.662202][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 282.662223][ T9735] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.662244][ T9735] ? find_held_lock+0x2b/0x80 [ 282.662266][ T9735] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 282.662282][ T9735] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 282.662299][ T9735] ? avc_has_perm_noaudit+0x145/0x3b0 [ 282.662311][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 282.662323][ T9735] __vmalloc_node_noprof+0xad/0xf0 [ 282.662336][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 282.662350][ T9735] __vmalloc_noprof+0xa3/0x120 [ 282.662367][ T9735] ? __pfx___vmalloc_noprof+0x10/0x10 [ 282.662390][ T9735] ? rcu_is_watching+0x12/0xc0 [ 282.662411][ T9735] ? cap_capable+0x107/0x430 [ 282.662431][ T9735] bpf_prog_alloc_no_stats+0x59/0x630 [ 282.662446][ T9735] ? security_capable+0x80/0x260 [ 282.662459][ T9735] bpf_prog_alloc+0x3b/0x200 [ 282.662470][ T9735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.662482][ T9735] bpf_prog_load+0x4a9/0x2fa0 [ 282.662501][ T9735] ? __pfx_bpf_prog_load+0x10/0x10 [ 282.662523][ T9735] ? irqentry_exit+0x24d/0xa00 [ 282.662570][ T9735] __sys_bpf+0x18dc/0x4e80 [ 282.662595][ T9735] ? __pfx___sys_bpf+0x10/0x10 [ 282.662611][ T9735] ? find_held_lock+0x2b/0x80 [ 282.662626][ T9735] ? get_pid_task+0xfc/0x250 [ 282.662640][ T9735] ? get_pid_task+0xfc/0x250 [ 282.662668][ T9735] ? find_held_lock+0x2b/0x80 [ 282.662695][ T9735] ? rcu_read_lock_any_held+0x6a/0xa0 [ 282.662719][ T9735] ? find_held_lock+0x2b/0x80 [ 282.662738][ T9735] ? ksys_write+0x190/0x250 [ 282.662752][ T9735] ? ksys_write+0x190/0x250 [ 282.662776][ T9735] ? fput+0x79/0x100 [ 282.662789][ T9735] ? __x64_sys_bpf+0xce/0x140 [ 282.662801][ T9735] __x64_sys_bpf+0xce/0x140 [ 282.662816][ T9735] ? do_syscall_64+0x90/0x870 [ 282.662841][ T9735] do_syscall_64+0x115/0x870 [ 282.662864][ T9735] ? clear_bhb_loop+0x40/0x90 [ 282.662881][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.662892][ T9735] RIP: 0033:0x7fa5d799de99 [ 282.662902][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.662912][ T9735] RSP: 002b:00007fa5d883f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.662923][ T9735] RAX: ffffffffffffffda RBX: 00007fa5d7c26180 RCX: 00007fa5d799de99 [ 282.662930][ T9735] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 282.662936][ T9735] RBP: 00007fa5d883f090 R08: 0000000000000000 R09: 0000000000000000 [ 282.662945][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.662954][ T9735] R13: 00007fa5d7c26218 R14: 00007fa5d7c26180 R15: 00007ffc867327a8 [ 282.662976][ T9735] [ 283.112652][ T9735] syz.6.635: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 283.129331][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.6.635 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.129356][ T9735] Tainted: [L]=SOFTLOCKUP [ 283.129362][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 283.129371][ T9735] Call Trace: [ 283.129376][ T9735] [ 283.129382][ T9735] dump_stack_lvl+0x100/0x190 [ 283.129402][ T9735] warn_alloc.cold+0x94/0xa8 [ 283.129419][ T9735] ? __pfx_warn_alloc+0x10/0x10 [ 283.129444][ T9735] ? lockdep_hardirqs_on+0x78/0x100 [ 283.129471][ T9735] ? __get_vm_area_node+0x2cd/0x330 [ 283.129493][ T9735] ? __get_vm_area_node+0x208/0x330 [ 283.129509][ T9735] __vmalloc_node_range_noprof+0xccd/0x1630 [ 283.129523][ T9735] ? find_held_lock+0x2b/0x80 [ 283.129540][ T9735] ? __lock_acquire+0x49f/0x1a40 [ 283.129555][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 283.129582][ T9735] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.129603][ T9735] ? find_held_lock+0x2b/0x80 [ 283.129624][ T9735] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 283.129639][ T9735] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 283.129652][ T9735] ? avc_has_perm_noaudit+0x145/0x3b0 [ 283.129663][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 283.129675][ T9735] __vmalloc_node_noprof+0xad/0xf0 [ 283.129689][ T9735] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 283.129711][ T9735] __vmalloc_noprof+0xa3/0x120 [ 283.129732][ T9735] ? __pfx___vmalloc_noprof+0x10/0x10 [ 283.129755][ T9735] ? rcu_is_watching+0x12/0xc0 [ 283.129776][ T9735] ? cap_capable+0x107/0x430 [ 283.129792][ T9735] bpf_prog_alloc_no_stats+0x59/0x630 [ 283.129803][ T9735] ? security_capable+0x80/0x260 [ 283.129816][ T9735] bpf_prog_alloc+0x3b/0x200 [ 283.129827][ T9735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.129839][ T9735] bpf_prog_load+0x4a9/0x2fa0 [ 283.129868][ T9735] ? __pfx_bpf_prog_load+0x10/0x10 [ 283.129890][ T9735] ? irqentry_exit+0x24d/0xa00 [ 283.129932][ T9735] __sys_bpf+0x18dc/0x4e80 [ 283.129952][ T9735] ? __pfx___sys_bpf+0x10/0x10 [ 283.129968][ T9735] ? find_held_lock+0x2b/0x80 [ 283.129983][ T9735] ? get_pid_task+0xfc/0x250 [ 283.130003][ T9735] ? get_pid_task+0xfc/0x250 [ 283.130033][ T9735] ? find_held_lock+0x2b/0x80 [ 283.130060][ T9735] ? rcu_read_lock_any_held+0x6a/0xa0 [ 283.130079][ T9735] ? find_held_lock+0x2b/0x80 [ 283.130093][ T9735] ? ksys_write+0x190/0x250 [ 283.130108][ T9735] ? ksys_write+0x190/0x250 [ 283.130133][ T9735] ? fput+0x79/0x100 [ 283.130154][ T9735] ? __x64_sys_bpf+0xce/0x140 [ 283.130168][ T9735] __x64_sys_bpf+0xce/0x140 [ 283.130183][ T9735] ? do_syscall_64+0x90/0x870 [ 283.130207][ T9735] do_syscall_64+0x115/0x870 [ 283.130225][ T9735] ? clear_bhb_loop+0x40/0x90 [ 283.130238][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.130248][ T9735] RIP: 0033:0x7fa5d799de99 [ 283.130259][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.130269][ T9735] RSP: 002b:00007fa5d883f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.130281][ T9735] RAX: ffffffffffffffda RBX: 00007fa5d7c26180 RCX: 00007fa5d799de99 [ 283.130291][ T9735] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 283.130301][ T9735] RBP: 00007fa5d883f090 R08: 0000000000000000 R09: 0000000000000000 [ 283.130311][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.130320][ T9735] R13: 00007fa5d7c26218 R14: 00007fa5d7c26180 R15: 00007ffc867327a8 [ 283.130342][ T9735] [ 283.130361][ T9735] Mem-Info: [ 283.477138][ T9735] active_anon:25138 inactive_anon:0 isolated_anon:0 [ 283.477138][ T9735] active_file:0 inactive_file:62567 isolated_file:0 [ 283.477138][ T9735] unevictable:768 dirty:250 writeback:0 [ 283.477138][ T9735] slab_reclaimable:12037 slab_unreclaimable:107847 [ 283.477138][ T9735] mapped:46610 shmem:13010 pagetables:1626 [ 283.477138][ T9735] sec_pagetables:0 bounce:0 [ 283.477138][ T9735] kernel_misc_reclaimable:0 [ 283.477138][ T9735] free:1234388 free_pcp:26873 free_cma:0 [ 283.522370][ T9735] Node 0 active_anon:100548kB inactive_anon:0kB active_file:0kB inactive_file:250052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:186440kB dirty:1000kB writeback:0kB shmem:50500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13660kB pagetables:6380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.556772][ T9735] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.590584][ T9735] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.621370][ T9735] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 283.627224][ T9735] Node 0 DMA32 free:978804kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100500kB inactive_anon:0kB active_file:0kB inactive_file:250052kB unevictable:1536kB writepending:1004kB zspages:0kB present:3129332kB managed:2532308kB mlocked:0kB bounce:0kB free_pcp:103808kB local_pcp:35220kB free_cma:0kB [ 283.661145][ T9735] lowmem_reserve[]: 0 0 0 0 0 [ 283.666023][ T9735] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.695970][ T29] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 283.698842][ T29] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 283.706949][ T9735] lowmem_reserve[]: 0 0 0 0 0 [ 283.720248][ T9735] Node 1 Normal free:3943288kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2948kB local_pcp:2732kB free_cma:0kB [ 283.752740][ T9735] lowmem_reserve[]: 0 0 0 0 0 [ 283.755080][ T9729] Dev loop2: unable to read RDB block 7 [ 283.758737][ T9735] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.780107][ T9735] Node 0 DMA32: 646*4kB (U) 126*8kB (UE) 88*16kB (UM) 940*32kB (UM) 317*64kB (UME) 192*128kB (UME) 163*256kB (UME) 38*512kB (UME) 14*1024kB (UME) 12*2048kB (UME) 195*4096kB (UM) = 978760kB [ 283.799684][ T9735] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.811837][ T9735] Node 1 Normal: 2*4kB (U) 0*8kB 1*16kB (U) 5*32kB (UM) 5*64kB (U) 5*128kB (U) 1*256kB (U) 3*512kB (UM) 2*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3943288kB [ 283.828946][ T9735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.838844][ T9735] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.848248][ T9735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.857916][ T9735] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.860565][ T9729] loop2: AHDI p1 p2 p3 [ 283.867559][ T9735] 75610 total pagecache pages [ 283.878108][ T9735] 0 pages in swap cache [ 283.882333][ T9735] Free swap = 124996kB [ 283.886625][ T9735] Total swap = 124996kB [ 283.890778][ T9735] 2097051 pages RAM [ 283.893218][ T24] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 283.895659][ T9735] 0 pages HighMem/MovableOnly [ 283.906859][ T9735] 432263 pages reserved [ 283.911056][ T9735] 0 pages cma reserved [ 284.051077][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.103442][ T9729] loop2: partition table partially beyond EOD, truncated [ 284.256192][ T29] usb 4-1: USB disconnect, device number 34 [ 284.353531][ T9753] process 'syz.0.637' launched './file0' with NULL argv: empty string added [ 284.401469][ T30] audit: type=1400 audit(1784356374.962:855): avc: denied { execute } for pid=9743 comm="syz.0.637" name="file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 284.730686][ T9729] loop2: p1 start 1601398130 is beyond EOD, truncated [ 284.763335][ T9729] loop2: p2 start 1702059890 is beyond EOD, truncated [ 284.812881][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 284.850781][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 284.885931][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 284.887679][ T30] audit: type=1400 audit(1784356374.982:856): avc: denied { execute_no_trans } for pid=9743 comm="syz.0.637" path="/143/file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 284.979749][ T24] usb 7-1: string descriptor 0 read error: -22 [ 285.035422][ T24] usb 7-1: New USB device found, idVendor=0499, idProduct=2000, bcdDevice= 0.40 [ 285.061272][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.098067][ T9765] fuse: Bad value for 'rootmode' [ 285.109282][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.137975][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 285.145828][ T30] audit: type=1400 audit(1784356375.012:857): avc: denied { create } for pid=9743 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 285.184524][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.641'. [ 285.202484][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.241888][ T24] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 285.268142][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.291461][ T9777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.316760][ T9777] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 285.402396][ T24] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 285.429397][ T9777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.454704][ T9777] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 285.477585][ T24] usb 7-1: USB disconnect, device number 15 [ 285.560630][ T9777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.582994][ T9777] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 285.649452][ T9777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.664440][ T9777] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 285.754387][ T9777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.779185][ T9777] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 285.880688][ T9777] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 285.899129][ T9777] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 286.250163][ T57] Bluetooth: hci6: Frame reassembly failed (-84) [ 286.386829][ T9831] smc: net device vlan1 applied user defined pnetid SYZ2 [ 286.448340][ T9764] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 287.488482][ T9868] input: syz1 as /devices/virtual/input/input28 [ 287.496388][ T9868] input: failed to attach handler leds to device input28, error: -6 [ 287.842787][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.865683][ T5706] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 288.284586][ T5706] usb 4-1: config 4 has an invalid interface number: 4 but max is 1 [ 288.302620][ T5706] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 288.315305][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 288.332744][ T5706] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 288.374917][ T5706] usb 4-1: config 4 has an invalid interface number: 198 but max is 1 [ 288.418205][ T5706] usb 4-1: config 4 has no interface number 0 [ 288.463763][ T5706] usb 4-1: config 4 has no interface number 1 [ 288.503279][ T5706] usb 4-1: config 4 interface 4 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 288.561694][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 288.730531][ T5706] usb 4-1: config 4 interface 4 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 1023 [ 288.771327][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8C, skipping [ 288.827955][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 288.860190][ T5706] usb 4-1: config 4 interface 4 altsetting 11 endpoint 0x8 has invalid maxpacket 38073, setting to 64 [ 288.906624][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 289.092961][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 289.151098][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 289.223202][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 289.264859][ T5706] usb 4-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 289.311522][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 289.356309][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 289.397239][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 289.446033][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 289.491086][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 289.530754][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 289.579214][ T5706] usb 4-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 289.631888][ T5706] usb 4-1: config 4 interface 198 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 289.675866][ T5706] usb 4-1: config 4 interface 4 has no altsetting 0 [ 289.709089][ T5706] usb 4-1: config 4 interface 198 has no altsetting 0 [ 289.746806][ T5706] usb 4-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=8b.d1 [ 289.754019][ T9859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.788727][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.833833][ T5706] usb 4-1: Product: syz [ 289.860871][ T5706] usb 4-1: Manufacturer: syz [ 289.876582][ T5706] usb 4-1: SerialNumber: syz [ 289.923060][ T5706] usb 4-1: Interface #198 referenced by multiple IADs [ 289.965719][ T9878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 289.985007][ T9878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 290.712487][ T5706] usb 4-1: USB disconnect, device number 35 [ 290.913475][ T5705] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 291.115937][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.363829][ T5705] usb 2-1: not running at top speed; connect to a high speed hub [ 291.402402][ T5705] usb 2-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 291.433660][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.474055][ T5705] usb 2-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 291.503409][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.536560][ T5705] usb 2-1: Product: syz [ 291.554426][ T5705] usb 2-1: Manufacturer: syz [ 291.573392][ T5705] usb 2-1: SerialNumber: syz [ 292.098466][ T9983] netlink: 48 bytes leftover after parsing attributes in process `syz.4.662'. [ 292.157859][ T9985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=9985 comm=syz.3.663 [ 292.280761][ T9985] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 292.603609][ T9994] 9p: Bad value for 'rfdno' [ 292.924592][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 293.203606][ T5342] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 293.303488][T10014] fuse: Bad value for 'rootmode' [ 293.406898][ T5342] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 293.446899][ T5342] usb 4-1: config 0 has no interface number 0 [ 293.476686][ T5342] usb 4-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 293.531413][ T5705] usb 2-1: 0:108 : does not exist [ 293.553797][ T5342] usb 4-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 293.585776][ T5705] usb 2-1: 0:181 : does not exist [ 293.601655][ T1052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.619364][ T5342] usb 4-1: config 0 interface 13 has no altsetting 0 [ 293.650727][ T5342] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 293.691956][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.715802][ T5342] usb 4-1: Product: syz [ 293.729388][ T5342] usb 4-1: Manufacturer: syz [ 293.743510][ T5342] usb 4-1: SerialNumber: syz [ 293.747153][T10015] Bluetooth: MGMT ver 1.23 [ 293.771237][ T5705] usb 2-1: USB disconnect, device number 28 [ 293.873377][ T5342] usb 4-1: config 0 descriptor?? [ 293.886486][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.915476][ T5342] ftdi_sio 4-1:0.13: FTDI USB Serial Device converter detected [ 293.947354][ T5342] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 293.983552][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 294.193542][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 294.242145][ T29] usb 5-1: config index 0 descriptor too short (expected 8616, got 36) [ 294.285421][ T29] usb 5-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.328871][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.358885][ T29] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 294.394460][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.450584][ T29] usb 5-1: config 0 descriptor?? [ 294.876155][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.017121][T10074] fuse: Bad value for 'rootmode' [ 295.326194][ T5342] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 295.493232][ T5342] usb 2-1: Using ep0 maxpacket: 16 [ 295.502748][T10015] trusted_key: encrypted_key: insufficient parameters specified [ 295.566377][ T5342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.721687][ T5342] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 295.738453][ T5342] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.749319][ T5342] usb 2-1: config 1 interface 1 has no altsetting 0 [ 295.784275][ T5342] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 295.797606][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.830996][ T5342] usb 2-1: Product: syz [ 295.843517][ T30] audit: type=1400 audit(1784356386.462:858): avc: denied { map } for pid=10009 comm="syz.4.667" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 295.847535][ T5342] usb 2-1: Manufacturer: syz [ 295.949531][ T5342] usb 2-1: SerialNumber: syz [ 296.091891][T10089] 9p: Bad value for 'rfdno' [ 296.158102][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 13153 jiffies old. [ 296.208692][T10074] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 296.295997][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 296.385782][T10015] bond0: entered promiscuous mode [ 296.409833][T10015] bond_slave_0: entered promiscuous mode [ 296.432440][T10015] bond_slave_1: entered promiscuous mode [ 296.492928][T10015] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 296.771453][T10074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.914743][T10100] netlink: 'syz.0.678': attribute type 3 has an invalid length. [ 296.990605][ T5342] usb 2-1: selecting invalid altsetting 0 [ 297.241805][ T5342] usb 2-1: USB disconnect, device number 29 [ 297.415281][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.827557][ T30] audit: type=1400 audit(1784356388.442:859): avc: denied { read } for pid=10172 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.083887][ T30] audit: type=1400 audit(1784356388.692:860): avc: denied { map } for pid=10172 comm="syz.0.679" path="socket:[23917]" dev="sockfs" ino=23917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.202438][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 298.249644][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 298.329166][ T29] usb 5-1: USB disconnect, device number 14 [ 299.355916][ T9863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.636126][T10206] macsec1: entered promiscuous mode [ 300.634213][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.075511][T10228] fuse: Bad value for 'rootmode' [ 301.130474][T10231] xt_hashlimit: max too large, truncated to 1048576 [ 301.198506][T10231] xt_hashlimit: overflow, rate too high: 0 [ 301.281214][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 301.497322][ T5705] usb 4-1: USB disconnect, device number 36 [ 301.538285][ T5705] ftdi_sio 4-1:0.13: device disconnected [ 301.913712][ T5706] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 302.221360][T10263] vlan0: entered promiscuous mode [ 302.227548][T10263] batadv0: entered promiscuous mode [ 302.245325][ T5706] usb 5-1: config 4 has an invalid interface number: 4 but max is 1 [ 302.261983][ T5706] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 302.312239][ T5706] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 302.352918][ T5706] usb 5-1: config 4 has an invalid interface number: 198 but max is 1 [ 302.388659][ T5706] usb 5-1: config 4 has no interface number 0 [ 302.410118][ T5706] usb 5-1: config 4 has no interface number 1 [ 302.454079][ T5706] usb 5-1: config 4 interface 4 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 302.502790][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 302.557093][ T5706] usb 5-1: config 4 interface 4 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 1023 [ 302.595222][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8C, skipping [ 302.638209][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 302.689205][ T5706] usb 5-1: config 4 interface 4 altsetting 11 endpoint 0x8 has invalid maxpacket 38073, setting to 64 [ 302.739160][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 302.778648][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 302.845676][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 302.905609][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 302.933523][T10290] netlink: 120 bytes leftover after parsing attributes in process `syz.1.697'. [ 302.953003][ T5706] usb 5-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 303.001076][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 303.057349][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 303.109735][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 303.150722][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 303.187225][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 303.225709][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 303.267492][ T5706] usb 5-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 303.313785][ T5706] usb 5-1: config 4 interface 198 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 303.350043][ T5706] usb 5-1: config 4 interface 4 has no altsetting 0 [ 303.374368][ T5706] usb 5-1: config 4 interface 198 has no altsetting 0 [ 303.412411][ T5706] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=8b.d1 [ 303.449830][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.481808][ T5706] usb 5-1: Product: syz [ 303.497171][ T5706] usb 5-1: Manufacturer: syz [ 303.515851][ T5706] usb 5-1: SerialNumber: syz [ 303.534503][T10270] syz.6.686: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 303.559801][ T5706] usb 5-1: Interface #198 referenced by multiple IADs [ 303.600298][T10255] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 303.616909][T10270] CPU: 1 UID: 0 PID: 10270 Comm: syz.6.686 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.616945][T10270] Tainted: [L]=SOFTLOCKUP [ 303.616952][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 303.616963][T10270] Call Trace: [ 303.616970][T10270] [ 303.616978][T10270] dump_stack_lvl+0x100/0x190 [ 303.617007][T10270] warn_alloc.cold+0x94/0xa8 [ 303.617026][T10270] ? __pfx_warn_alloc+0x10/0x10 [ 303.617066][T10270] ? register_lock_class+0x40/0x560 [ 303.617091][T10270] ? kasan_save_stack+0x3f/0x50 [ 303.617112][T10270] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 303.617137][T10270] ? xskq_create+0x52/0x1d0 [ 303.617166][T10270] ? xsk_setsockopt+0x743/0xab0 [ 303.617194][T10270] ? do_sock_setsockopt+0xf3/0x1d0 [ 303.617216][T10270] ? __sys_setsockopt+0x195/0x220 [ 303.617232][T10270] ? __x64_sys_setsockopt+0xbd/0x160 [ 303.617250][T10270] ? do_syscall_64+0x115/0x870 [ 303.617278][T10270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.617303][T10270] ? xskq_create+0xfb/0x1d0 [ 303.617330][T10270] __vmalloc_node_range_noprof+0x136c/0x1630 [ 303.617362][T10270] ? xskq_create+0xfb/0x1d0 [ 303.617393][T10270] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.617421][T10270] ? kasan_save_track+0x14/0x30 [ 303.617440][T10270] ? __kasan_kmalloc+0xaa/0xb0 [ 303.617460][T10270] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 303.617488][T10270] ? xskq_create+0xfb/0x1d0 [ 303.617512][T10270] vmalloc_user_noprof+0x9e/0xe0 [ 303.617535][T10270] ? xskq_create+0xfb/0x1d0 [ 303.617561][T10270] xskq_create+0xfb/0x1d0 [ 303.617588][T10270] xsk_setsockopt+0x743/0xab0 [ 303.617613][T10270] ? __pfx_xsk_setsockopt+0x10/0x10 [ 303.617637][T10270] ? find_held_lock+0x2b/0x80 [ 303.617663][T10270] ? __fget_files+0x215/0x3d0 [ 303.617696][T10270] ? selinux_socket_setsockopt+0x6a/0x80 [ 303.617722][T10270] ? __pfx_xsk_setsockopt+0x10/0x10 [ 303.617747][T10270] do_sock_setsockopt+0xf3/0x1d0 [ 303.617774][T10270] __sys_setsockopt+0x195/0x220 [ 303.617798][T10270] __x64_sys_setsockopt+0xbd/0x160 [ 303.617815][T10270] ? do_syscall_64+0x90/0x870 [ 303.617841][T10270] ? lockdep_hardirqs_on+0x78/0x100 [ 303.617869][T10270] do_syscall_64+0x115/0x870 [ 303.617896][T10270] ? clear_bhb_loop+0x40/0x90 [ 303.617924][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.617945][T10270] RIP: 0033:0x7fa5d799de99 [ 303.617962][T10270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.617980][T10270] RSP: 002b:00007fa5d8860028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.617998][T10270] RAX: ffffffffffffffda RBX: 00007fa5d7c26090 RCX: 00007fa5d799de99 [ 303.618010][T10270] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 303.618021][T10270] RBP: 00007fa5d7a33eaf R08: 0000000000000029 R09: 0000000000000000 [ 303.618032][T10270] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.618044][T10270] R13: 00007fa5d7c26128 R14: 00007fa5d7c26090 R15: 00007ffc867327a8 [ 303.618070][T10270] [ 303.622677][T10270] Mem-Info: [ 303.775299][T10255] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 303.779003][ T5342] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 303.876112][T10270] active_anon:16700 inactive_anon:1 isolated_anon:0 [ 303.876112][T10270] active_file:0 inactive_file:63050 isolated_file:0 [ 303.876112][T10270] unevictable:768 dirty:549 writeback:0 [ 303.876112][T10270] slab_reclaimable:12131 slab_unreclaimable:109827 [ 303.876112][T10270] mapped:41175 shmem:4166 pagetables:1530 [ 303.876112][T10270] sec_pagetables:0 bounce:0 [ 303.876112][T10270] kernel_misc_reclaimable:0 [ 303.876112][T10270] free:1241396 free_pcp:20747 free_cma:0 [ 304.005055][T10270] Node 0 active_anon:68996kB inactive_anon:4kB active_file:0kB inactive_file:251948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164700kB dirty:2196kB writeback:0kB shmem:15124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13820kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 304.123643][ T5342] usb 2-1: Using ep0 maxpacket: 16 [ 304.130337][ T5342] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.169543][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41538, setting to 1024 [ 304.208567][ T5342] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.218371][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.237915][ T5342] usb 2-1: Product: syz [ 304.266615][ T5342] usb 2-1: Manufacturer: syz [ 304.282024][ T5342] usb 2-1: SerialNumber: syz [ 304.307721][ T5342] usb 2-1: config 0 descriptor?? [ 304.309799][ T5706] usb 5-1: USB disconnect, device number 15 [ 304.320115][T10270] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 304.384041][ T5342] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.416852][ T5342] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 304.434018][T10270] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.501878][T10270] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 304.543476][T10270] Node 0 DMA32 free:1007096kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70016kB inactive_anon:0kB active_file:0kB inactive_file:252068kB unevictable:1536kB writepending:2200kB zspages:0kB present:3129332kB managed:2532308kB mlocked:0kB bounce:0kB free_pcp:78520kB local_pcp:47056kB free_cma:0kB [ 304.612161][ T30] audit: type=1400 audit(1784356395.222:861): avc: denied { setopt } for pid=10333 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.634038][T10270] lowmem_reserve[]: 0 0 0 0 0 [ 304.653256][T10270] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.718629][ T30] audit: type=1400 audit(1784356395.252:862): avc: denied { read } for pid=10333 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.774007][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.703'. [ 304.784116][T10270] lowmem_reserve[]: 0 0 0 0 0 [ 304.799193][T10270] Node 1 Normal free:3943504kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2732kB local_pcp:0kB free_cma:0kB [ 304.930967][T10270] lowmem_reserve[]: 0 0 0 0 0 [ 304.952531][T10270] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.993645][ T5342] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 305.000356][ T5342] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 305.113547][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.129898][T10270] Node 0 DMA32: 538*4kB (UME) 383*8kB (UME) 584*16kB (UME) 1064*32kB (UME) 834*64kB (UME) 411*128kB (UME) 246*256kB (UM) 57*512kB (UME) 28*1024kB (UME) 14*2048kB (UME) 171*4096kB (UM) = 1004512kB [ 305.763408][ T31] INFO: task syz.5.258:6927 blocked for more than 143 seconds. [ 305.970479][ T31] Tainted: G L syzkaller #0 [ 305.978628][T10346] macsec1: entered promiscuous mode [ 305.998789][T10270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.026686][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.048612][T10270] Node 1 Normal: 2*4kB (U) 1*8kB (M) 2*16kB (UM) 5*32kB (UM) 6*64kB (UM) 6*128kB (UM) 1*256kB (U) 3*512kB (UM) 2*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3943504kB [ 306.108381][T10270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.110233][ T31] task:syz.5.258 state:D [ 306.135205][T10270] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.154899][ T31] stack:25608 pid:6927 tgid:6926 ppid:6346 task_flags:0x400140 flags:0x00080002 [ 306.188170][ T31] Call Trace: [ 306.192905][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.202188][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.228387][ T31] [ 306.243027][T10270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.253107][ T31] __schedule+0x125c/0x6730 [ 306.261577][ T31] ? __pfx___schedule+0x10/0x10 [ 306.267056][T10270] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.298974][ T31] ? find_held_lock+0x2b/0x80 [ 306.300709][T10270] 83159 total pagecache pages [ 306.325763][T10270] 0 pages in swap cache [ 306.330006][ T31] ? schedule+0x225/0x2c0 [ 306.338720][T10270] Free swap = 124996kB [ 306.353181][T10270] Total swap = 124996kB [ 306.357466][ T31] schedule+0xdd/0x2c0 [ 306.362683][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.368475][T10270] 2097051 pages RAM [ 306.379110][T10270] 0 pages HighMem/MovableOnly [ 306.395604][T10270] 432263 pages reserved [ 306.401969][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.413282][T10270] 0 pages cma reserved [ 306.421945][ T5342] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 306.429714][ T31] __mutex_lock+0xccc/0x1bd0 [ 306.442736][ T31] ? usbdev_open+0x1b6/0x870 [ 306.447796][ T5342] em28xx 2-1:0.0: No AC97 audio processor [ 306.460507][ T31] ? klist_put+0xcb/0x1d0 [ 306.476756][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.488345][ T5342] usb 2-1: USB disconnect, device number 30 [ 306.514982][ T31] ? _raw_spin_unlock+0x28/0x50 [ 306.534946][ T5342] em28xx 2-1:0.0: Disconnecting em28xx [ 306.548064][ T31] ? kobject_put+0xb9/0x640 [ 306.569539][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 306.591156][ T5342] em28xx 2-1:0.0: Freeing device [ 306.597149][ T31] ? usbdev_open+0x9d/0x870 [ 306.602807][ T31] ? usbdev_open+0x1b6/0x870 [ 306.622950][ T31] usbdev_open+0x1b6/0x870 [ 306.636363][ T31] ? do_raw_spin_lock+0x128/0x260 [ 306.641899][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 306.648446][ T31] ? chrdev_open+0x589/0x6a0 [ 306.655811][ T31] ? chrdev_open+0x589/0x6a0 [ 306.660471][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 306.665739][ T31] chrdev_open+0x234/0x6a0 [ 306.670216][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 306.694030][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 306.700540][ T31] do_dentry_open+0x6ab/0x14d0 [ 306.706272][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 306.711853][ T31] vfs_open+0x82/0x3f0 [ 306.719238][ T31] path_openat+0x2873/0x4280 [ 306.724009][ T31] ? __pfx_path_openat+0x10/0x10 [ 306.729646][ T31] do_file_open+0x20e/0x430 [ 306.734699][ T31] ? __pfx_do_file_open+0x10/0x10 [ 306.739806][ T31] ? alloc_fd+0x471/0x7a0 [ 306.745625][ T31] ? do_getname+0x191/0x390 [ 306.750192][ T31] do_sys_openat2+0x10f/0x1e0 [ 306.758546][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.767151][ T31] __x64_sys_openat+0x12d/0x210 [ 306.772377][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 306.779495][ T31] do_syscall_64+0x115/0x870 [ 306.784958][ T31] ? clear_bhb_loop+0x40/0x90 [ 306.789769][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.796187][ T31] RIP: 0033:0x7f3beb35e6ce [ 306.800725][ T31] RSP: 002b:00007f3bec266b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 306.813015][ T31] RAX: ffffffffffffffda RBX: 00007f3bec2676c0 RCX: 00007f3beb35e6ce [ 306.824471][ T31] RDX: 0000000000000402 RSI: 00007f3bec266c00 RDI: ffffffffffffff9c [ 306.832578][ T31] RBP: 00007f3bec266c00 R08: 0000000000000000 R09: 0000000000000000 [ 306.841575][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 306.850702][ T31] R13: 00007f3beb626038 R14: 00007f3beb625fa0 R15: 00007fff38c90118 [ 306.858983][ T31] [ 306.862228][ T31] [ 306.862228][ T31] Showing all locks held in the system: [ 306.878891][ T31] 3 locks held by kworker/u8:1/13: [ 306.929680][ T31] #0: ffff888033e5c140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 306.941595][ T31] #1: ffffc90000127d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 306.956179][ T31] #2: ffffffff90a9c4c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 306.967001][ T31] 1 lock held by rcu_tasks_kthre/28: [ 306.973921][ T31] #0: ffffffff8ebe5908 (rcu_tasks.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0x61f/0xd90 [ 306.988722][ T31] 1 lock held by khungtaskd/31: [ 306.993841][ T31] #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 307.005146][ T31] 3 locks held by kworker/1:2/805: [ 307.012008][ T31] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 307.025402][ T31] #1: ffffc90004887d08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 307.038504][ T31] #2: ffffffff90a9c4c0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880 [ 307.050168][ T31] 2 locks held by getty/5371: [ 307.055015][ T31] #0: ffff888037e870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 307.097807][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 307.123818][ T31] 1 lock held by syz-executor/5594: [ 307.153321][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 307.194914][ T31] 2 locks held by kworker/0:3/5698: [ 307.206132][ T31] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 307.238335][ T31] #1: ffffc900041dfd08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 307.277415][ T31] 5 locks held by kworker/0:7/5728: [ 307.293901][ T31] 1 lock held by syz.5.258/6927: [ 307.312971][ T31] #0: ffff888021bba1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 307.342888][ T31] 3 locks held by kworker/u8:13/9859: [ 307.360655][ T31] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 307.392637][ T31] #1: ffffc90005e2fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 307.404944][ T31] #2: ffffffff90a9c4c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 307.414236][ T31] 3 locks held by syz.3.705/10346: [ 307.419354][ T31] #0: ffffffff91228168 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 307.432545][ T31] #1: ffffffff90a9c4c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 307.444372][ T31] #2: ffffffff8ebf1c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 307.461898][ T31] [ 307.465747][ T31] ============================================= [ 307.465747][ T31] [ 307.476006][ T31] NMI backtrace for cpu 1 [ 307.476021][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 307.476044][ T31] Tainted: [L]=SOFTLOCKUP [ 307.476051][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 307.476061][ T31] Call Trace: [ 307.476066][ T31] [ 307.476073][ T31] dump_stack_lvl+0x100/0x190 [ 307.476096][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 307.476119][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 307.476143][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 307.476168][ T31] sys_info+0x141/0x190 [ 307.476186][ T31] watchdog+0xcb1/0x1030 [ 307.476209][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.476233][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.476252][ T31] ? __kthread_parkme+0x18c/0x230 [ 307.476276][ T31] ? kthread+0x13a/0x450 [ 307.476299][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.476314][ T31] kthread+0x370/0x450 [ 307.476338][ T31] ? __pfx_kthread+0x10/0x10 [ 307.476371][ T31] ret_from_fork+0x72b/0xd50 [ 307.476394][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.476416][ T31] ? __switch_to+0x800/0x10f0 [ 307.476443][ T31] ? __pfx_kthread+0x10/0x10 [ 307.476470][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.476504][ T31] [ 307.476510][ T31] Sending NMI from CPU 1 to CPUs 0: [ 307.615377][ C0] NMI backtrace for cpu 0 [ 307.615394][ C0] CPU: 0 UID: 0 PID: 5698 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.615414][ C0] Tainted: [L]=SOFTLOCKUP [ 307.615419][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 307.615428][ C0] Workqueue: events vidtv_mux_tick [ 307.615449][ C0] RIP: 0010:vidtv_memcpy+0xb/0xa0 [ 307.615468][ C0] Code: ff ff 4c 89 ef e8 65 13 1c fa e9 17 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 57 41 56 49 89 ce <41> 55 49 89 f5 41 54 49 89 d4 55 48 89 fd 53 4c 89 c3 4d 8d 7c 1d [ 307.615481][ C0] RSP: 0018:ffffc900041df818 EFLAGS: 00000246 [ 307.615492][ C0] RAX: 1ffff110044748a2 RBX: 0000000000000004 RCX: ffffc900041df928 [ 307.615501][ C0] RDX: 000000000000fe00 RSI: 000000000000018f RDI: ffffc9000da8b000 [ 307.615509][ C0] RBP: 00000000bf004bf0 R08: 0000000000000005 R09: 0000000000000000 [ 307.615518][ C0] R10: 00000000000000be R11: 000000000000758b R12: ffff8880361ff100 [ 307.615526][ C0] R13: dffffc0000000000 R14: ffffc900041df928 R15: ffff8880223a4500 [ 307.615536][ C0] FS: 0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 307.615550][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.615559][ C0] CR2: 00002000002ef030 CR3: 0000000073335000 CR4: 00000000003526f0 [ 307.615568][ C0] Call Trace: [ 307.615573][ C0] [ 307.615579][ C0] vidtv_s302m_encode+0x764/0x1860 [ 307.615594][ C0] ? __hrtimer_cb_get_time+0xd7/0xe0 [ 307.615613][ C0] ? ktime_get+0x280/0x320 [ 307.615631][ C0] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 307.615645][ C0] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 307.615664][ C0] ? __asan_memset+0x23/0x50 [ 307.615685][ C0] vidtv_mux_tick+0x4e4/0x1460 [ 307.615707][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 307.615722][ C0] ? __lock_acquire+0x49f/0x1a40 [ 307.615741][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 307.615757][ C0] process_one_work+0xa23/0x1940 [ 307.615774][ C0] ? __pfx_process_one_work+0x10/0x10 [ 307.615790][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 307.615805][ C0] worker_thread+0x5ef/0xe50 [ 307.615821][ C0] ? kthread+0x13a/0x450 [ 307.615839][ C0] ? __pfx_worker_thread+0x10/0x10 [ 307.615856][ C0] kthread+0x370/0x450 [ 307.615874][ C0] ? __pfx_kthread+0x10/0x10 [ 307.615893][ C0] ret_from_fork+0x72b/0xd50 [ 307.615909][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 307.615926][ C0] ? __switch_to+0x800/0x10f0 [ 307.615945][ C0] ? __pfx_kthread+0x10/0x10 [ 307.615964][ C0] ret_from_fork_asm+0x1a/0x30 [ 307.615987][ C0] [ 307.879228][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 307.886081][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 307.896749][ T31] Tainted: [L]=SOFTLOCKUP [ 307.901058][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 307.911103][ T31] Call Trace: [ 307.914371][ T31] [ 307.917292][ T31] dump_stack_lvl+0x100/0x190 [ 307.921975][ T31] vpanic+0x552/0x970 [ 307.925953][ T31] ? __pfx_vpanic+0x10/0x10 [ 307.930455][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 307.936613][ T31] panic+0xd1/0xe0 [ 307.940329][ T31] ? __pfx_panic+0x10/0x10 [ 307.944750][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 307.950904][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 307.957057][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 307.963210][ T31] ? watchdog.cold+0x1ec/0x234 [ 307.967970][ T31] ? watchdog+0xcc1/0x1030 [ 307.972386][ T31] watchdog.cold+0x1fd/0x234 [ 307.976977][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.982782][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.987459][ T31] ? __kthread_parkme+0x18c/0x230 [ 307.992485][ T31] ? kthread+0x13a/0x450 [ 307.996728][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.001400][ T31] kthread+0x370/0x450 [ 308.005473][ T31] ? __pfx_kthread+0x10/0x10 [ 308.010070][ T31] ret_from_fork+0x72b/0xd50 [ 308.014682][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.019792][ T31] ? __switch_to+0x800/0x10f0 [ 308.024470][ T31] ? __pfx_kthread+0x10/0x10 [ 308.029062][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.033840][ T31] [ 308.037065][ T31] Kernel Offset: disabled [ 308.041379][ T31] Rebooting in 86400 seconds..