last executing test programs: 11m58.205586138s ago: executing program 0 (id=111): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r0}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r1 = socket(0x400000000010, 0x5, 0x9) process_vm_writev(0x0, &(0x7f0000001ac0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 11m55.632232126s ago: executing program 0 (id=116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 11m54.384406342s ago: executing program 0 (id=117): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r0}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r1 = socket(0x400000000010, 0x5, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 11m51.588609841s ago: executing program 0 (id=121): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x20, &(0x7f00000007c0)={0x0, 0xfffffee0, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20045008}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f00000000c0)='],.(\x00', 0x80, 0x152, &(0x7f0000000140)={0x9, 0xd, 0x8f3, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002300)=[{0x0, &(0x7f00000002c0)="6c0bb21a84841b6137f3ad09e59e94b61d8e2adf7c93fee850a34988e7cf44a6daea8ba2a54f9330a02c9bd4f1df8e43dba89c734147f2dcc6592ba5a2630b6973ae4fae8a139d0c9411dd8791757e8c8518c03ded3720997321b3adae65015b4bb04a506f7eb876304c8ef1638a5ed8e01d27e467e342bc2042d3f51a564b8e78b06e9bdafd21110e7aa21b7ebac0f3de2eb90607392f", 0x2, 0x97}, {&(0x7f0000000740)={&(0x7f0000000440)={0x0, &(0x7f0000000380)="3e2380b2d79179ca9ff0c3b8f2d169a9d49ea76f8a7d735c63bb516a0af55333d9a3f2053dae7bb5eb72a7075de104bbf7a20fee900ec1febaebba6f4a4bef9063d337b51804872c809bbb20c2ca301caf18e7c65e7cddc0a454b9b876e2cb504d6279f5cc47cc0ae8d7c553fdfa859693deb830abc29773c58fd84ecf482029e107fb03223b4590314b0a024f8e41ad7a858618ce", 0x1, 0x95}, &(0x7f0000000640)="748f68e5c594b425850ee465edc7a6b1ffc89c9368f1093618e9314792a16637ac123ac217b721fde401b95f34b7b7c67f634e5c107dad8feccc874def3ccecb6a37a4d8b23375382af936a16069933f14cb517e0f4564b69bb8d201c50117e315b3e7af75c582be5e937164ad5d75432212600b7dfb5f0c032e8a546ec127bb3d048ec966dd22bc1302152450b1a6f8e5d455276ae2a894b8a7f5333a2054260c23196ba2cd369485e5b5754e9173df85b91a2b873072a8505fc32120cbebc915f129", 0x2, 0xc3}, &(0x7f0000000780)="52d28dad3638c0", 0x2, 0x7}, {&(0x7f00000009c0)={&(0x7f00000008c0)={0x0, &(0x7f0000000800)="058d3b2b23bdad87ef6786e801a10566352fa4291b41b5b4d4362a1c150af000a245f3bf2c23ae7f9e0299c82a6686c4a99493eaec3112a291b066aeb2128533b164194c21aeca29fde421ced0db48bef4628c8fcdc00008c5476ce988a3db92a15122089ef0401eda2bc1bd67db32177768de79eccb8fface64d09c9aacc9dc418fc356641c1cd97594224a477f528730a353a01fd00e38a3720c42d76509a9258e7282dfc3f42cab9bf49115b346a144e3226b720c22fd64", 0x1, 0xb9}, &(0x7f0000000900)="52497cf12237d426b0f42dff83df122a539b02f98c72866caab23d7547f91bf83eab390703211bffb4e5d8bebc33bfc5c87c974e727618f6c2a43d97a3896c994a25bb79a69961c57d5630cd9b0a4833ce32ac3e95b06541d3bb104fb124c007fc52f7cdb85c63abb8d12ab2cad262a3d813ea0dfb7bc33e1de41ffda775e5e04d6627dfe95dba4f857866822e37faac2bd9df75ec9457e75ea9291807148b6d97c8c422440ad89e3592a62a20e3fe", 0x1, 0xaf}, &(0x7f0000000a00)="4a406164f68c06d0c33e807fb47fdd48368a61537adc092b56bf562553f15fc66adce8e6893443de15b7d7f10c1da52b6b778e1dcf2889dccf925d718319772341815181120c7c87fa1ea5825a285ec6ab7cd5031f3f22b7ffbe97ad338cdb09d6ecb10c111436c7c2a0181ec1581fe3eb1a08288198595926753a0a460b32ac706d750c94fbc1c2892ba59e5362748b3d47744a357d77de93042dce50324e8e95ff9eab56d9bf23b4d59b6940c37a65da90652eefd56b3feb8e2dc4a01e182084cb84bc", 0x0, 0xc4}, {&(0x7f0000000c00)={&(0x7f0000000b40)={0x0, &(0x7f0000000b00)="11ab915536671d18978a5f458bc2686978f5326b1069", 0x1, 0x16}, &(0x7f0000000b80)="7d5888630f5f48ab3ea7af4c7d99596e27eea82593487014a22bc03ca3a7128dfcefb0c7260d8a1ff0bdf551221065e68bfb490f9505def5564d05897f2237132d964625a7daecc0d3abd6b8dfb6538a8eb40f5220be214b917ac0d37b4cafda358b1db469f87aeaf574c6ad9f50bef8fb61", 0x1, 0x72}, &(0x7f0000000c40)="1bdb7023c7af2651553e393db568d6e692ae51c1336462ba5024b14d", 0x2, 0x1c}, {&(0x7f0000000f00)={&(0x7f0000000d00)={0x0, &(0x7f0000000c80)="a303e36b90f7ad279fa19bfd2731dc811ff18807753f8a2d9d2e36ecea7650d895f5b34ae7108dcddb76e8f1637d97c835c8c13918d56aa44379278781c4b461ea7b64e18546ba4e4234dea201", 0x2, 0x4d}, &(0x7f0000000e40)="e6c0a8c2ce75599c31501718f67f42b4511498b3c18309b33bf9a71936f5bc19e0bfd3d75e1bd2b77b3faa499f23d5cc1ad3cfc4cd836f003e241c300c6e20351073af92c33dd9a28227e4ff6cb68efa8c3f6f3eafef772d6a749bda24c12b28c347b57d41a120e8209ec9e2707f732475ec81aaf5ff4aae34f445621f2d072f85c3abc08e4fda59", 0x0, 0x88}, &(0x7f0000000f40)="033a3cc86d80937e8ebd84bb6e675ed0d9496df3dad6ebda6e96", 0x2, 0x1a}, {&(0x7f0000000fc0)={0x0, &(0x7f0000000f80)="ceff184ada17a8cb62aa170dcdb146dec453fce6c98ab4accc92dd62f1973eb264feae8a", 0x0, 0x24}, &(0x7f0000001000)="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", 0x2, 0x1000}, {0x0, &(0x7f0000002000)="261c2c1652796a89a1b2cb35479b48d65c789b089be4abbdd0a03c3ce55118e52e8239578debd38356156a19aea8a6e33d81061745d5b1a7bf28decda4d2", 0x1, 0x3e}, {0x0, 0x0, 0x2}], 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000007000000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.\x00'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 11m46.749889229s ago: executing program 0 (id=127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0xd, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000007c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc4d, 0x0, 0x0, 0x1000, 0x7ff, r2, 0x0, 0x8a}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)={0x1, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x3, 0xb, 0xe5e, 0x1, 0x7]}]}) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 11m46.123854231s ago: executing program 0 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x31, 0x1e, {0x1e, 0xe, "0b944ded4f6a458eb33c27d563cc31c1225c888bb2d15331e1694062"}}, &(0x7f0000000200)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "b4f86ef8da677107662bd77d30922dd8d3f81298c5a1123d51bc58346d93e504692b39bb8bdc5fd8f30ba8e7f9f15575501496de64c8288225e729a37029c062003a63f4f332d3c224aa8b36dd5aeaf87a1a844daee6e68074a91556efc8aa496a756adf328e6c014947aee4192220a398911f421f4201a7fc594401ad52b5a647c4a7dcece6e52623d3da2c1e24dded2478435c1e4d655222d35e01ba77fc39325046fb9acf2d7619b52b4bc9a86123c8f2fbd12449af51ad40b4c5fba371fd47078817261ca68a7b315c7965ff5592bb163831d7b2aca32df594de366a4ad0a6451bb0e8f9948d64ef1b77f4b4f36bad2b"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x40, 0x0, 0xf1, "6edf58d8cf5f6d4797cdf7af3b5038c60e2a759e8048dea9abb19ae8397b5607bb595f37d87439b16a52fb5d4d5d8bd4e1a0288fb90f59ecbde9c0ed5dca1a8e1db0e37fc8c94aefea59de9989c18cea580f8d4a7768ab2d4725952388098372b780b7e89f180b70a0c9ef80aeb7aec38dcb4a0da5fbc689bc622b8c0b5f142832f9a90622aa45e736dfdbbb8d113c0ae79cf7e54fa130481dcce6587de70a37b1d59d2c5e2f60d077b4f66c2fd9255cd2ace0a3c245e3a46eb6aa29953e989dbdbcc1bcc809d642e7fcc9438fc3dabe6d4daad2467c9a57010a3d6741a183dccaa4ef710922df28d9bda2200d34eb0d65"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0xba, {0xb8, "d87dbd10e574e4976b3ba3c7098ef308e595d0b0c266ba314b9e2e0a790cd325e877fe6e31780f14847557dcd37d49e4d33187001bceb89c52975ec497692f8e78faff9e0d29e4be24ba8e8b3deba53b95501bfb2b592abbd3cee0314e9e517e8624dedab39472fd13531b375c46b09250ae402b48c25d2123ee429cb32db8050598815a9f7cc80b1286fdb58a794790876aebd3c80d1d087e2bb7d29e0b2200ecd88175f36cc7581c36d8d103b1cb59eada4515e04420ca"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x4}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000008c0)={@multicast1, @multicast2}, 0xc) 11m31.033137179s ago: executing program 32 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x31, 0x1e, {0x1e, 0xe, "0b944ded4f6a458eb33c27d563cc31c1225c888bb2d15331e1694062"}}, &(0x7f0000000200)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "b4f86ef8da677107662bd77d30922dd8d3f81298c5a1123d51bc58346d93e504692b39bb8bdc5fd8f30ba8e7f9f15575501496de64c8288225e729a37029c062003a63f4f332d3c224aa8b36dd5aeaf87a1a844daee6e68074a91556efc8aa496a756adf328e6c014947aee4192220a398911f421f4201a7fc594401ad52b5a647c4a7dcece6e52623d3da2c1e24dded2478435c1e4d655222d35e01ba77fc39325046fb9acf2d7619b52b4bc9a86123c8f2fbd12449af51ad40b4c5fba371fd47078817261ca68a7b315c7965ff5592bb163831d7b2aca32df594de366a4ad0a6451bb0e8f9948d64ef1b77f4b4f36bad2b"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x40, 0x0, 0xf1, "6edf58d8cf5f6d4797cdf7af3b5038c60e2a759e8048dea9abb19ae8397b5607bb595f37d87439b16a52fb5d4d5d8bd4e1a0288fb90f59ecbde9c0ed5dca1a8e1db0e37fc8c94aefea59de9989c18cea580f8d4a7768ab2d4725952388098372b780b7e89f180b70a0c9ef80aeb7aec38dcb4a0da5fbc689bc622b8c0b5f142832f9a90622aa45e736dfdbbb8d113c0ae79cf7e54fa130481dcce6587de70a37b1d59d2c5e2f60d077b4f66c2fd9255cd2ace0a3c245e3a46eb6aa29953e989dbdbcc1bcc809d642e7fcc9438fc3dabe6d4daad2467c9a57010a3d6741a183dccaa4ef710922df28d9bda2200d34eb0d65"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0xba, {0xb8, "d87dbd10e574e4976b3ba3c7098ef308e595d0b0c266ba314b9e2e0a790cd325e877fe6e31780f14847557dcd37d49e4d33187001bceb89c52975ec497692f8e78faff9e0d29e4be24ba8e8b3deba53b95501bfb2b592abbd3cee0314e9e517e8624dedab39472fd13531b375c46b09250ae402b48c25d2123ee429cb32db8050598815a9f7cc80b1286fdb58a794790876aebd3c80d1d087e2bb7d29e0b2200ecd88175f36cc7581c36d8d103b1cb59eada4515e04420ca"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x4}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000008c0)={@multicast1, @multicast2}, 0xc) 5m39.82927489s ago: executing program 1 (id=843): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0xf00, 0x0, 0x0, 0x800}, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f000008a000/0x3000)=nil, 0x3000}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5m39.520003484s ago: executing program 1 (id=845): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xffff, 0xfffa}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5m38.994113663s ago: executing program 1 (id=846): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_procfs(0x0, 0x0) pipe2$watch_queue(0x0, 0x80) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) pwritev(r0, &(0x7f0000000500)=[{}, {0x0}], 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20004080) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x38, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m36.87315123s ago: executing program 1 (id=850): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x4}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) (async) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xffff}, {0xc, 0x2}, {0x1, 0xfff2}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x34}}, 0x80) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) 5m36.584390013s ago: executing program 1 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 5m36.239952489s ago: executing program 1 (id=855): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m35.690952263s ago: executing program 33 (id=855): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.165085448s ago: executing program 2 (id=1551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001", @ANYRES8], 0x0) 48.223955564s ago: executing program 2 (id=1560): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x20006}) r2 = syz_open_dev$loop(0x0, 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x80000400, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x2, 0x14, 0x1c, "fee8a2ab78fc9746d1e00d96072000001e785d92000100000000000000000000000000000002000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35c]}}) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x537791bde1aae3a1, 0x40) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r1, 0x7, 0x101, 0x3fff}) timerfd_create(0x9, 0x78f9a26a841b531a) r3 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x1, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x3, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x42, 0x1, {0x3}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000d80)={0x48, 0x2, r1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r9, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000003440)=""/4096) syz_usb_connect(0x5, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011001e618f708f20c5062168b0102030109021200018108a07509041a506196e3fba40300824146103bcbdb569e39646f13478ffb993e7b96f78334346433ee182fb44d67a391136371af3a6d6d6e8d361a521ce2c8225765f2d60a011a98df9fed7000c6699bd169970f611ab8cec5ff63105ebd105eb72d87addd40ca02e1cf9fd85bd6ec5a169d368f270133f1a05d159ae0644830bce809aae9905c824509ae8dfe9c09c7ef9ebc7e4b50698b1cf950cc66108b68b3a2c75f2ddb7c789dbc7011dc000e9dba690f76e546ee824e72cfc68b903a25b74fe6b7"], 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000f00)={&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000e40)=""/190, 0xbe}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x6, 0x0, 0x1}, 0xc) socket$kcm(0x10, 0x2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 47.780095494s ago: executing program 5 (id=1562): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000190c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000019080)='comm\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000019200), 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000019100), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='utf8', &(0x7f0000000440)='\x00dev\a\x00\x00\x00\x00\x00h&{|\xed\x0f\xb8\x93:\x1a\xea\xf8\n\xb7\xec\x16\xb5r\v\x12\xd7\xe7\x85]OI\xdaZ\xb9\"^\xd9\x91r\x93<\xfa\xd6\xd7\x17z\x04\xe8\x05N!\x01.\xcc\x8cR\xbc\xff\'\xbf;*\xdf\xdf\xe6 \x92>\xffre\x19FZ\x94\x1c\x13h', 0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r2, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0x87, 0xd, 0xa, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}}}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019180)=ANY=[@ANYBLOB="140000", @ANYRES16=r8, @ANYBLOB="69ff2838f4e80cd1515f55b53e7f5cceacbbbd704ffcdbdf2500342e658bea8d6089d4684277656aaf437f95b6"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) (fail_nth: 4) 46.067222601s ago: executing program 2 (id=1565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0xd, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000007c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc4d, 0x0, 0x0, 0x1000, 0x7ff, r2, 0x0, 0x8a}}) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)={0x1, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x3, 0xb, 0xe5e, 0x1, 0x7]}]}) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 45.142063356s ago: executing program 5 (id=1569): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000058c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000000201002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbad5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3135}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="9a7662ec", 0x4, 0x40c5, 0x0, 0x0) 45.018855952s ago: executing program 2 (id=1571): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e4, 0x0, 0x502, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x4, 0xc, 0x48, 0x4c, 0x6c, 0xc, 0x1, 0x6, 0x6, 0x3, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0xa, 0x9, 0x7, 0x5, 0x0, 0x5566]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x1b, 0x36, 0x62, 0x9, 0x4, 0x16, 0x3, 0x18, 0x16, 0x3, 0xc, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x4, 0xd6, 0x27cd, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x5}, {0x0, 0x9}, {0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa483, 0x4, 0xf7d9, 0xe, 0x5, 0x40, 0x7, 0x400]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9038}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x43e}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) write(r5, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x40, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @generic={0x3, 0xc, 0x5, 0x8, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1400}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x87b}], &(0x7f0000000140)='GPL\x00', 0x8000, 0x5f, &(0x7f0000000180)=""/95, 0x100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x7b, 0x44}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x5, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@private0}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x4, 0x1, 0xe3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40) 44.01826698s ago: executing program 5 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11e7d, 0x51a23}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000200000000045406d3000000000ffffffff00000000c00900000000000000000000000000000000000000000000000000000000000047000000020000007c000000000000000000000000000700000000000000fcffffff00"/510]) syz_emit_ethernet(0x4e, &(0x7f0000001080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @ssrr={0x89, 0x7, 0x13, [@dev={0xac, 0x14, 0x14, 0x20}]}, @ssrr={0x89, 0x3, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11e7d, 0x51a23}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000200000000045406d3000000000ffffffff00000000c00900000000000000000000000000000000000000000000000000000000000047000000020000007c000000000000000000000000000700000000000000fcffffff00"/510]) (async) syz_emit_ethernet(0x4e, &(0x7f0000001080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @ssrr={0x89, 0x7, 0x13, [@dev={0xac, 0x14, 0x14, 0x20}]}, @ssrr={0x89, 0x3, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) (async) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000) (async) 43.254736411s ago: executing program 2 (id=1575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e4, 0x0, 0x502, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x4, 0xc, 0x48, 0x4c, 0x6c, 0xc, 0x1, 0x6, 0x6, 0x3, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0xa, 0x9, 0x7, 0x5, 0x0, 0x5566]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x1b, 0x36, 0x62, 0x9, 0x4, 0x16, 0x3, 0x18, 0x16, 0x3, 0xc, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x4, 0xd6, 0x27cd, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x5}, {0x0, 0x9}, {0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa483, 0x4, 0xf7d9, 0xe, 0x5, 0x40, 0x7, 0x400]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9038}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x43e}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) write(r5, &(0x7f00000001c0)='1', 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x40, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @generic={0x3, 0xc, 0x5, 0x8, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1400}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x87b}], &(0x7f0000000140)='GPL\x00', 0x8000, 0x5f, &(0x7f0000000180)=""/95, 0x100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x7b, 0x44}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x5, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@private0}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x4, 0x1, 0xe3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40) 42.895808198s ago: executing program 5 (id=1576): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0xfffff, 0xfffffffffffffffe) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x5000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x3}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x8000900, 0x1, [0x6, 0x2, 0x8000000000000003, 0x3]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = getpid() brk(0xfffffffffffffff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x106, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x2af5, 0x10, 0x2, 0x139}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000001c0)) setgroups(0x0, 0x0) 40.173485725s ago: executing program 5 (id=1581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0xd, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000007c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc4d, 0x0, 0x0, 0x1000, 0x7ff, r2, 0x0, 0x8a}}) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)={0x1, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x3, 0xb, 0xe5e, 0x1, 0x7]}]}) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 39.209968626s ago: executing program 5 (id=1585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e4, 0x0, 0x502, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x4, 0xc, 0x48, 0x4c, 0x6c, 0xc, 0x1, 0x6, 0x6, 0x3, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0xa, 0x9, 0x7, 0x5, 0x0, 0x5566]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x1b, 0x36, 0x62, 0x9, 0x4, 0x16, 0x3, 0x18, 0x16, 0x3, 0xc, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x4, 0xd6, 0x27cd, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x5}, {0x0, 0x9}, {0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa483, 0x4, 0xf7d9, 0xe, 0x5, 0x40, 0x7, 0x400]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9038}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x43e}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) write(r5, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x40, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @generic={0x3, 0xc, 0x5, 0x8, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1400}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x87b}], &(0x7f0000000140)='GPL\x00', 0x8000, 0x5f, &(0x7f0000000180)=""/95, 0x100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x7b, 0x44}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x5, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@private0}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x4, 0x1, 0xe3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40) 39.142765637s ago: executing program 2 (id=1586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 33.507545247s ago: executing program 6 (id=1614): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x4a6c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3978, 0x3, 0x0, 0x1, [{0x12cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x128, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "fef398e013ff224aa0d5ce076efcebca21a62ba31258176cb79006ad5b5a5e4c749007f582e2c5a38a08f3813d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x74, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9af0000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x93b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xd218}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x1030, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "ef6da07ed9cfdf97588a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}]}, {0x1180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0x106c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "0b6a6802c925b6bc7fa99b34c9887bcae98917fb09c2ff200757d001c94cab5df09485d6b944f5f586b0425a4523351719842d8e982086352493997e9b99b9cfd7b6a095d8031df67ca23d869fd9b1c1"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1490, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x117c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "4e4a336d28c87d209dee81483c187f34a75e5ab196d4dfee8386ccf49b940fed89d678d7bbb36d9536f167aded6bcf6d17546b389f718cc6d54dcf30dcbc6251292c18d825a461029e86f6eb8814bd0a0d365bffec0ea2bf11aaaae77db8513ed567af0331b28eb7c62f8f3bdc9bdda01a440e2f145ba5ced4919fd167e0a4ffa3d7591632a950b4143b82ccf32bfcc16f4d698daae446e5caa0eae6f040bf0cffff15a8ea832d919cb517ba125617b657d2b2"}, @NFTA_DATA_VALUE={0x4b, 0x1, "c0ce427404aaa3f26619b30fef80703a43d0058b686fcf3ff67a3d02f418d7c88e577ecd50529106a17caa1f282c7664737bd1829d08aea717a6249d9c6dfb5366f57f5a7bc0ae"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2800}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x2a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x83, 0x1, "0222120283bbe3afec2f8061f1aae04b4f7cc609cddfe06097a62060c7f7866ff3fdc5f7fa0c9642e50a02f9aa704fb1d10867abfeb1153c0135a112b8ad12c527f3471bb08a6538e8547fec7b066c4791ec4b5d9a27e73913994f80778aabcaaf0795f95310566b0b51ab0b8dbdce47a0d2934116cd2b714d34959c866c3d"}, @NFTA_DATA_VALUE={0xb2, 0x1, "b27a12f93f0007ab8855290bd081279265bd995ab22356bb0afc29dc73779c692264012ac2ddb21cdea52208e1fc598180babf031276b7e1f2bedcff4b9df2103739d447a40e9125ffa23a0d78968f155e411706db5396017b5429de229ffc20d97a63afd77c6268b8fa032b7dce48875e021539fff9c7925bcf315de2a536644c29c025cbae1ef0c8ef611e81cb2dbacba0d2c9437b3b8a976c76765dd9a43253dd3bea5ede84c29fefbe5b08c3"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10ac, 0x3, 0x0, 0x1, [{0x10a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x108c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4a94}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) migrate_pages(0x0, 0x7f, &(0x7f0000000000)=0x8000000000000001, &(0x7f0000000040)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791001"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000001300)="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", 0xffc) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd31, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000270009002abd7000fddbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000100)=0x5, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c00000004000000040000000c00000000000000", @ANYRES32=r8, @ANYBLOB="00000000a45e9ce4e2d71e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 33.388362858s ago: executing program 6 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x40c4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000000)={0xe4, 0x5, 0x8200, 0x9, 0x10001, 0x5, 0x8a, 0x9, r11}, &(0x7f0000000040)=0x20) sendmsg$inet_sctp(r8, &(0x7f0000001a00)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xf5f, @private1, 0x2}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000240)="e49b834524f353843da17e258296f7e5cbc79aac51ba105e9747c86cee6b7ac7eeeae362850159e971471d4d7296652196a24f22750df99530dfac719069951a12fb83a910ef35dd1c58a2c357a495c6ebb06ff86433a5c1339d8c5207a2125094f9d8779bc6d46c69ef9639ad8a068efd70f66e3b8a861dbf0f3864", 0x7c}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="8e1bdc5ae8ee3049b297a068a89b56ab9002fbc0a64619e217a2ad1f8067f375d8274c404ff273aaed731eed038a7b44d6b15718ce869a", 0x37}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="18000000000000008400000005000000300000000b000000"], 0x38, 0x1}, 0xdab45a9f79fbde18) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r12, r13+10000000}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r14, &(0x7f0000000080)=ANY=[], 0xfffffee2) r15 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r15}, &(0x7f0000000480)=0x0) timer_settime(r16, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) syz_usb_connect(0x0, 0x9a2, &(0x7f0000000040)=ANY=[@ANYBLOB="f2a5308a325d59816d46014a71a8a9c24ff0721228f8666179ae0ee366ea81b041bec5845c0c858248f66976d028934ec38e2e96cb0df51da6a5e989ee071d79e667a7821bf44be0f987a01a98a69ff516fabbf9c83be62b2e9690f628ffc9bdc59b8d7275f3eadeda358b19d78427d4294ee5e1c4ad21c97f437ca54321c18dd38eb34ff748ba7a92f1f8b32bd24ea44c829078ffd00ece27cd66a5ab14e61781c9a281d82a8910ae93852e933feec72d7fedb6d19dc4f7b7cc64bc743e5ae6adae847f82e145ac015556397bead38284e6616e81f9dc9d9519c27021f7bb1bc997af42f744d24c06c6c82351e3d1d2b9d950424f", @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="29760abb5505aab378344ea81821586e4a9020d3863565a1faab537ba30d5dad334d8cac8fa0a2d9b3d0c76ee53207fa5db4ea101e4b7445e1d530fa6ff0a8caeb82d675fc63741c805ad286dc2c122a93a2a99407744144874f798ee0165cdd36b2fcb24eaf151f728a3bc20a1565b700b29f52bd74c780e59148ef9c5ea75e3bd839d88f527be68dc528cbe432a588e64fce531f15d5c6388696d3fe67c2a7c2f31165f6ac5e31632468be379eb2d80e8aaa39b6f3191a424ecd141aaa3cd87f"], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 31.951134644s ago: executing program 4 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0xd, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000007c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc4d, 0x0, 0x0, 0x1000, 0x7ff, r2, 0x0, 0x8a}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)={0x1, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x3, 0xb, 0xe5e, 0x1, 0x7]}]}) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 31.703244374s ago: executing program 4 (id=1624): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x147) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="0000e1"], 0xb, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 31.487894808s ago: executing program 4 (id=1625): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000f0009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x3, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x8, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 30.904439537s ago: executing program 4 (id=1626): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socket(0x2b, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000580), 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x703c2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f27c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0xffff0001}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8091}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd, 0x7ff, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x2, 0x3ff, 0x200000}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000d0000000001000026a03a3a33ae6a6130000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a010400000000000000000100000014000000110001"], 0x88}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) write(r1, &(0x7f0000000000)='255\x00', 0x4) 30.30788207s ago: executing program 6 (id=1628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 29.904102448s ago: executing program 3 (id=1630): socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x329000, 0x186) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7eefff7ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095a0cdb2384d15657de1efef2310a5edb2878bb764c8a1848da9b408ddc0d9019e3efda2377dbcce848249ca518113d11e3fc901c9a80edcdf9c26cb162475576fd192649594b2edd1112a52241efdffd083c8a7155022053045aaa1a20049b8cec236286c9b426b0d6df89f66e7606c5b1d54f85d4a89de6532fefcf2d1ff307683e15e9feabddbf92ef5be37bea4272e72c0d407ed252548f7bcbd49d2afca64bc51949a5ade714083e9fcf6d23728fcf992ed4c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a84000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d4000128014000180090001006c617374000000000400028014000d800c000100636f756e7465720004000280140001800a000100696e6e65720000000400028008000340000001"], 0xac}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 29.716001519s ago: executing program 3 (id=1631): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x65ab, 0x0, 0x83, 0xc, 0x7f, 0x0, 0x54bf, 0xfffffffd], [0x4, 0x0, 0x101, 0xfffffffc, 0x80, 0x1, 0x4, 0x8], [0x2, 0x8, 0x44, 0x2, 0x4, 0x7, 0x6]], '\x00', [{0x0, 0x3}, {0x3}, {0x400}, {0xffffffff, 0x80}, {0x2000008}, {0x2, 0x22c685d5}, {0xf68b, 0xa}, {0xb, 0xfffffff8}, {0xc51}, {0x7334486a}, {0x20000}, {0xffffffff, 0x402}], '\x00', 0x4, 0x0, 0x0, 0x20}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)={0x1, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x3, 0xb, 0xe5e, 0x1, 0x7]}]}) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 29.046475334s ago: executing program 6 (id=1635): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="000000000300000008000d000100000008001b00000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', r7, &(0x7f00000001c0)='./sys\x00', 0x2) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x70100, 0x0, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e1f, @private=0xa010100}}, 0x1ff, 0x86}, 0x90) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f00000003c0)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0b9d4000087db4181516168b4b2", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 28.655690785s ago: executing program 3 (id=1636): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002780)={0x8, {"48460b90fc8d13c46cfa284b0d231880597a2b39cb9380733e0a376e788eeeb7bba73615e185c551deef5c6ddc004384d9ecd8a3cbbbca3b5905cc01f6922feb6391c83aa6076d337510366dc8955d56f0fb8702dd28533e3eba654d674b7b8a22b6a38659a0eb9b68c2e819ae859b5d3dd8350dd5aa70218579d1b3496dd530d9a5f38c59df35967484fc2cef0b7b9849345358c3ca8ae743c5179353386a0ad062af2102806696e28be893b106415f1f78ec7a85db02bf6595f2f08ab65a271ae5eb38e5bbdeba21c3fcf9014e83a35909ec6d45f418c051304a5347b1952e3886dd7a8402e4af8348931c8fabf9de24dbfbf8545e9607461d6fda4f211b70baa1482264b7dc3915183449eb676588acd5609e613d990de7f561e235b3b812df99f90cebfe9c06bc7d3a373347e6c39d32fa6df4143d1418f7d0a24f0bec544502373248626d1c1176b09b7fb9667815c3652cbc2bd6210157f9241c17bbb10d616622568a3044d5a6c7e88728524c2a33616bf42d60de72e857735739f8a4674831e9d35779218d55ad2d8cbfb208584b43f8fa37c73987677a339ed9b509e43ad04797cd8290c932563040ba41f7ffec99d61bfb8f6016e393a792356697071ce876df23dc8fe35f3f61914d3d281133a01e761b2163665ac2503bc703d30331f63834f506f09a432e7d22e048e61bad7a664958d448d46f157f031566f025ef699f550c992190940189d1dc1ea28e24c399f12e1283a2e14ee6d4c7c7ff1a86e35cf2ff443f5f7182260671f3df8d2764daf92b6eff68d1419f179d727fd836fa9809071a3868233a85fb24e533c40d038d01917e66e51eee5ec2642cafbf215362b9d0ef431b29a206473497142b389b32b5d6fe6f4e0d153f7675e00df4614943f0ba7e3ecdcf5534749abdd19040ecfca49e93d3265957a4c0bbaa159a2185ea00676a3d49bed542c8fb2fa6046c3cae6feb0bc14b2f80be7cbb4564ada373f3770697f723fffd422c2e93a3703d29bd214f446208b51289ce667e16ce05bffafdacb195e76287b15cb65f4d07568aba02bfdd4ab5b2d681b68deb1849cbcf7de6afefb7d3bc03c786447485691169ef7a57ccffb682848c3f2b033988795ca854d0e933469eda5034586a200807f329500bbf9670a9c4c9d79b9f2c666aa2e9dddedaf148fcedd14a117b975bd32e4ef6a00f6155d8fe89a71795a0d50c2f6845ddca947f1967dac527edd88420bfb4a052ddd6397c0bd8ba004777ae2544873152dcbaed894549875c387e40efce3e572ece97369e71a54061ee02d3c773345f12baa449d7f4d75d2634bfd8004d4215d7896c9542e3f15a84ac3c086b8e9338a02fe167121707e6ce0870970f0f6821d7e50ae07a73547c25d2fbeca126fd149a70d2b8b6e39f48806fd76211fdba31c5e539fd6296258a12bf4488d89d2287854fa67d0ce3173cf784eb05e3a1ea787610059a676395fceddc7ba15188491257e6af5ef6e315d97d54156c2898d2c37533508e08ee1517372b6d52ff3f281f57fb5ada9e27e6aa1f82badae0d1eb41b126ae615d7cf1e6b101a187c472845b90c19ff55661cf66c5b923c498a6209758616c75ceff3ca18c26075e687cb2b3e4923c47bba3124aaee0d49f13ff3eb29f51458b2e285de6f9dc10b43a87d845726637bb71236dca2595b310d75574c5de78a0c33735b73b8ad6f3e12c620612041ba49637492b25f299d875a49d446937107eef7d528e7cc7dcfdd1e052ff229f16b2d935afe8ee39f6633bd89ecb9ba76e972b0f5aa35bf29509f8e7fbfe229c032ef7d2a45f20bab8c4b0c5860d0d93469ad5fdca5fd3815b328f79d719f1106d330498aa90c48f904cb8ca0faa9856b9ef647180b27c5894231a2c23967f750b1bb315b94bcc768433c4ddba42e7fca2b10db020dd739538cb85a95db79a3068fa6b642502355a366bb2f0b4ecdb278f78227ae2a1fb6aff429d2041faf1808ba70b501e34950bad2f0e5291ccbd737b02e50c847aadeadb463f41fcdc1c8c91994279ff736e629137e4e3897e7854d3bb10b9fbcb845fc66ac03f3f9a529072f8b92b11fadf28625a14a1e00259f0db5421a210032b6d6a47fdba2bcf9746f1fd0734c6d9ebb5451deca01faa2df1374d504bdaef49dd3cca2aaf0dfddd564cb76e20e6b8ca8fb26e09462a10d5ab089871dbc4ffe4cdf7c12f3f58bfad3d75aeaded04b12edbf1f3419ee1f8f1d61a4dad78ec27b6968a7ceedfc72444092872a54810c832ec2ff63418e7545b64ae087d493a445d8cba0d0b61ff41c737a31fbdf0c75cd4f8813eae2794d62daa360361cffa21f011d6d7bc3b39c643c2d7ed6e068fbc1e4f7f6c6b36f3056f24d01ab0fa65356bc179002f4e7ab024b8cd55a10cf32e9a2fa5b527112d3e8e423bf2f7be6ae624700318fc5667e40e3af4c912718861913e838a036660d6f2b3fde8c6b967b3870630c1c3905394e7ec2c220fc4b45bb10b42095afcf8de6fe98c7d2c3091add3c8c6f9587478641c9328f2be74b9a415de904ca18023d2db56f60fefa4d82242a083939a6b4c3c15f04f9fd0ba06eaf27da56c66cd84c2f6bdbc652bff7c81780bd9c3d4939d03980889f3835d60db60acf9c6558caa63ccb3a1548100eb6bbbc8f527dd301609f05f93a6db22a95bfe15506bd2916e0dd50dd2791d884f9add2f2b10b7854185e69bdd3b9c0c60beb0805e8fa2cbe5d21dfdb23c5eeeb80c14b3739a988ecc727a7a3f84306a4532acf0f43edde99062adc669da06c1e967c4d3fb2b5e85c8c76ff73ca6561cc1a0415bdbb609b042430c9db21743f51383cb908121ab456051577e5b0938e4edfdbf34363f13545d100862ee122f943f61458c52814b57d9146a0082cef62ca4001064ffaadce1f2f1b9ef4f39abba403e04db49508ce11a76634e4eb03a019eb74aa5fb97347b6da62cf0447141e1be32575cc5a226919c1b08e8bac499f2d86736be28c663f33ecbf4cf56d93f5e4ca9b89d772475628a88ba186a0f7567b8b5fa6d37ff6e0841ebb4f9f704819f218d28f5d780aa2a511c4b4bbb7f6722397e76cf226caf997e325c01e98bb3883316553bfd4c6f6aef2adc466f58846eb7ebf844a9a8b27fe328d72983bdcd6baea2be67fd009fdc2b589a51e627cbcd1ebe604511a953f25bf672a5fb9e76503eb1b2173297f143778606e38a211dd3b132d34bfcec579e4acf7528990b039e1a59bf3835658d8e0581c9d5b8901f22c3d991eb42799278956856a6f27a8c6112c970137dfc0044c6002badb861ab341bd17c87664db6ecb80d2a6136156aa2b425be7b66be288710549259135435f63c703e99661f9f1e6f0b049465e7f42ba0ab2ffdb7803adc575a5f1dc1144ef803618849ea19a4983566deb1285ab34e8afb567e01d26bba4456dc0499c8bf888a130acd613d4e2fec47d907b0e77fe3a3b2895092f7004d9c163be5f56de8136394c34f0152d919cebbdd7d9bf0586fda72b4ee6c87d8c889d4876ad05fdf77c6acb80fd3d0920ee901666cca03af1b68fcee8b56c92f9478429250e197abd60eee3210a7d563d6169483b820e910d6dfc6e547e5957b2311c54ab5acc97648d0c64ab377124f1ef0b24832b0be52098a88ac8c16a0fe5b40045f934c49974e0153244bca86ad4387d29dddc4fc57beb8e762fea81192163d108c856a6ffa58a0735af4ba7a13859818b7816b42e9745882fc901bb1777833da0c87635b13992bb0102fa794612dcd104aae566dce8e36073cd29976fabf0f98b52d62635b5205d4a05116354ed96171472175daa97dbbe170cf7087cfea4af52f94cb4ada574bda70b216f6ea3e1890e691bf34cb35bd1c323a7376b564a288d4488d10581125d4dfecedda8f1ab43ece7e6f52ff0105efa28f907dfae32b354c22ec3226e999dfcb11f80562adc7d4437cdc941fdfed64292f5c163f5201f2daf210a457c7c2d80b8eef98155e4be8efce727a3424eb8f2e48b416ef7b778a032f5a7b8c70c7eacebe3669935a52b2aa5a31c39ad5ffb36a57e2bbca25c98db628ffe2cf09f08c325fea00b0dde6b33825916d0d14b15fac905a4708180761ee6f118b65ad4ee96d3e09ae290ce08980ff01f0bc25629bc38d2ca8d9282ef9be031001a1ea60b38fa2205063b3cd39faec43cc060f78c34f06103ebd5f2ef3ca5a75aad1e5edf97ad6ef0fa63ef64e8a957bc0757a037ad7283251d2419978aea8a60d2dce9646651c53180feacb8139fca2415ee20c7b53e1be5995d371904267462eda89150fbc03ccdeace72b043cfd0a6b15ca9c232f5e08f953fec402b939e9c5a88373b0b32b8236300d0ede6f76e36914313977c67715c8619e32d253bf2d52f2fad1a39f01184625d97dddf7ce330996f46cb676248765fe0b9de5038bf1dc9aa9c431c3122c4692e0b94d46d6110fb8aed0d6d318f46623c1a23168e5ef07b6dedbfc1323a2aa66f8cb50949e2d6394ef35fa7684df08096a11401dcd48983ebe7887e68d14d9ec60faccd783ff67c059d1c2b138b4b266a0c359be645b3d25a683d3b8098023c45677e574369d5f1f2968ea8995886788d91903d5edf08e59a12a13aa7fbd947fa052e3260415749c64d5d319ff934ed81e8380af9b60fd9364b7accd69160d32f644b8b1b842f0ac956a86df2d8b9bc9f7dd5b990847e4c360a40dd54554f2376b8faa93786db4fa669fa6eb27a1389ad296e226fd863c7a3a061963b451a5e215dc0051c3112d54f7e973332f7f132a500eca00e30059f330d438c76e2ae913c6e0e161df2011bb870dee6120286b9893d2943f577b69d67b86db64c2b00ac46faa91ffdb5f232ca26e0a44c73a9225de83ce7fee1ab9d35cda03b9acee73635c1cbb9a4f90e26e3e71e3dec949defeb6eeb1f4d665ce70b1e503229c38648f4d54fc7f50d16852d6052f631251883ccbb7665585c1020c6d13d5299343b27369639902d7deadb4bc3ceea1d62796bcad9a11e63706b75ffc176576394ff602a5577d6cf268660d0c2807b3dda7d46c60e90f12276213d69a8fe55ccf3d32dabf4667f015c8bd5fc6db7c3608972734d1e33d523a869b8290ad05c33f40b0236653cfdfc93ee51f87b65afa210de67853a61f6798f2ecb66a06a677000d2cfa55554ac70a4f16238f530396cf677de8d7c8991a4aa4c9952f38c019e4575879a672420a23c1909b10f24d527a8a11a9f741fe502d2e511efd460d0b5c0e606ba2bb7a9db2f8b1ae401250284012ec7e00411f468c2b2b8b327034f50a0fdcbfb803358705e51e7d4087b91b17025c26327ebde16e5788472ed3185206bcb881071b4b0583e956f24168895a099c4d1c85aa80674a701c6b2d44237cb5b014f7b7797195e69fc61130bfc99d2aecb697c5ff16e2c7308d0c90e0e01133016b2ae3465e45b086823c3e84187ae436c60bf4c31b55e1a4225e8ad985fbf39d16c887b40a4268af22ff5864c704568e18cea6e6036b3fc6d24ad73384c3112f40ddbd0b57d7aa889e8221f0e6d4039bd623d8b0ee530eee1277c89c2949ebc19fe977815c1288fe9e3035d624e8ba1cf12a0f89994091603bcaa12a5501a4206d2686f793c1625a83480871793d8a6f38b17a6cbb5e9e0bece18279d9be532925b25ee2a2ff679ee7b29820d1551d76a870924d438c036fbc99041cec7bcc21c7cbd0c47d994192832ab53817df8d98e29604d69b3a1f3cbdb3cc452136487cffa9394044cff82dde5add1022edc694af", 0x1000}}, 0x1006) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5, 0x0}) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0xffffffffffff249f}, &(0x7f0000000880)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20081, 0x0) r4 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) prctl$PR_CAPBSET_DROP(0x18, 0x23) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040054) accept4(r2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[], 0x0) 27.723940028s ago: executing program 6 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket(0x10, 0x3, 0x0) r12 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r12, &(0x7f0000002cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x8, 0x3, 0x3, 0x5, 0x333, 0x38, 0xbf, 0xe, 0x7, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x4, 0x200001, 0x2, 0x400}]}, 0x58) 27.723563003s ago: executing program 4 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111640000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x48, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x48}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0xc9100121, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() mmap$binder(&(0x7f0000ad6000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x82) sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 25.981128795s ago: executing program 3 (id=1639): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x9e, 0x0, 0x5}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x224, &(0x7f0000000140)={[{0x8c, 0x4e00, "25e7bdad3bdab9c5211fbccd5011e1a559ffde76fbb538c5861122011aeac8916d7985c03b77a4d4e237ca50d9fa82a0a662feb3f324eeafb7e9044e159cdcaa1158e80ba2f5295c5107cd89c89f19b08aa808fdded33a3ffcfafbb74dc85e4ab954eb71ee952f56e56ee4b5e0d07143677a4ef4931cc1e88bce14656025ea1e87d05cefe7848a8980352b8d"}, {0x4, 0x4e00, "8a01cd0f"}, {0xce, 0x4e00, "c772ad9d1be566dd87d7ca0abadb69555914b09804cc3d77b09795b182d840a89677978b7d39673a6d9ff4bfb69d9065c10b4b99dbf1b98067e31cb0d86cfb4a4482af32b5961ca3eeeba9f27210a28eb35f8622e30fa7bd6e1d6985260f9314ecdeda5b1aa56f54073d63bae6c082cd08de9945758782facd6de98970051a813acc58122d7f2503b7400ea45e169c1ff435b82470f4fdd551ee4908a1d2586a5294588a57c2499ebf14f56adb5c4b143223270c9ce1bd4acda6c810b4271d019f684fd7ede2b8c90737b892a763"}, {0xb4, 0x4e00, "3c655018acc4d1ba021773258a9b41c77e024686815ac76acb1ebac9b60b5ea43d2211171d1441eb71b8ae4c04efdcc32a54f1878113b5a188748c978fd9bf6cb3bc4df73c97c67e96a7cdfea8a25fedc0a38c4bd6b3a4e2d2af77b57809052e53ffc2550ad15d04668ce8c48c569de07b06b3c6ac392679df530075def7bb1ed731b66232e5e0ecf1dd4135591fee3ef1b52e26e2d5ed3662b86e07a2f328c5f49ea24e2e7078e949530036c0be889146ad2f39"}]}) 21.331996331s ago: executing program 34 (id=1585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e4, 0x0, 0x502, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x4, 0xc, 0x48, 0x4c, 0x6c, 0xc, 0x1, 0x6, 0x6, 0x3, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0xa, 0x9, 0x7, 0x5, 0x0, 0x5566]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x1b, 0x36, 0x62, 0x9, 0x4, 0x16, 0x3, 0x18, 0x16, 0x3, 0xc, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x4, 0xd6, 0x27cd, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x5}, {0x0, 0x9}, {0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa483, 0x4, 0xf7d9, 0xe, 0x5, 0x40, 0x7, 0x400]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9038}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x43e}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) write(r5, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x40, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @generic={0x3, 0xc, 0x5, 0x8, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1400}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x87b}], &(0x7f0000000140)='GPL\x00', 0x8000, 0x5f, &(0x7f0000000180)=""/95, 0x100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x7b, 0x44}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x5, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@private0}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x4, 0x1, 0xe3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40) 18.076814285s ago: executing program 35 (id=1586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 14.839896518s ago: executing program 4 (id=1642): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000004000000080000000600000000800000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000006c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100008d"], 0x0, 0x3c, 0x0, 0x1}, 0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000700)={0x0, 0x2, 0x8, 0x7, 0x3, 0x7b418a1c}, &(0x7f0000000740)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010200000000000000000200ffff0900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x20048890}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x30000009, 0xa5f, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)=@in={0x2, 0x4e24, @broadcast}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000180)="06c59bd2235fe669902c93f5afd80115acb3cf8b1cbeb405a19bb6ab5bbc6c7e09947457ef0a6a6b8b50264bb7b6c3235d69083e171ca92fe3944505", 0xfffffffffffffef9}, {&(0x7f00000001c0)="c5ba0ecceb16ed28460d53d2f7e8615145619255888e2c08f6011de38271cce37b130574218af56a2b56a90c606831155c9c524aa8b36c7436aa5cdcf7a5e14d8b18f0a7dd342e494e74f1de337e10bb2c36f5e25c95ff9a4283b18532294063980e7c26f4d95319851efd32f41e569067e622f5471204fe7cae4c6b4375a03493acf0e399e5ae6af65700537f20751a7c484655a61d0259d07abace889b64a1126f0076ddb554cb1ab095bee958", 0xae}, {&(0x7f0000000280)="b5350aaa999214cfc2611eb81c23cecde190d657f7b669ce296752", 0x1b}, {&(0x7f00000002c0)="9c4c53a8006995610916991d09f808e5c1272d995e670fae35dfc13347a5a37f17d19ed77e77c0e66bc99c0d15349200e46fc2e501c17fefa9f98a67fcf1eaae48b5e404fc1d85ac1fd6589099bdfa8c4a4082f69cb7", 0x56}, {&(0x7f0000000380)="c828c975a55cf5fe04b85a77652ef7973d4c1a5ee52a74ad6df31cf059da064da418bbfc2b89953de45eae7e0e12b3ed8fcfda8ba2e606bd1566dc9cd6af209edfc3355c05f7ecfaf7ee3223f6824530fcd0f5fef8a9f05fcec949f0fa41297cbb818ca8a64c", 0x66}, {&(0x7f0000000900)="315f2c57c5f781890a98e1226c53d0edd08ef7ced289abea56f99b389046eeeb68d1dbc7edf4744126d032fa032591e6c9db966ebacd189dc824c460b332ea9788afacd3bdbd7a0c91c6ef2e0126a3e7545fddb8954bd39fdf30ea508011a04bf714e35d154ad1fd1fcdc620d0c2cffe02f05c196c502bee1f692fd09d751059898f3ee198e932b51a942bf5b193eb4f7a80d61f7d6c16b003eb854895fba1f6f35282b976f11c0764", 0xa9}, {&(0x7f00000004c0)="62c97408992cb167709862238d7266169cee980ad6fc5a0875833530395ec07ec0375bf7f32a9a94fb3afafae2a1d27404384b1ea7bb652a03b817a0fca6b7ced2da680dfc6254adeced7087a5dc566629bf4dfc2114f1a466b66027185d834d8899dbe69ad83c60860e45f67be8cb5f32287f06e2b2ea8ccd6dcc2e9bdb2cc578f4dffd678fc5b41a0779933e59c45151938c7808bf23a972b94ac7e934683900e8c697886b49918128b4d10ce5450fa41ba3eb2ea906fbbaef1b4e5aaeb986b42124104c6ef199b2e1648293deb61fd9", 0xd1}, {&(0x7f00000005c0)="330c9bf6ac8020ed503d224bf36c43f2e960e7369801b85c1d6c831c4c4ddf3ef87be96c818783afcd0de48d2d5723cf9052ba9267acd0de3bab851850799a12e017a3714ddb62ff31a3a6f816805e5af0d7bedaf81f7cc0973650ab2d08ec3ffcf0481f411b11528b7b5fcc004f78ce154473a24269804069724c14c3d0de206773c782", 0x84}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="200000000000000084000000020000000b2300000100000001000000", @ANYRES32=r4, @ANYBLOB="1800000000000000840000000500000000000000ff0f000018000000000000008400000005000000300000000400000020000000000000008400000008000000fc000000000000000000000000000001180000000000000084000000000000007606030006000800"], 0x88, 0x4}, 0x20002001) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, {0xa, 0x4e23, 0x784, @mcast1, 0x8ac1}, 0x0, {[0xfffffffe, 0x47ef, 0x12cd, 0x3b, 0xffffffff, 0xb4c, 0xe, 0xd6]}}, 0x5c) 0s ago: executing program 36 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket(0x10, 0x3, 0x0) r12 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r12, &(0x7f0000002cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x8, 0x3, 0x3, 0x5, 0x333, 0x38, 0xbf, 0xe, 0x7, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x4, 0x200001, 0x2, 0x400}]}, 0x58) kernel console output (not intermixed with test programs): endor=20b7, idProduct=1540, bcdDevice= 0.00 [ 686.154557][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.227752][ T30] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 686.255485][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.625960][T10894] FAULT_INJECTION: forcing a failure. [ 686.625960][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 686.626013][T10894] CPU: 1 UID: 0 PID: 10894 Comm: syz.5.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.626037][T10894] Tainted: [L]=SOFTLOCKUP [ 686.626043][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 686.626053][T10894] Call Trace: [ 686.626059][T10894] [ 686.626065][T10894] dump_stack_lvl+0x100/0x190 [ 686.626095][T10894] should_fail_ex.cold+0x5/0xa [ 686.626123][T10894] should_failslab+0xc2/0x120 [ 686.626145][T10894] __kmalloc_noprof+0xfc/0x840 [ 686.626162][T10894] ? __pfx_dynamic_dname+0x10/0x10 [ 686.626180][T10894] ? tomoyo_encode2+0xfb/0x3c0 [ 686.626204][T10894] tomoyo_encode2+0xfb/0x3c0 [ 686.626228][T10894] tomoyo_encode+0x29/0x50 [ 686.626247][T10894] tomoyo_realpath_from_path+0x18c/0x690 [ 686.626275][T10894] tomoyo_path_number_perm+0x23c/0x580 [ 686.626293][T10894] ? tomoyo_path_number_perm+0x22e/0x580 [ 686.626312][T10894] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 686.626341][T10894] ? __lock_acquire+0x5c0/0x1f40 [ 686.626372][T10894] ? __fget_files+0x34/0x3d0 [ 686.626393][T10894] ? find_held_lock+0x2b/0x80 [ 686.626418][T10894] ? hook_file_ioctl_common+0x140/0x440 [ 686.626445][T10894] ? __fget_files+0x21f/0x3d0 [ 686.626470][T10894] security_file_ioctl+0xd3/0x230 [ 686.626489][T10894] __x64_sys_ioctl+0xb7/0x210 [ 686.626515][T10894] do_syscall_64+0x123/0x790 [ 686.626542][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.626560][T10894] RIP: 0033:0x7f26cdd9e159 [ 686.626574][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.626590][T10894] RSP: 002b:00007f26cec11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.626606][T10894] RAX: ffffffffffffffda RBX: 00007f26ce025fa0 RCX: 00007f26cdd9e159 [ 686.626618][T10894] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 686.626628][T10894] RBP: 00007f26cec11090 R08: 0000000000000000 R09: 0000000000000000 [ 686.626639][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.626649][T10894] R13: 00007f26ce026038 R14: 00007f26ce025fa0 R15: 00007ffd3fcfd488 [ 686.626674][T10894] [ 686.667796][T10894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 686.680963][ T5605] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 686.734257][ T31] audit: type=1400 audit(1789662602.118:551): avc: denied { write } for pid=10896 comm="syz.6.1251" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 686.876751][ T5605] usb 3-1: Using ep0 maxpacket: 8 [ 687.500996][ T5605] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 687.639579][T10903] ip_tables: iptables: counters copy to user failed while replacing table [ 687.680731][ T30] usb 4-1: Firmware version (0.0) predates our first public release. [ 687.681308][ T30] usb 4-1: Please update to version 0.2 or newer [ 687.681384][ T25] usb 5-1: Firmware version (0.0) predates our first public release. [ 687.681676][ T25] usb 5-1: Please update to version 0.2 or newer [ 687.803146][ T5605] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.803232][ T5605] usb 3-1: config 0 has no interface number 0 [ 687.803491][ T5605] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.803640][ T5605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.991764][ T5605] usb 3-1: config 0 descriptor?? [ 688.009035][ T5605] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 688.058618][ T31] audit: type=1400 audit(1789662603.448:552): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 688.082440][ T9064] usb 4-1: USB disconnect, device number 56 [ 688.117329][ T25] usb 5-1: USB disconnect, device number 69 [ 688.615154][T10917] ip_tables: iptables: counters copy to user failed while replacing table [ 688.743169][ T9064] usb 3-1: USB disconnect, device number 57 [ 688.756747][ T25] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 688.970580][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 688.970622][ T25] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 688.971495][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.971516][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.976142][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.976210][ T25] usb 5-1: Product: syz [ 688.976225][ T25] usb 5-1: Manufacturer: syz [ 688.976238][ T25] usb 5-1: SerialNumber: syz [ 689.047050][ T25] usb 5-1: selecting invalid altsetting 1 [ 689.049800][ T25] usb 5-1: unit 6 not found! [ 689.255566][T10924] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 689.586878][ T1215] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 689.830109][ T1215] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 691.208568][ T1215] usb 4-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 691.660897][ T1215] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 691.660921][ T1215] usb 4-1: Manufacturer: syz [ 691.660929][ T1215] usb 4-1: SerialNumber: syz [ 691.777033][ T25] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 691.898274][ T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 691.904834][ T25] usb 5-1: USB disconnect, device number 70 [ 691.941397][ T1215] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 691.975525][ T1215] usb 4-1: USB disconnect, device number 57 [ 692.039911][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.495753][T10959] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 694.607626][ T982] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 694.765795][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 694.766009][ T982] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 694.794026][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.794099][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.850502][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.851055][ T982] usb 4-1: Product: syz [ 694.851780][ T982] usb 4-1: Manufacturer: syz [ 694.852127][ T982] usb 4-1: SerialNumber: syz [ 695.178457][ T982] usb 4-1: selecting invalid altsetting 1 [ 695.226778][ T982] usb 4-1: unit 6 not found! [ 697.571962][ T982] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 697.619294][ T982] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 697.622721][ T982] usb 4-1: USB disconnect, device number 58 [ 697.678946][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.886738][ T1215] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 698.076793][ T1215] usb 6-1: Using ep0 maxpacket: 8 [ 698.077303][ T1215] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 698.078398][ T1215] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.078421][ T1215] usb 6-1: config 0 has no interface number 0 [ 698.078454][ T1215] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.078476][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.080023][ T1215] usb 6-1: config 0 descriptor?? [ 698.084513][ T1215] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 698.093155][ T982] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 698.557329][ T982] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 698.558298][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.558332][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.566951][ T982] as10x_usb: device has been detected [ 698.567638][ T982] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 698.610673][ T1215] usb 6-1: USB disconnect, device number 48 [ 698.620225][ T982] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 698.702376][ T31] audit: type=1400 audit(1789662614.088:553): avc: denied { firmware_load } for pid=982 comm="kworker/0:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 698.705381][ T982] as10x_usb: error during firmware upload part1 [ 698.705826][ T982] Registered device Abilis Systems DVB-Titan [ 698.762788][ T982] usb 4-1: USB disconnect, device number 59 [ 698.825301][ T982] Unregistered device Abilis Systems DVB-Titan [ 698.832844][ T982] as10x_usb: device has been disconnected [ 699.574211][T10991] ip_tables: iptables: counters copy to user failed while replacing table [ 699.648276][ T982] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 699.817216][ T982] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 699.818557][ T982] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 699.819916][ T982] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 699.819941][ T982] usb 3-1: Manufacturer: syz [ 699.819955][ T982] usb 3-1: SerialNumber: syz [ 699.992977][T11006] jffs2: notice: (11006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 700.013273][ T31] audit: type=1400 audit(1789662615.388:554): avc: denied { write } for pid=11005 comm="syz.3.1286" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 700.013323][ T31] audit: type=1400 audit(1789662615.388:555): avc: denied { setattr } for pid=11005 comm="syz.3.1286" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 700.017143][ T31] audit: type=1400 audit(1789662615.408:556): avc: denied { mount } for pid=11005 comm="syz.3.1286" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 700.059035][ T982] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 700.071828][ T982] usb 3-1: USB disconnect, device number 58 [ 700.153939][ T31] audit: type=1400 audit(1789662615.538:557): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 700.300827][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 700.339238][ T31] audit: type=1400 audit(1789662615.728:558): avc: denied { listen } for pid=10997 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.343165][ T31] audit: type=1400 audit(1789662615.728:559): avc: denied { connect } for pid=10997 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.355085][ T31] audit: type=1400 audit(1789662615.738:560): avc: denied { bind } for pid=11010 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 700.420921][T11011] file system registered [ 700.421109][ T31] audit: type=1400 audit(1789662615.808:561): avc: denied { write } for pid=11010 comm="syz.3.1287" name="functions" dev="configfs" ino=12541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 700.439912][ T31] audit: type=1400 audit(1789662615.818:562): avc: denied { read write } for pid=11010 comm="syz.3.1287" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 701.477372][ T5787] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 701.753932][ T5787] usb 7-1: unable to get BOS descriptor or descriptor too short [ 701.753976][ T5787] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 701.754997][ T5787] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.755018][ T5787] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.757735][ T5787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.757772][ T5787] usb 7-1: Product: syz [ 701.757786][ T5787] usb 7-1: Manufacturer: syz [ 701.757798][ T5787] usb 7-1: SerialNumber: syz [ 701.801050][ T5787] usb 7-1: selecting invalid altsetting 1 [ 701.801593][ T5787] usb 7-1: unit 6 not found! [ 702.101162][T11033] overlayfs: statfs failed on './file0' [ 702.255677][T11038] ip_tables: iptables: counters copy to user failed while replacing table [ 702.740831][T11041] openvswitch: netlink: Message has 24 unknown bytes. [ 704.366242][ T5787] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 704.528806][ T5787] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 704.542635][ T5787] usb 7-1: USB disconnect, device number 15 [ 704.672900][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.700250][T11061] FAULT_INJECTION: forcing a failure. [ 704.700250][T11061] name failslab, interval 1, probability 0, space 0, times 0 [ 704.700283][T11061] CPU: 0 UID: 0 PID: 11061 Comm: syz.3.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.700308][T11061] Tainted: [L]=SOFTLOCKUP [ 704.700314][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 704.700324][T11061] Call Trace: [ 704.700330][T11061] [ 704.700344][T11061] dump_stack_lvl+0x100/0x190 [ 704.700384][T11061] should_fail_ex.cold+0x5/0xa [ 704.700410][T11061] should_failslab+0xc2/0x120 [ 704.700434][T11061] __kmalloc_noprof+0xfc/0x840 [ 704.700453][T11061] ? tomoyo_encode2+0xfb/0x3c0 [ 704.700480][T11061] tomoyo_encode2+0xfb/0x3c0 [ 704.700505][T11061] tomoyo_encode+0x29/0x50 [ 704.700525][T11061] tomoyo_realpath_from_path+0x18c/0x690 [ 704.700553][T11061] tomoyo_path_number_perm+0x23c/0x580 [ 704.700569][T11061] ? tomoyo_path_number_perm+0x22e/0x580 [ 704.700587][T11061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 704.700615][T11061] ? __lock_acquire+0x5c0/0x1f40 [ 704.700646][T11061] ? __fget_files+0x34/0x3d0 [ 704.700668][T11061] ? find_held_lock+0x2b/0x80 [ 704.700692][T11061] ? hook_file_ioctl_common+0x140/0x440 [ 704.700718][T11061] ? __fget_files+0x21f/0x3d0 [ 704.700742][T11061] security_file_ioctl+0xd3/0x230 [ 704.700769][T11061] __x64_sys_ioctl+0xb7/0x210 [ 704.700790][T11061] do_syscall_64+0x123/0x790 [ 704.700818][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.700836][T11061] RIP: 0033:0x7f1d6999e159 [ 704.700851][T11061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.700869][T11061] RSP: 002b:00007f1d6a7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.700887][T11061] RAX: ffffffffffffffda RBX: 00007f1d69c26090 RCX: 00007f1d6999e159 [ 704.700900][T11061] RDX: 0000200000000140 RSI: 0000000080585414 RDI: 0000000000000009 [ 704.700911][T11061] RBP: 00007f1d6a7a2090 R08: 0000000000000000 R09: 0000000000000000 [ 704.700922][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.700932][T11061] R13: 00007f1d69c26128 R14: 00007f1d69c26090 R15: 00007ffc25e5e328 [ 704.700958][T11061] [ 704.700974][T11061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 705.126664][ T9064] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 705.166663][ T5605] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 705.297342][ T9064] usb 3-1: Using ep0 maxpacket: 8 [ 705.299711][ T9064] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.302274][ T9064] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 705.302320][ T9064] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 705.302345][ T9064] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 705.302363][ T9064] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 705.302384][ T9064] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 705.302403][ T9064] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.302437][ T9064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.377320][ T5605] usb 7-1: Using ep0 maxpacket: 8 [ 705.407919][ T5605] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 705.434421][ T5605] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 705.434543][ T5605] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 705.436282][ T5605] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.456793][ T5605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.730148][ T5605] usbtmc 7-1:16.0: bulk endpoints not found [ 705.762469][ T9064] usb 3-1: usb_control_msg returned -32 [ 705.762515][ T9064] usbtmc 3-1:16.0: can't read capabilities [ 705.933731][ T9064] usb 7-1: USB disconnect, device number 16 [ 707.144439][T11064] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 707.794820][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 707.794836][ T31] audit: type=1400 audit(1789662623.178:568): avc: denied { lock } for pid=11091 comm="syz.4.1309" path="socket:[28454]" dev="sockfs" ino=28454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 708.538952][ T25] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 708.707567][ T25] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 708.709477][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.709527][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 708.709550][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.710826][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 708.710847][ T25] usb 4-1: Product: syz [ 708.710861][ T25] usb 4-1: Manufacturer: syz [ 708.739203][T11094] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 708.794427][ T25] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 708.815635][ T25] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 708.981368][ T5605] usb 4-1: USB disconnect, device number 60 [ 709.000728][ T5605] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 709.001017][ T5605] garmin_gps 4-1:1.0: device disconnected [ 709.119217][ T5787] usb 3-1: USB disconnect, device number 59 [ 709.513902][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 709.513935][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1315'. [ 709.552805][T11108] geneve2: entered promiscuous mode [ 709.564161][T11108] geneve2: entered allmulticast mode [ 709.566650][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.566687][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.567275][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.567302][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.356125][T11121] ip_tables: iptables: counters copy to user failed while replacing table [ 711.570775][T11138] ip_tables: iptables: counters copy to user failed while replacing table [ 712.413912][ T31] audit: type=1400 audit(1789662627.798:569): avc: denied { mount } for pid=11142 comm="syz.4.1324" name="/" dev="autofs" ino=29439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 712.636380][T11147] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 715.907517][ T982] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 715.967926][T11165] netlink: 'syz.6.1323': attribute type 1 has an invalid length. [ 716.045373][T11165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 716.056624][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 716.057133][ T982] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 716.058009][ T982] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.058029][ T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.058973][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.058989][ T982] usb 3-1: SerialNumber: syz [ 716.073707][ T982] usb 3-1: 0:2 : does not exist [ 716.165683][T11163] fuse: Bad value for 'group_id' [ 716.175128][T11166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 716.175544][T11166] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 716.187403][T11166] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 716.199650][T11163] fuse: Bad value for 'group_id' [ 716.436346][T11168] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 716.444042][T11168] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 716.705630][ T982] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 716.839295][ T1105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 716.862650][ T982] usb 3-1: USB disconnect, device number 60 [ 716.909047][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.156799][ T5787] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 718.312916][ T5787] usb 7-1: not running at top speed; connect to a high speed hub [ 718.313079][ T5787] usb 7-1: New USB device found, idVendor=0846, idProduct=4220, bcdDevice=98.19 [ 718.315913][ T5787] usb 7-1: config 0 has an invalid interface number: 111 but max is 0 [ 718.316220][ T5787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.316252][ T5787] usb 7-1: config 0 has no interface number 0 [ 718.316395][ T5787] usb 7-1: config 0 interface 111 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 718.316438][ T5787] usb 7-1: config 0 interface 111 has no altsetting 0 [ 718.391687][ T5787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.391712][ T5787] usb 7-1: Product: 碒絎ᚚᱭ퓡⺪ȱጣ篷仕ࢃⲺᑢ۰깨쀋琊톏ᶑ፥怎䗌蛱堃탈ឫ쑥컾 [ 718.391735][ T5787] usb 7-1: Manufacturer: ц [ 718.391747][ T5787] usb 7-1: SerialNumber: 閞್䩍瀅先⽅殒䁪볃鼱孤盧橗黾鏖垐ꪛ츇,섓䡆ય㲲먚鬵碊̦ꘞ轈솝갾鶼둞봱༻ᅮ♄乎軡쟍畡蠖۰ᾝ엏䡈ௐ [ 718.394088][ T5787] usb 7-1: config 0 descriptor?? [ 718.650401][ T5787] usb 7-1: USB disconnect, device number 17 [ 719.411506][ T31] audit: type=1400 audit(1789662634.798:570): avc: denied { create } for pid=11211 comm="syz.6.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.419619][T11212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.739489][T11217] FAULT_INJECTION: forcing a failure. [ 719.739489][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 719.739523][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.3.1344 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.739549][T11217] Tainted: [L]=SOFTLOCKUP [ 719.739556][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 719.739566][T11217] Call Trace: [ 719.739573][T11217] [ 719.739580][T11217] dump_stack_lvl+0x100/0x190 [ 719.739613][T11217] should_fail_ex.cold+0x5/0xa [ 719.739639][T11217] should_failslab+0xc2/0x120 [ 719.739663][T11217] __kmalloc_node_noprof+0xff/0x880 [ 719.739683][T11217] ? __get_vm_area_node+0x1ff/0x350 [ 719.739711][T11217] ? __get_vm_area_node+0x22b/0x350 [ 719.739733][T11217] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 719.739757][T11217] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 719.739778][T11217] ? find_check_entry.isra.0+0x51c/0x990 [ 719.739804][T11217] ? xt_counters_alloc+0x4c/0x70 [ 719.739827][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 719.739854][T11217] ? xt_counters_alloc+0x4c/0x70 [ 719.739871][T11217] __vmalloc_node_noprof+0xad/0xf0 [ 719.739889][T11217] ? xt_counters_alloc+0x4c/0x70 [ 719.739909][T11217] xt_counters_alloc+0x4c/0x70 [ 719.739926][T11217] __do_replace+0x97/0x980 [ 719.739952][T11217] ? __pfx___do_replace+0x10/0x10 [ 719.739977][T11217] do_ipt_set_ctl+0xa53/0xcf0 [ 719.739998][T11217] ? nf_sockopt_find.isra.0+0x222/0x290 [ 719.740017][T11217] ? nf_sockopt_find.isra.0+0x222/0x290 [ 719.740037][T11217] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 719.740062][T11217] ? __mutex_unlock_slowpath+0x35d/0x930 [ 719.740084][T11217] ? sockopt_release_sock+0x5c/0x70 [ 719.740103][T11217] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 719.740131][T11217] ? nf_sockopt_find.isra.0+0x222/0x290 [ 719.740151][T11217] nf_setsockopt+0x8d/0xf0 [ 719.740171][T11217] ip_setsockopt+0xcb/0xf0 [ 719.740195][T11217] tcp_setsockopt+0xa7/0x100 [ 719.740211][T11217] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 719.740233][T11217] do_sock_setsockopt+0xf3/0x1d0 [ 719.740256][T11217] __sys_setsockopt+0x195/0x220 [ 719.740276][T11217] __x64_sys_setsockopt+0xbd/0x160 [ 719.740292][T11217] ? do_syscall_64+0xae/0x790 [ 719.740310][T11217] ? lockdep_hardirqs_on+0x7d/0x110 [ 719.740329][T11217] do_syscall_64+0x123/0x790 [ 719.740350][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.740365][T11217] RIP: 0033:0x7f1d6999e159 [ 719.740377][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.740390][T11217] RSP: 002b:00007f1d6a7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 719.740405][T11217] RAX: ffffffffffffffda RBX: 00007f1d69c26180 RCX: 00007f1d6999e159 [ 719.740414][T11217] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 719.740422][T11217] RBP: 00007f1d6a7de090 R08: 00000000000003f0 R09: 0000000000000000 [ 719.740431][T11217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.740439][T11217] R13: 00007f1d69c26218 R14: 00007f1d69c26180 R15: 00007ffc25e5e328 [ 719.740458][T11217] [ 719.740688][T11217] syz.3.1344: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 719.740910][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.3.1344 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.740931][T11217] Tainted: [L]=SOFTLOCKUP [ 719.740936][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 719.740944][T11217] Call Trace: [ 719.740948][T11217] [ 719.740953][T11217] dump_stack_lvl+0x100/0x190 [ 719.740977][T11217] warn_alloc.cold+0x9e/0xb2 [ 719.740993][T11217] ? __pfx_warn_alloc+0x10/0x10 [ 719.741015][T11217] ? dump_stack_lvl+0x17c/0x190 [ 719.741035][T11217] ? rcu_is_watching+0x13/0xc0 [ 719.741062][T11217] ? __kasan_kmalloc+0x8a/0xb0 [ 719.741078][T11217] ? __kmalloc_node_noprof+0x360/0x880 [ 719.741093][T11217] ? __get_vm_area_node+0x1ff/0x350 [ 719.741110][T11217] ? __get_vm_area_node+0x22b/0x350 [ 719.741126][T11217] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 719.741149][T11217] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 719.741169][T11217] ? find_check_entry.isra.0+0x51c/0x990 [ 719.741195][T11217] ? xt_counters_alloc+0x4c/0x70 [ 719.741218][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 719.741244][T11217] ? xt_counters_alloc+0x4c/0x70 [ 719.741261][T11217] __vmalloc_node_noprof+0xad/0xf0 [ 719.741279][T11217] ? xt_counters_alloc+0x4c/0x70 [ 719.741298][T11217] xt_counters_alloc+0x4c/0x70 [ 719.741316][T11217] __do_replace+0x97/0x980 [ 719.741341][T11217] ? __pfx___do_replace+0x10/0x10 [ 719.741367][T11217] do_ipt_set_ctl+0xa53/0xcf0 [ 719.741387][T11217] ? nf_sockopt_find.isra.0+0x222/0x290 [ 719.741405][T11217] ? nf_sockopt_find.isra.0+0x222/0x290 [ 719.741426][T11217] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 719.741447][T11217] ? __mutex_unlock_slowpath+0x35d/0x930 [ 719.741468][T11217] ? sockopt_release_sock+0x5c/0x70 [ 719.741487][T11217] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 719.741515][T11217] ? nf_sockopt_find.isra.0+0x222/0x290 [ 719.741535][T11217] nf_setsockopt+0x8d/0xf0 [ 719.741555][T11217] ip_setsockopt+0xcb/0xf0 [ 719.741578][T11217] tcp_setsockopt+0xa7/0x100 [ 719.741593][T11217] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 719.741615][T11217] do_sock_setsockopt+0xf3/0x1d0 [ 719.741636][T11217] __sys_setsockopt+0x195/0x220 [ 719.741656][T11217] __x64_sys_setsockopt+0xbd/0x160 [ 719.741672][T11217] ? do_syscall_64+0xae/0x790 [ 719.741690][T11217] ? lockdep_hardirqs_on+0x7d/0x110 [ 719.741714][T11217] do_syscall_64+0x123/0x790 [ 719.741743][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.741758][T11217] RIP: 0033:0x7f1d6999e159 [ 719.741770][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.741782][T11217] RSP: 002b:00007f1d6a7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 719.741796][T11217] RAX: ffffffffffffffda RBX: 00007f1d69c26180 RCX: 00007f1d6999e159 [ 719.741805][T11217] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 719.741814][T11217] RBP: 00007f1d6a7de090 R08: 00000000000003f0 R09: 0000000000000000 [ 719.741822][T11217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.741832][T11217] R13: 00007f1d69c26218 R14: 00007f1d69c26180 R15: 00007ffc25e5e328 [ 719.741851][T11217] [ 719.741859][T11217] Mem-Info: [ 719.741866][T11217] active_anon:28253 inactive_anon:0 isolated_anon:0 [ 719.741866][T11217] active_file:0 inactive_file:62585 isolated_file:0 [ 719.741866][T11217] unevictable:0 dirty:494 writeback:0 [ 719.741866][T11217] slab_reclaimable:12050 slab_unreclaimable:100750 [ 719.741866][T11217] mapped:45347 shmem:15330 pagetables:1708 [ 719.741866][T11217] sec_pagetables:0 bounce:0 [ 719.741866][T11217] kernel_misc_reclaimable:0 [ 719.741866][T11217] free:1245005 free_pcp:12093 free_cma:0 [ 719.741922][T11217] Node 0 active_anon:113012kB inactive_anon:0kB active_file:0kB inactive_file:250136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181388kB dirty:1972kB writeback:0kB shmem:61320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13192kB pagetables:6684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 719.741980][T11217] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 719.742034][T11217] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.742105][T11217] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 719.742170][T11217] Node 0 DMA32 free:1033072kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:113012kB inactive_anon:0kB active_file:0kB inactive_file:250136kB unevictable:0kB writepending:1972kB zspages:0kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:48368kB local_pcp:36692kB free_cma:0kB [ 719.742243][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 719.742367][T11217] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.742436][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 719.742492][T11217] Node 1 Normal free:3931588kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.742540][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 719.742591][T11217] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 719.742918][T11217] Node 0 DMA32: 1134*4kB (UM) 1079*8kB (UM) 1388*16kB (UME) 1094*32kB (UME) 237*64kB (UME) 311*128kB (UM) 172*256kB (UME) 89*512kB (UME) 23*1024kB (M) 8*2048kB (UME) 190*4096kB (UM) = 1033136kB [ 719.743294][T11217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.743511][T11217] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 7*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (M) 958*4096kB (M) = 3931588kB [ 719.743923][T11217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.743949][T11217] Node 0 hugepages_total=12 hugepages_free=12 hugepages_surp=0 hugepages_size=2048kB [ 719.743975][T11217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.744000][T11217] Node 1 hugepages_total=11 hugepages_free=11 hugepages_surp=0 hugepages_size=2048kB [ 719.744026][T11217] 77913 total pagecache pages [ 719.744048][T11217] 0 pages in swap cache [ 719.744066][T11217] Free swap = 124996kB [ 719.744083][T11217] Total swap = 124996kB [ 719.744103][T11217] 2097051 pages RAM [ 719.744121][T11217] 0 pages HighMem/MovableOnly [ 719.744128][T11217] 432785 pages reserved [ 719.744136][T11217] 0 pages cma reserved [ 719.808790][ T31] audit: type=1400 audit(1789662635.118:571): avc: denied { bind } for pid=11214 comm="syz.3.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 720.338000][ T5605] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 720.540314][ T5605] usb 7-1: Using ep0 maxpacket: 8 [ 720.550776][ T5605] usb 7-1: unable to get BOS descriptor or descriptor too short [ 720.550818][ T5605] usb 7-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 720.554029][ T5605] usb 7-1: config 10 has an invalid interface number: 91 but max is 0 [ 720.554054][ T5605] usb 7-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 720.554069][ T5605] usb 7-1: config 10 has no interface number 0 [ 720.554091][ T5605] usb 7-1: config 10 interface 91 has no altsetting 0 [ 720.569457][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.569483][ T5605] usb 7-1: Product: syz [ 720.569496][ T5605] usb 7-1: Manufacturer: syz [ 720.569507][ T5605] usb 7-1: SerialNumber: syz [ 721.093998][ T5605] uvcvideo 7-1:10.91: probe with driver uvcvideo failed with error -22 [ 721.110113][ T5605] usb 7-1: USB disconnect, device number 18 [ 721.406652][ T5787] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 721.557848][ T5787] usb 4-1: not running at top speed; connect to a high speed hub [ 721.557880][ T5787] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 721.558967][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 721.598467][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.598495][ T5787] usb 4-1: Product: syz [ 721.598510][ T5787] usb 4-1: Manufacturer: syz [ 721.598524][ T5787] usb 4-1: SerialNumber: syz [ 721.630136][ T5787] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 721.645665][ T5787] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 721.660267][ T5787] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 721.689183][ T5787] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 721.695288][ T5787] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 723.696845][ T5605] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 723.758129][ T9064] usb 4-1: USB disconnect, device number 61 [ 723.766838][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 723.818245][ T9064] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 723.858134][ T5605] usb 7-1: Using ep0 maxpacket: 8 [ 723.859749][ T9064] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 723.862523][ T5605] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.863961][ T5605] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 723.864003][ T5605] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 723.864026][ T5605] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 723.864047][ T5605] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 723.864069][ T5605] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 723.864090][ T5605] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.864131][ T5605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.801736][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 724.801861][ T25] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 724.802911][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.802929][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.819877][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.819905][ T25] usb 3-1: Product: syz [ 724.819918][ T25] usb 3-1: Manufacturer: syz [ 724.819933][ T25] usb 3-1: SerialNumber: syz [ 724.944456][ T9064] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 724.994219][ T25] usb 3-1: selecting invalid altsetting 1 [ 724.994577][ T25] usb 3-1: unit 6 not found! [ 725.030362][ T9064] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 725.032812][ T9064] keyspan 4-1:1.0: device disconnected [ 725.210199][ T5605] usb 7-1: usb_control_msg returned -32 [ 725.210241][ T5605] usbtmc 7-1:16.0: can't read capabilities [ 726.766805][T11267] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 728.760494][ T25] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 728.835483][ T25] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 728.841503][ T25] usb 3-1: USB disconnect, device number 61 [ 728.890044][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.963482][ T5605] usb 7-1: USB disconnect, device number 19 [ 731.152323][ T31] audit: type=1400 audit(1789662646.538:572): avc: denied { create } for pid=11298 comm="syz.4.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 731.366875][ T5605] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 731.542902][ T5605] usb 7-1: unable to get BOS descriptor or descriptor too short [ 731.542945][ T5605] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 731.543986][ T5605] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.544007][ T5605] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.547302][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.547323][ T5605] usb 7-1: Product: syz [ 731.547335][ T5605] usb 7-1: Manufacturer: syz [ 731.547346][ T5605] usb 7-1: SerialNumber: syz [ 731.577960][ T5605] usb 7-1: selecting invalid altsetting 1 [ 731.578486][ T5605] usb 7-1: unit 6 not found! [ 732.654821][T11316] ip_tables: iptables: counters copy to user failed while replacing table [ 733.697093][ T31] audit: type=1400 audit(1789662649.088:573): avc: denied { getopt } for pid=11319 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.681976][ T5605] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 735.082124][ T5605] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 735.117705][ T5605] usb 7-1: USB disconnect, device number 20 [ 735.169192][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.168212][T11329] ip_tables: iptables: counters copy to user failed while replacing table [ 736.316753][ T31] audit: type=1400 audit(1789662651.698:574): avc: denied { nlmsg_read } for pid=11339 comm="syz.4.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 736.318796][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 736.366728][ T9064] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 736.536632][ T9064] usb 4-1: Using ep0 maxpacket: 8 [ 736.537158][ T9064] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 736.538110][ T9064] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 736.538138][ T9064] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 736.538162][ T9064] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.538184][ T9064] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.538220][ T9064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.748599][ T9064] usb 4-1: GET_CAPABILITIES returned 0 [ 736.748641][ T9064] usbtmc 4-1:16.0: can't read capabilities [ 737.587718][ T31] audit: type=1400 audit(1789662652.948:575): avc: denied { watch } for pid=11357 comm="syz.2.1385" path="/285/file0" dev="tmpfs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 737.601621][ T31] audit: type=1400 audit(1789662652.988:576): avc: denied { accept } for pid=11357 comm="syz.2.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 739.309116][ T25] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 739.458726][ T25] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 739.462897][ T25] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 739.493932][ T25] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 739.494045][ T25] usb 7-1: Manufacturer: syz [ 739.494147][ T25] usb 7-1: SerialNumber: syz [ 740.299310][ T30] usb 4-1: USB disconnect, device number 62 [ 740.310217][ T25] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 740.317036][ T25] usb 7-1: USB disconnect, device number 21 [ 740.652500][T11379] fuse: Bad value for 'group_id' [ 740.652522][T11379] fuse: Bad value for 'group_id' [ 741.272169][T11388] ip_tables: iptables: counters copy to user failed while replacing table [ 741.646679][ T30] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 741.681268][T11394] ip_tables: iptables: counters copy to user failed while replacing table [ 741.746462][T11402] xt_hashlimit: size too large, truncated to 1048576 [ 741.797092][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.856759][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 741.857256][ T30] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.858321][ T30] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.858344][ T30] usb 3-1: config 0 has no interface number 0 [ 741.858375][ T30] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.858408][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.861672][ T30] usb 3-1: config 0 descriptor?? [ 742.276270][ T30] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 744.423564][ T31] audit: type=1400 audit(1789662659.808:577): avc: denied { module_load } for pid=11417 comm="syz.3.1401" path="/sys/kernel/oops_count" dev="sysfs" ino=53295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 744.959496][ T9064] usb 3-1: USB disconnect, device number 62 [ 745.010638][T11430] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 745.010667][T11430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 745.010732][T11430] vhci_hcd vhci_hcd.0: Device attached [ 745.036128][T11433] vhci_hcd: connection closed [ 745.036327][ T5835] vhci_hcd vhci_hcd.5: stop threads [ 745.036352][ T5835] vhci_hcd vhci_hcd.5: release socket [ 745.036374][ T5835] vhci_hcd vhci_hcd.5: disconnect device [ 745.095031][ T31] audit: type=1400 audit(1789662660.478:578): avc: denied { ioctl } for pid=11431 comm="syz.6.1404" path="socket:[30869]" dev="sockfs" ino=30869 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 745.883018][T11448] FAULT_INJECTION: forcing a failure. [ 745.883018][T11448] name failslab, interval 1, probability 0, space 0, times 0 [ 745.883041][T11448] CPU: 1 UID: 0 PID: 11448 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.883056][T11448] Tainted: [L]=SOFTLOCKUP [ 745.883060][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 745.883067][T11448] Call Trace: [ 745.883071][T11448] [ 745.883075][T11448] dump_stack_lvl+0x100/0x190 [ 745.883095][T11448] should_fail_ex.cold+0x5/0xa [ 745.883111][T11448] should_failslab+0xc2/0x120 [ 745.883126][T11448] __kmalloc_noprof+0xfc/0x840 [ 745.883137][T11448] ? rcu_is_watching+0x13/0xc0 [ 745.883153][T11448] ? tomoyo_realpath_from_path+0xb6/0x690 [ 745.883171][T11448] tomoyo_realpath_from_path+0xb6/0x690 [ 745.883188][T11448] tomoyo_check_open_permission+0x2af/0x3c0 [ 745.883201][T11448] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 745.883217][T11448] ? hook_file_open+0x248/0x8e0 [ 745.883242][T11448] ? path_get+0x61/0x80 [ 745.883263][T11448] tomoyo_file_open+0x6b/0x90 [ 745.883288][T11448] security_file_open+0xb5/0x1e0 [ 745.883310][T11448] do_dentry_open+0x588/0x14d0 [ 745.883336][T11448] vfs_open+0x82/0x3f0 [ 745.883354][T11448] path_openat+0x19fa/0x2440 [ 745.883378][T11448] ? __pfx_path_openat+0x10/0x10 [ 745.883396][T11448] do_file_open+0x20e/0x430 [ 745.883411][T11448] ? __pfx_do_file_open+0x10/0x10 [ 745.883435][T11448] ? _raw_spin_unlock+0x28/0x50 [ 745.883448][T11448] ? alloc_fd+0x471/0x7a0 [ 745.883466][T11448] do_sys_openat2+0x10f/0x1e0 [ 745.883481][T11448] ? __pfx_do_sys_openat2+0x10/0x10 [ 745.883495][T11448] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 745.883514][T11448] __x64_sys_openat+0x12d/0x210 [ 745.883529][T11448] ? __pfx___x64_sys_openat+0x10/0x10 [ 745.883550][T11448] do_syscall_64+0x123/0x790 [ 745.883566][T11448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.883578][T11448] RIP: 0033:0x7f6426d5e98e [ 745.883587][T11448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.883598][T11448] RSP: 002b:00007f6427c02b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 745.883609][T11448] RAX: ffffffffffffffda RBX: 00007f6427c036c0 RCX: 00007f6426d5e98e [ 745.883616][T11448] RDX: 0000000000040002 RSI: 00007f6427c02c00 RDI: ffffffffffffff9c [ 745.883623][T11448] RBP: 00007f6427c02c00 R08: 0000000000000000 R09: 0000000000000000 [ 745.883629][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 745.883636][T11448] R13: 00007f6427026038 R14: 00007f6427025fa0 R15: 00007ffc8bb2e318 [ 745.883650][T11448] [ 745.976063][T11448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 746.310634][T11451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1409'. [ 746.329867][T11451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1409'. [ 746.408238][ T31] audit: type=1400 audit(1789662661.738:579): avc: denied { setopt } for pid=11454 comm="syz.5.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 746.408268][ T31] audit: type=1400 audit(1789662661.758:580): avc: denied { bind } for pid=11454 comm="syz.5.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 746.408287][ T31] audit: type=1400 audit(1789662661.768:581): avc: denied { map } for pid=11454 comm="syz.5.1411" path="socket:[30268]" dev="sockfs" ino=30268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 746.408307][ T31] audit: type=1400 audit(1789662661.768:582): avc: denied { read } for pid=11454 comm="syz.5.1411" path="socket:[30268]" dev="sockfs" ino=30268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 747.906350][ T31] audit: type=1400 audit(1789662663.288:583): avc: denied { read } for pid=11464 comm="syz.6.1414" name="idVendor" dev="configfs" ino=30292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 747.947022][ T31] audit: type=1400 audit(1789662663.338:584): avc: denied { write } for pid=11464 comm="syz.6.1414" name="configs" dev="configfs" ino=12542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.048981][ T31] audit: type=1400 audit(1789662663.438:585): avc: denied { write } for pid=11464 comm="syz.6.1414" name="c.1" dev="configfs" ino=30914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.095411][ T31] audit: type=1400 audit(1789662663.478:586): avc: denied { create } for pid=11464 comm="syz.6.1414" name="uac2.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 748.261960][ T9064] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 748.317326][T11479] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1417'. [ 748.317366][T11479] openvswitch: netlink: Flow key attr not present in new flow. [ 748.554323][ T55] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 748.577828][ T9064] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 748.602049][ T9064] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.602082][ T9064] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.602114][ T9064] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.653008][ T9064] usb 7-1: config 0 descriptor?? [ 748.883406][ T9064] usbhid 7-1:0.0: can't add hid device: -71 [ 748.883515][ T9064] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 748.912134][ T9064] usb 7-1: USB disconnect, device number 22 [ 748.967177][ T30] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 749.106674][ T5787] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 749.127056][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 749.149821][ T30] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 749.156259][ T30] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 749.156285][ T30] usb 3-1: config 0 has no interface number 0 [ 749.156316][ T30] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.156351][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.167568][ T30] usb 3-1: config 0 descriptor?? [ 749.222427][ T30] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 749.262971][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 749.263008][ T5787] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 749.263856][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.263876][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.265590][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.265611][ T5787] usb 4-1: Product: syz [ 749.265619][ T5787] usb 4-1: Manufacturer: syz [ 749.265635][ T5787] usb 4-1: SerialNumber: syz [ 749.345293][ T5787] usb 4-1: selecting invalid altsetting 1 [ 749.345862][ T5787] usb 4-1: unit 6 not found! [ 749.635527][T11492] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 749.858353][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 749.858379][ T31] audit: type=1400 audit(1789662665.198:589): avc: denied { create } for pid=11493 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 749.858606][ T31] audit: type=1400 audit(1789662665.208:590): avc: denied { setopt } for pid=11493 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.121201][ T5780] usb 3-1: USB disconnect, device number 63 [ 752.301374][T11507] FAULT_INJECTION: forcing a failure. [ 752.301374][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 752.301411][T11507] CPU: 0 UID: 0 PID: 11507 Comm: syz.2.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.301426][T11507] Tainted: [L]=SOFTLOCKUP [ 752.301430][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 752.301437][T11507] Call Trace: [ 752.301441][T11507] [ 752.301445][T11507] dump_stack_lvl+0x100/0x190 [ 752.301465][T11507] should_fail_ex.cold+0x5/0xa [ 752.301482][T11507] should_failslab+0xc2/0x120 [ 752.301496][T11507] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 752.301509][T11507] ? __alloc_skb+0x5b7/0x710 [ 752.301521][T11507] ? __alloc_skb+0x140/0x710 [ 752.301538][T11507] __alloc_skb+0x140/0x710 [ 752.301550][T11507] ? __alloc_skb+0x5b7/0x710 [ 752.301561][T11507] ? __pfx___alloc_skb+0x10/0x10 [ 752.301577][T11507] netlink_alloc_large_skb+0x69/0x150 [ 752.301591][T11507] netlink_sendmsg+0x680/0xda0 [ 752.301606][T11507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.301619][T11507] ? selinux_socket_sendmsg+0x198/0x2f0 [ 752.301634][T11507] ____sys_sendmsg+0xa4d/0xbe0 [ 752.301649][T11507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.301662][T11507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.301682][T11507] ? lock_acquire+0x1d1/0x380 [ 752.301693][T11507] ? get_pid_task+0x2a/0x250 [ 752.301709][T11507] ___sys_sendmsg+0x190/0x1e0 [ 752.301727][T11507] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.301747][T11507] ? get_pid_task+0x106/0x250 [ 752.301767][T11507] ? find_held_lock+0x2b/0x80 [ 752.301792][T11507] __sys_sendmsg+0x160/0x210 [ 752.301808][T11507] ? __pfx___sys_sendmsg+0x10/0x10 [ 752.301829][T11507] do_syscall_64+0x123/0x790 [ 752.301845][T11507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.301857][T11507] RIP: 0033:0x7f17aaf9e159 [ 752.301867][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.301877][T11507] RSP: 002b:00007f17abe98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.301888][T11507] RAX: ffffffffffffffda RBX: 00007f17ab225fa0 RCX: 00007f17aaf9e159 [ 752.301896][T11507] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 752.301902][T11507] RBP: 00007f17abe98090 R08: 0000000000000000 R09: 0000000000000000 [ 752.301909][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.301915][T11507] R13: 00007f17ab226038 R14: 00007f17ab225fa0 R15: 00007fffb530fbb8 [ 752.301929][T11507] [ 752.616478][ T5787] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 753.196099][ T5787] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 753.210372][ T5787] usb 4-1: USB disconnect, device number 63 [ 753.254436][ T31] audit: type=1400 audit(1789662668.638:591): avc: denied { create } for pid=11515 comm="syz.4.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 753.370364][ T31] audit: type=1400 audit(1789662668.758:592): avc: denied { setopt } for pid=11515 comm="syz.4.1423" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 753.415178][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.847588][ T30] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 755.276929][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 755.314026][ T30] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 755.342622][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.343654][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.572484][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 755.572510][ T30] usb 4-1: SerialNumber: syz [ 755.581217][ T30] usb 4-1: 0:2 : does not exist [ 756.369814][T11527] ip_tables: iptables: counters copy to user failed while replacing table [ 757.167459][ T30] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 757.309711][ T30] usb 4-1: USB disconnect, device number 64 [ 757.404900][T10619] udevd[10619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.471298][ T31] audit: type=1400 audit(1789662672.858:593): avc: denied { setopt } for pid=11554 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 757.693613][T11555] FAULT_INJECTION: forcing a failure. [ 757.693613][T11555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.693646][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.2.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.693674][T11555] Tainted: [L]=SOFTLOCKUP [ 757.693680][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 757.693691][T11555] Call Trace: [ 757.693698][T11555] [ 757.693705][T11555] dump_stack_lvl+0x100/0x190 [ 757.693743][T11555] should_fail_ex.cold+0x5/0xa [ 757.693769][T11555] _copy_to_user+0x32/0xd0 [ 757.693790][T11555] simple_read_from_buffer+0xcb/0x170 [ 757.693815][T11555] proc_fail_nth_read+0x1af/0x230 [ 757.693839][T11555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.693864][T11555] ? rw_verify_area+0xce/0x6d0 [ 757.693890][T11555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.693913][T11555] vfs_read+0x1e4/0xb40 [ 757.693932][T11555] ? lock_acquire+0x1d1/0x380 [ 757.693951][T11555] ? __fget_files+0x34/0x3d0 [ 757.693973][T11555] ? __pfx_vfs_read+0x10/0x10 [ 757.693989][T11555] ? find_held_lock+0x2b/0x80 [ 757.694015][T11555] ? __fget_files+0x215/0x3d0 [ 757.694041][T11555] ? __fget_files+0x21f/0x3d0 [ 757.694070][T11555] ksys_read+0x12a/0x250 [ 757.694088][T11555] ? __pfx_ksys_read+0x10/0x10 [ 757.694114][T11555] do_syscall_64+0x123/0x790 [ 757.694141][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.694160][T11555] RIP: 0033:0x7f17aaf5e98e [ 757.694175][T11555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.694191][T11555] RSP: 002b:00007f17abe97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.694209][T11555] RAX: ffffffffffffffda RBX: 00007f17abe986c0 RCX: 00007f17aaf5e98e [ 757.694220][T11555] RDX: 000000000000000f RSI: 00007f17abe980a0 RDI: 0000000000000007 [ 757.694231][T11555] RBP: 00007f17abe98090 R08: 0000000000000000 R09: 0000000000000000 [ 757.694241][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.694251][T11555] R13: 00007f17ab226038 R14: 00007f17ab225fa0 R15: 00007fffb530fbb8 [ 757.694275][T11555] [ 759.959330][T11581] ip_tables: iptables: counters copy to user failed while replacing table [ 760.582874][ T5780] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 761.406931][ T5780] usb 3-1: Using ep0 maxpacket: 16 [ 761.407733][ T5780] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 761.410630][ T5780] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.410666][ T5780] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.410686][ T5780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 761.410714][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.421588][ T5780] usb 3-1: config 0 descriptor?? [ 762.234918][ T5780] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 762.234938][ T5780] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 762.234950][ T5780] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 762.234961][ T5780] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 762.234973][ T5780] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 762.235309][ T5780] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 762.700824][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.701188][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.718797][T11577] i2c i2c-1: unsupported multi-msg i2c transaction [ 762.742166][ T5780] usb 3-1: USB disconnect, device number 64 [ 763.126034][ T31] audit: type=1400 audit(1789662678.508:594): avc: denied { mount } for pid=11611 comm="syz.6.1452" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 763.149312][ T31] audit: type=1400 audit(1789662678.538:595): avc: denied { mounton } for pid=11611 comm="syz.6.1452" path="/118/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 763.367692][ T25] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 763.546988][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 763.554795][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 763.601544][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.601986][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.602477][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.637837][ T5780] kernel read not supported for file /dsp1 (pid: 5780 comm: kworker/0:6) [ 763.659258][ T25] usb 6-1: config 0 descriptor?? [ 763.665486][ T25] hub 6-1:0.0: USB hub found [ 763.813654][ T31] audit: type=1400 audit(1789662679.198:596): avc: denied { setopt } for pid=11619 comm="syz.3.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 763.850401][ T31] audit: type=1400 audit(1789662679.238:597): avc: denied { mount } for pid=11619 comm="syz.3.1454" name="/" dev="hugetlbfs" ino=31164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 763.892291][ T31] audit: type=1400 audit(1789662679.278:598): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 763.926254][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.926696][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.273196][T11610] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 764.798477][ T31] audit: type=1400 audit(1789662680.188:599): avc: denied { append } for pid=11608 comm="syz.5.1445" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 764.971221][ T31] audit: type=1400 audit(1789662680.358:600): avc: denied { unmount } for pid=9119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 765.149849][T11646] libceph: secret too big 258 [ 765.283292][ T7086] IPVS: starting estimator thread 0... [ 765.366722][T11648] IPVS: using max 46 ests per chain, 110400 per kthread [ 765.638381][ T25] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 765.656252][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 765.656337][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 765.678477][ T25] usb 6-1: USB disconnect, device number 49 [ 765.844377][ T31] audit: type=1400 audit(1789662681.228:601): avc: denied { write } for pid=11652 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 765.844710][ T31] audit: type=1400 audit(1789662681.228:602): avc: denied { connect } for pid=11652 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 765.845201][ T31] audit: type=1400 audit(1789662681.228:603): avc: denied { name_connect } for pid=11652 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 766.304883][T11658] xt_hashlimit: size too large, truncated to 1048576 [ 767.475388][T11675] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 767.571413][T11675] CIFS: Attempting to mount //127.0.0.1/share [ 767.644249][T11678] CIFS: VFS: Invalid response size 0 for command 0 [ 767.644960][T11675] CIFS: VFS: cifs_mount failed w/return code = -5 [ 768.370360][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 768.370377][ T31] audit: type=1400 audit(1789662683.758:614): avc: denied { write } for pid=5595 comm="syz-executor" name="285" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.372502][ T31] audit: type=1400 audit(1789662683.758:615): avc: denied { remove_name } for pid=5595 comm="syz-executor" name="mnt" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.372631][ T31] audit: type=1400 audit(1789662683.758:616): avc: denied { rmdir } for pid=5595 comm="syz-executor" name="mnt" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 768.373288][ T31] audit: type=1400 audit(1789662683.758:617): avc: denied { write } for pid=5595 comm="syz-executor" name="285" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.373679][ T31] audit: type=1400 audit(1789662683.758:618): avc: denied { write } for pid=5595 comm="syz-executor" name="285" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.374151][ T31] audit: type=1400 audit(1789662683.758:619): avc: denied { write } for pid=5595 comm="syz-executor" name="285" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.374568][ T31] audit: type=1400 audit(1789662683.758:620): avc: denied { write } for pid=5595 comm="syz-executor" name="285" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.375046][ T31] audit: type=1400 audit(1789662683.758:621): avc: denied { rmdir } for pid=5595 comm="syz-executor" name="285" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 768.811687][T11696] FAULT_INJECTION: forcing a failure. [ 768.811687][T11696] name failslab, interval 1, probability 0, space 0, times 0 [ 768.811720][T11696] CPU: 0 UID: 0 PID: 11696 Comm: syz.5.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.811746][T11696] Tainted: [L]=SOFTLOCKUP [ 768.811752][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 768.811771][T11696] Call Trace: [ 768.811778][T11696] [ 768.811785][T11696] dump_stack_lvl+0x100/0x190 [ 768.811816][T11696] should_fail_ex.cold+0x5/0xa [ 768.811843][T11696] should_failslab+0xc2/0x120 [ 768.811866][T11696] __kvmalloc_node_noprof+0x113/0x9b0 [ 768.811888][T11696] ? avc_has_extended_perms+0x484/0x1080 [ 768.811912][T11696] ? v4l2_event_subscribe+0x9c/0x780 [ 768.811944][T11696] v4l2_event_subscribe+0x9c/0x780 [ 768.811975][T11696] v4l2_ctrl_subdev_subscribe_event+0x99/0xe0 [ 768.811995][T11696] ? __pfx_v4l2_ctrl_subdev_subscribe_event+0x10/0x10 [ 768.812017][T11696] subdev_do_ioctl+0xd5d/0x2c20 [ 768.812042][T11696] ? __pfx_subdev_do_ioctl+0x10/0x10 [ 768.812064][T11696] ? lock_acquire+0x1d1/0x380 [ 768.812080][T11696] ? __might_fault+0xc5/0x140 [ 768.812103][T11696] ? find_held_lock+0x2b/0x80 [ 768.812126][T11696] ? __might_fault+0xc5/0x140 [ 768.812150][T11696] ? __might_fault+0xc5/0x140 [ 768.812179][T11696] subdev_do_ioctl_lock+0x549/0x7d0 [ 768.812205][T11696] video_usercopy+0x47a/0x1730 [ 768.812230][T11696] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 768.812254][T11696] ? __pfx_video_usercopy+0x10/0x10 [ 768.812288][T11696] v4l2_ioctl+0x1bd/0x250 [ 768.812313][T11696] ? __pfx_v4l2_ioctl+0x10/0x10 [ 768.812339][T11696] __x64_sys_ioctl+0x18e/0x210 [ 768.812361][T11696] do_syscall_64+0x123/0x790 [ 768.812388][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.812407][T11696] RIP: 0033:0x7f26cdd9e159 [ 768.812423][T11696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.812441][T11696] RSP: 002b:00007f26cec11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.812460][T11696] RAX: ffffffffffffffda RBX: 00007f26ce025fa0 RCX: 00007f26cdd9e159 [ 768.812471][T11696] RDX: 00002000000000c0 RSI: 000000004020565a RDI: 0000000000000003 [ 768.812482][T11696] RBP: 00007f26cec11090 R08: 0000000000000000 R09: 0000000000000000 [ 768.812492][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.812501][T11696] R13: 00007f26ce026038 R14: 00007f26ce025fa0 R15: 00007ffd3fcfd488 [ 768.812525][T11696] [ 768.971055][ T982] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 769.001212][T11700] FAULT_INJECTION: forcing a failure. [ 769.001212][T11700] name failslab, interval 1, probability 0, space 0, times 0 [ 769.001241][T11700] CPU: 1 UID: 0 PID: 11700 Comm: syz.5.1477 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.001262][T11700] Tainted: [L]=SOFTLOCKUP [ 769.001268][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 769.001277][T11700] Call Trace: [ 769.001283][T11700] [ 769.001289][T11700] dump_stack_lvl+0x100/0x190 [ 769.001317][T11700] should_fail_ex.cold+0x5/0xa [ 769.001340][T11700] should_failslab+0xc2/0x120 [ 769.001361][T11700] __kmalloc_noprof+0xfc/0x840 [ 769.001381][T11700] ? bpf_test_init.isra.0+0x88/0x100 [ 769.001410][T11700] bpf_test_init.isra.0+0x88/0x100 [ 769.001436][T11700] bpf_prog_test_run_skb+0x48e/0x3530 [ 769.001456][T11700] ? lock_acquire+0x1d1/0x380 [ 769.001473][T11700] ? __fget_files+0x34/0x3d0 [ 769.001493][T11700] ? find_held_lock+0x2b/0x80 [ 769.001515][T11700] ? __fget_files+0x1d1/0x3d0 [ 769.001539][T11700] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 769.001559][T11700] ? fput+0x7c/0x100 [ 769.001580][T11700] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 769.001597][T11700] __sys_bpf+0x2265/0x4a30 [ 769.001619][T11700] ? __pfx___sys_bpf+0x10/0x10 [ 769.001634][T11700] ? find_held_lock+0x2b/0x80 [ 769.001654][T11700] ? get_pid_task+0xfc/0x250 [ 769.001677][T11700] ? get_pid_task+0xfc/0x250 [ 769.001704][T11700] ? find_held_lock+0x2b/0x80 [ 769.001730][T11700] ? rcu_read_lock_any_held+0x6a/0x90 [ 769.001757][T11700] ? find_held_lock+0x2b/0x80 [ 769.001778][T11700] ? ksys_write+0x190/0x250 [ 769.001793][T11700] ? ksys_write+0x190/0x250 [ 769.001809][T11700] ? lock_acquire+0x1d1/0x380 [ 769.001839][T11700] ? fput+0x7c/0x100 [ 769.001858][T11700] ? ksys_write+0x1ac/0x250 [ 769.001877][T11700] ? __x64_sys_bpf+0xce/0x140 [ 769.001892][T11700] __x64_sys_bpf+0xce/0x140 [ 769.001908][T11700] ? do_syscall_64+0xae/0x790 [ 769.001931][T11700] do_syscall_64+0x123/0x790 [ 769.001953][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.001969][T11700] RIP: 0033:0x7f26cdd9e159 [ 769.001983][T11700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.001997][T11700] RSP: 002b:00007f26cec11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 769.002014][T11700] RAX: ffffffffffffffda RBX: 00007f26ce025fa0 RCX: 00007f26cdd9e159 [ 769.002025][T11700] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 769.002035][T11700] RBP: 00007f26cec11090 R08: 0000000000000000 R09: 0000000000000000 [ 769.002045][T11700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.002059][T11700] R13: 00007f26ce026038 R14: 00007f26ce025fa0 R15: 00007ffd3fcfd488 [ 769.002080][T11700] [ 769.066817][T11702] xt_hashlimit: size too large, truncated to 1048576 [ 769.186705][ T30] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 769.337223][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 769.339913][ T30] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 769.346931][ T30] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 769.346956][ T30] usb 7-1: config 0 has no interface number 0 [ 769.346987][ T30] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 769.347017][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.349769][ T982] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 769.356392][ T30] usb 7-1: config 0 descriptor?? [ 769.368866][ T30] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 769.403915][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.403968][ T982] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.404003][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.503644][ T982] usb 4-1: config 0 descriptor?? [ 769.564718][ T982] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 769.637533][ T982] usb 7-1: USB disconnect, device number 23 [ 769.769857][ T5780] usb 4-1: USB disconnect, device number 65 [ 770.969285][ T5780] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 771.126066][T11733] ip_tables: iptables: counters copy to user failed while replacing table [ 771.642901][ T31] audit: type=1400 audit(1789662687.028:622): avc: denied { append } for pid=11736 comm="syz.6.1489" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 771.781171][T11742] xt_hashlimit: size too large, truncated to 1048576 [ 772.262076][ T5780] usb 4-1: device not accepting address 66, error -71 [ 773.817118][ T31] audit: type=1800 audit(1789662689.198:623): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1501" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 773.883486][T11770] FAULT_INJECTION: forcing a failure. [ 773.883486][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 773.883519][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.2.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.883543][T11770] Tainted: [L]=SOFTLOCKUP [ 773.883550][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 773.883560][T11770] Call Trace: [ 773.883567][T11770] [ 773.883575][T11770] dump_stack_lvl+0x100/0x190 [ 773.883605][T11770] should_fail_ex.cold+0x5/0xa [ 773.883632][T11770] should_failslab+0xc2/0x120 [ 773.883656][T11770] __kmalloc_noprof+0xfc/0x840 [ 773.883685][T11770] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 773.883711][T11770] kernfs_fop_write_iter+0x26a/0x5f0 [ 773.883735][T11770] vfs_write+0x6af/0x1050 [ 773.883755][T11770] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 773.883775][T11770] ? __fget_files+0x34/0x3d0 [ 773.883797][T11770] ? __pfx_vfs_write+0x10/0x10 [ 773.883814][T11770] ? find_held_lock+0x2b/0x80 [ 773.883855][T11770] ksys_write+0x12a/0x250 [ 773.883874][T11770] ? __pfx_ksys_write+0x10/0x10 [ 773.883900][T11770] do_syscall_64+0x123/0x790 [ 773.883928][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.883947][T11770] RIP: 0033:0x7f17aaf9e159 [ 773.883962][T11770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.883979][T11770] RSP: 002b:00007f17abe98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.883997][T11770] RAX: ffffffffffffffda RBX: 00007f17ab225fa0 RCX: 00007f17aaf9e159 [ 773.884009][T11770] RDX: 000000000000002f RSI: 0000200000000600 RDI: 0000000000000005 [ 773.884020][T11770] RBP: 00007f17abe98090 R08: 0000000000000000 R09: 0000000000000000 [ 773.884031][T11770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.884041][T11770] R13: 00007f17ab226038 R14: 00007f17ab225fa0 R15: 00007fffb530fbb8 [ 773.884074][T11770] [ 777.576703][ T9064] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 777.701588][T11819] xt_hashlimit: size too large, truncated to 1048576 [ 777.739043][ T9064] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 777.740323][ T9064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.746823][ T9064] usb 6-1: config 0 descriptor?? [ 778.099208][ T31] audit: type=1400 audit(1789662693.488:624): avc: denied { map } for pid=11811 comm="syz.5.1504" path="socket:[31814]" dev="sockfs" ino=31814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 778.100960][ T31] audit: type=1400 audit(1789662693.488:625): avc: denied { read } for pid=11811 comm="syz.5.1504" path="socket:[31814]" dev="sockfs" ino=31814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 778.994999][T11835] bpf: Bad value for 'context' [ 778.995193][T11835] bpf: Bad value for 'context' [ 778.995364][T11835] bpf: Bad value for 'context' [ 778.995565][T11835] bpf: Bad value for 'context' [ 778.995733][T11835] bpf: Bad value for 'context' [ 778.997073][T11835] bpf: Bad value for 'context' [ 778.997287][T11835] bpf: Bad value for 'context' [ 778.997487][T11835] bpf: Bad value for 'context' [ 778.997674][T11835] bpf: Bad value for 'context' [ 778.997856][T11835] bpf: Bad value for 'context' [ 778.999454][T11835] bpf: Bad value for 'context' [ 778.999667][T11835] bpf: Bad value for 'context' [ 778.999853][T11835] bpf: Bad value for 'context' [ 779.000040][T11835] bpf: Bad value for 'context' [ 779.000242][T11835] bpf: Bad value for 'context' [ 779.000432][T11835] bpf: Bad value for 'context' [ 779.000631][T11835] bpf: Bad value for 'context' [ 779.000819][T11835] bpf: Bad value for 'context' [ 779.002592][T11835] bpf: Bad value for 'context' [ 779.002800][T11835] bpf: Bad value for 'context' [ 779.002992][T11835] bpf: Bad value for 'context' [ 779.003174][T11835] bpf: Bad value for 'context' [ 779.003376][T11835] bpf: Bad value for 'context' [ 779.003559][T11835] bpf: Bad value for 'context' [ 779.003759][T11835] bpf: Bad value for 'context' [ 779.003946][T11835] bpf: Bad value for 'context' [ 779.005722][T11835] bpf: Bad value for 'context' [ 779.005910][T11835] bpf: Bad value for 'context' [ 779.006122][T11835] bpf: Bad value for 'context' [ 779.006306][T11835] bpf: Bad value for 'context' [ 779.006493][T11835] bpf: Bad value for 'context' [ 779.009761][T11835] bpf: Bad value for 'context' [ 779.009960][T11835] bpf: Bad value for 'context' [ 779.010433][T11835] bpf: Bad value for 'context' [ 779.010625][T11835] bpf: Bad value for 'context' [ 779.010833][T11835] bpf: Bad value for 'context' [ 779.011023][T11835] bpf: Bad value for 'context' [ 779.011230][T11835] bpf: Bad value for 'context' [ 779.011427][T11835] bpf: Bad value for 'context' [ 779.011631][T11835] bpf: Bad value for 'context' [ 779.013395][T11835] bpf: Bad value for 'context' [ 779.013598][T11835] bpf: Bad value for 'context' [ 779.013785][T11835] bpf: Bad value for 'context' [ 779.013998][T11835] bpf: Bad value for 'context' [ 779.014183][T11835] bpf: Bad value for 'context' [ 779.014408][T11835] bpf: Bad value for 'context' [ 779.014595][T11835] bpf: Bad value for 'context' [ 779.014796][T11835] bpf: Bad value for 'context' [ 779.017648][T11835] bpf: Bad value for 'context' [ 779.017859][T11835] bpf: Bad value for 'context' [ 779.018111][T11835] bpf: Bad value for 'context' [ 779.018311][T11835] bpf: Bad value for 'context' [ 779.018494][T11835] bpf: Bad value for 'context' [ 779.018692][T11835] bpf: Bad value for 'context' [ 779.018877][T11835] bpf: Bad value for 'context' [ 779.019069][T11835] bpf: Bad value for 'context' [ 779.021785][T11835] bpf: Bad value for 'context' [ 779.021993][T11835] bpf: Bad value for 'context' [ 779.022177][T11835] bpf: Bad value for 'context' [ 779.022378][T11835] bpf: Bad value for 'context' [ 779.022563][T11835] bpf: Bad value for 'context' [ 779.022752][T11835] bpf: Bad value for 'context' [ 779.022958][T11835] bpf: Bad value for 'context' [ 779.024722][T11835] bpf: Bad value for 'context' [ 779.024910][T11835] bpf: Bad value for 'context' [ 779.096872][ T9064] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 779.099857][ T9064] [drm:udl_init] *ERROR* Selecting channel failed [ 779.111655][ T982] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 779.276601][ T982] usb 7-1: Using ep0 maxpacket: 16 [ 779.278769][ T982] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 779.279768][ T982] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.279791][ T982] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.279809][ T982] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 779.279831][ T982] usb 7-1: config 0 interface 0 has no altsetting 0 [ 779.279857][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.290067][ T982] usb 7-1: config 0 descriptor?? [ 779.412966][ T9064] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 779.412990][ T9064] [drm] Initialized udl on minor 1 [ 779.482633][ T31] audit: type=1400 audit(1789662694.868:626): avc: denied { connect } for pid=11838 comm="syz.4.1518" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 779.493304][ T9064] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 779.519605][T11828] comedi comedi0: ni_at_a2150: I/O port conflict (0x80,28) [ 779.520661][T11839] 9p: Bad value for 'rfdno' [ 779.548711][ T9064] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 779.584296][ T9064] usb 6-1: USB disconnect, device number 50 [ 779.953067][ T31] audit: type=1400 audit(1789662695.338:627): avc: denied { accept } for pid=11827 comm="syz.6.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 780.449241][ T5854] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 780.902340][ T30] usb 7-1: USB disconnect, device number 24 [ 782.794902][ T31] audit: type=1400 audit(1789662698.178:628): avc: denied { bind } for pid=11863 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.875851][T11868] netlink: 'syz.5.1521': attribute type 21 has an invalid length. [ 782.875976][T11868] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1521'. [ 782.876004][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1521'. [ 783.918246][T11880] FAULT_INJECTION: forcing a failure. [ 783.918246][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.918282][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.5.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.918308][T11880] Tainted: [L]=SOFTLOCKUP [ 783.918315][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 783.918327][T11880] Call Trace: [ 783.918334][T11880] [ 783.918342][T11880] dump_stack_lvl+0x100/0x190 [ 783.918374][T11880] should_fail_ex.cold+0x5/0xa [ 783.918401][T11880] _copy_from_user+0x2e/0xd0 [ 783.918423][T11880] map_update_elem+0x7c9/0xb50 [ 783.918454][T11880] ? __pfx_map_update_elem+0x10/0x10 [ 783.918481][T11880] ? selinux_bpf+0x11a/0x150 [ 783.918513][T11880] __sys_bpf+0x1f8a/0x4a30 [ 783.918538][T11880] ? __pfx___sys_bpf+0x10/0x10 [ 783.918556][T11880] ? find_held_lock+0x2b/0x80 [ 783.918589][T11880] ? get_pid_task+0xfc/0x250 [ 783.918614][T11880] ? get_pid_task+0xfc/0x250 [ 783.918646][T11880] ? find_held_lock+0x2b/0x80 [ 783.918677][T11880] ? rcu_read_lock_any_held+0x6a/0x90 [ 783.918704][T11880] ? find_held_lock+0x2b/0x80 [ 783.918729][T11880] ? ksys_write+0x190/0x250 [ 783.918748][T11880] ? ksys_write+0x190/0x250 [ 783.918766][T11880] ? lock_acquire+0x1d1/0x380 [ 783.918803][T11880] ? fput+0x7c/0x100 [ 783.918826][T11880] ? ksys_write+0x1ac/0x250 [ 783.918848][T11880] ? __x64_sys_bpf+0xce/0x140 [ 783.918866][T11880] __x64_sys_bpf+0xce/0x140 [ 783.918886][T11880] ? do_syscall_64+0xae/0x790 [ 783.918913][T11880] do_syscall_64+0x123/0x790 [ 783.918940][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.918963][T11880] RIP: 0033:0x7f26cdd9e159 [ 783.918978][T11880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.918995][T11880] RSP: 002b:00007f26cec11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.919015][T11880] RAX: ffffffffffffffda RBX: 00007f26ce025fa0 RCX: 00007f26cdd9e159 [ 783.919027][T11880] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 783.919039][T11880] RBP: 00007f26cec11090 R08: 0000000000000000 R09: 0000000000000000 [ 783.919050][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.919061][T11880] R13: 00007f26ce026038 R14: 00007f26ce025fa0 R15: 00007ffd3fcfd488 [ 783.919084][T11880] [ 786.100163][T11898] FAULT_INJECTION: forcing a failure. [ 786.100163][T11898] name failslab, interval 1, probability 0, space 0, times 0 [ 786.100196][T11898] CPU: 0 UID: 0 PID: 11898 Comm: syz.5.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.100220][T11898] Tainted: [L]=SOFTLOCKUP [ 786.100227][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 786.100238][T11898] Call Trace: [ 786.100245][T11898] [ 786.100253][T11898] dump_stack_lvl+0x100/0x190 [ 786.100284][T11898] should_fail_ex.cold+0x5/0xa [ 786.100312][T11898] should_failslab+0xc2/0x120 [ 786.100336][T11898] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 786.100358][T11898] ? __alloc_skb+0x5b7/0x710 [ 786.100379][T11898] ? __alloc_skb+0x140/0x710 [ 786.100402][T11898] __alloc_skb+0x140/0x710 [ 786.100421][T11898] ? __alloc_skb+0x5b7/0x710 [ 786.100441][T11898] ? __pfx___alloc_skb+0x10/0x10 [ 786.100461][T11898] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 786.100493][T11898] ? sock_has_perm+0x25a/0x2f0 [ 786.100520][T11898] ? __pfx_sock_has_perm+0x10/0x10 [ 786.100550][T11898] netlink_alloc_large_skb+0x69/0x150 [ 786.100573][T11898] netlink_sendmsg+0x680/0xda0 [ 786.100597][T11898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.100620][T11898] ? selinux_socket_sendmsg+0x198/0x2f0 [ 786.100643][T11898] ____sys_sendmsg+0xa4d/0xbe0 [ 786.100668][T11898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.100690][T11898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.100722][T11898] ? lock_acquire+0x1d1/0x380 [ 786.100742][T11898] ? get_pid_task+0x2a/0x250 [ 786.100769][T11898] ___sys_sendmsg+0x190/0x1e0 [ 786.100798][T11898] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.100825][T11898] ? get_pid_task+0x106/0x250 [ 786.100859][T11898] ? find_held_lock+0x2b/0x80 [ 786.100907][T11898] __sys_sendmsg+0x160/0x210 [ 786.100929][T11898] ? __pfx___sys_sendmsg+0x10/0x10 [ 786.100961][T11898] do_syscall_64+0x123/0x790 [ 786.100985][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.101000][T11898] RIP: 0033:0x7f26cdd9e159 [ 786.101014][T11898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.101027][T11898] RSP: 002b:00007f26cec11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.101043][T11898] RAX: ffffffffffffffda RBX: 00007f26ce025fa0 RCX: 00007f26cdd9e159 [ 786.101053][T11898] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 786.101062][T11898] RBP: 00007f26cec11090 R08: 0000000000000000 R09: 0000000000000000 [ 786.101070][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.101079][T11898] R13: 00007f26ce026038 R14: 00007f26ce025fa0 R15: 00007ffd3fcfd488 [ 786.101100][T11898] [ 786.103046][T11894] (syz.6.1532,11894,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 786.103076][T11894] (syz.6.1532,11894,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 786.243658][ T9064] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 786.467162][ T9064] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 786.468248][ T9064] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.468284][ T9064] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 786.468306][ T9064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 786.468327][ T9064] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.470693][ T9064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.470719][ T9064] usb 3-1: Product: syz [ 786.470733][ T9064] usb 3-1: Manufacturer: syz [ 786.470747][ T9064] usb 3-1: SerialNumber: syz [ 786.612626][ T9064] usb 3-1: config 0 descriptor?? [ 787.060208][ T5780] usb 3-1: USB disconnect, device number 65 [ 787.986845][T11915] fuse: Unknown parameter 'dä+0xffffffffffffffff' [ 790.994061][ T31] audit: type=1400 audit(1789662706.328:629): avc: denied { getopt } for pid=11932 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.992605][ T31] audit: type=1400 audit(1789662707.378:630): avc: denied { create } for pid=11954 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 791.995204][ T31] audit: type=1400 audit(1789662707.378:631): avc: denied { ioctl } for pid=11954 comm="syz.2.1548" path="socket:[32207]" dev="sockfs" ino=32207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 792.000052][T11955] netlink: 'syz.2.1548': attribute type 11 has an invalid length. [ 792.131040][T11960] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1549'. [ 792.159075][ T31] audit: type=1400 audit(1789662707.548:632): avc: denied { mounton } for pid=11956 comm="syz.5.1549" path="/267/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 792.175572][ T31] audit: type=1400 audit(1789662707.558:633): avc: denied { mounton } for pid=11956 comm="syz.5.1549" path="/267/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 792.216830][ T5780] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 792.230924][ T31] audit: type=1400 audit(1789662707.618:634): avc: denied { mounton } for pid=11956 comm="syz.5.1549" path="/267/sys/devices/platform/i8042/serio1/protocol" dev="sysfs" ino=43895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 792.377200][ T5780] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 792.378170][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.378196][ T5780] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 792.378210][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 792.378223][ T5780] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.380186][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.380201][ T5780] usb 4-1: Product: syz [ 792.380209][ T5780] usb 4-1: Manufacturer: syz [ 792.380218][ T5780] usb 4-1: SerialNumber: syz [ 792.467117][ T5780] usb 4-1: config 0 descriptor?? [ 792.771594][ T982] usb 4-1: USB disconnect, device number 68 [ 794.571378][ T31] audit: type=1400 audit(1789662709.958:635): avc: denied { read } for pid=11995 comm="syz.6.1557" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 794.571557][ T31] audit: type=1400 audit(1789662709.958:636): avc: denied { open } for pid=11995 comm="syz.6.1557" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 794.862356][T12000] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 795.236705][ T5691] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 795.885061][ T5613] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 796.176057][ T5691] usb 3-1: device descriptor read/all, error -71 [ 796.657433][T12011] syzkaller0: entered promiscuous mode [ 796.657456][T12011] syzkaller0: entered allmulticast mode [ 796.664485][ T31] audit: type=1400 audit(1789662712.048:637): avc: denied { write } for pid=12010 comm="syz.6.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 796.786694][ T5691] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 796.937189][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 796.939385][ T5691] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 796.940665][ T5691] usb 3-1: config 129 has an invalid interface number: 26 but max is 0 [ 796.940693][ T5691] usb 3-1: config 129 has no interface number 0 [ 796.940718][ T5691] usb 3-1: too many endpoints for config 129 interface 26 altsetting 80: 97, using maximum allowed: 30 [ 796.940748][ T5691] usb 3-1: config 129 interface 26 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 796.940772][ T5691] usb 3-1: config 129 interface 26 has no altsetting 0 [ 796.945042][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.945067][ T5691] usb 3-1: Product: syz [ 796.945083][ T5691] usb 3-1: Manufacturer: syz [ 796.945097][ T5691] usb 3-1: SerialNumber: syz [ 797.316345][ T31] audit: type=1400 audit(1789662712.698:638): avc: denied { cmd } for pid=12016 comm="syz.5.1562" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 797.363942][ T31] audit: type=1400 audit(1789662712.748:639): avc: denied { connect } for pid=12006 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 798.214030][T12021] FAULT_INJECTION: forcing a failure. [ 798.214030][T12021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.214091][T12021] CPU: 1 UID: 0 PID: 12021 Comm: syz.5.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.214117][T12021] Tainted: [L]=SOFTLOCKUP [ 798.214127][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 798.214138][T12021] Call Trace: [ 798.214146][T12021] [ 798.214154][T12021] dump_stack_lvl+0x100/0x190 [ 798.214187][T12021] should_fail_ex.cold+0x5/0xa [ 798.214214][T12021] _copy_from_iter+0x1f4/0x1690 [ 798.214245][T12021] ? __asan_memset+0x23/0x50 [ 798.214266][T12021] ? __pfx__copy_from_iter+0x10/0x10 [ 798.214285][T12021] ? __pfx___alloc_skb+0x10/0x10 [ 798.214319][T12021] netlink_sendmsg+0x808/0xda0 [ 798.214345][T12021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.214370][T12021] ? selinux_socket_sendmsg+0x198/0x2f0 [ 798.214395][T12021] ____sys_sendmsg+0xa4d/0xbe0 [ 798.214420][T12021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.214444][T12021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.214478][T12021] ? preempt_schedule_irq+0x79/0x90 [ 798.214507][T12021] ___sys_sendmsg+0x190/0x1e0 [ 798.214537][T12021] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.214577][T12021] ? __rcu_read_unlock+0x26a/0x5e0 [ 798.214616][T12021] __sys_sendmsg+0x160/0x210 [ 798.214640][T12021] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.214677][T12021] do_syscall_64+0x123/0x790 [ 798.214706][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.214725][T12021] RIP: 0033:0x7f26cdd9e159 [ 798.214741][T12021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.214758][T12021] RSP: 002b:00007f26cebf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.214777][T12021] RAX: ffffffffffffffda RBX: 00007f26ce026090 RCX: 00007f26cdd9e159 [ 798.214789][T12021] RDX: 00000000240008c0 RSI: 00002000000002c0 RDI: 000000000000000c [ 798.214801][T12021] RBP: 00007f26cebf0090 R08: 0000000000000000 R09: 0000000000000000 [ 798.214812][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.214823][T12021] R13: 00007f26ce026128 R14: 00007f26ce026090 R15: 00007ffd3fcfd488 [ 798.214848][T12021] [ 798.539327][ T5691] ums_eneub6250 3-1:129.26: USB Mass Storage device detected [ 798.591363][ T31] audit: type=1400 audit(1789662713.978:640): avc: denied { ioctl } for pid=12027 comm="syz.6.1564" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 798.592960][ T31] audit: type=1400 audit(1789662713.978:641): avc: denied { write } for pid=12027 comm="syz.6.1564" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 798.593733][ T31] audit: type=1400 audit(1789662713.978:642): avc: denied { map } for pid=12027 comm="syz.6.1564" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 798.705659][ T5691] usb 3-1: USB disconnect, device number 67 [ 800.342069][T12056] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 801.730094][ T31] audit: type=1400 audit(1789662717.118:643): avc: denied { mount } for pid=12073 comm="syz.5.1576" name="/" dev="overlay" ino=1524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 802.136667][ T25] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 802.198978][T12081] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 802.288590][ T25] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 802.289700][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.289731][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.289764][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.209707][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.369813][T12088] FAULT_INJECTION: forcing a failure. [ 803.369813][T12088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.369875][T12088] CPU: 0 UID: 0 PID: 12088 Comm: syz.3.1578 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.369901][T12088] Tainted: [L]=SOFTLOCKUP [ 803.369908][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 803.369920][T12088] Call Trace: [ 803.369928][T12088] [ 803.369936][T12088] dump_stack_lvl+0x100/0x190 [ 803.369969][T12088] should_fail_ex.cold+0x5/0xa [ 803.369999][T12088] _copy_from_user+0x2e/0xd0 [ 803.370022][T12088] kstrtouint_from_user+0xd6/0x1d0 [ 803.370048][T12088] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 803.370079][T12088] ? lock_acquire+0x1d1/0x380 [ 803.370107][T12088] proc_fail_nth_write+0x83/0x220 [ 803.370130][T12088] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 803.370161][T12088] vfs_write+0x2aa/0x1050 [ 803.370183][T12088] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 803.370206][T12088] ? lock_acquire+0x1d1/0x380 [ 803.370225][T12088] ? __fget_files+0x34/0x3d0 [ 803.370248][T12088] ? __pfx_vfs_write+0x10/0x10 [ 803.370265][T12088] ? find_held_lock+0x2b/0x80 [ 803.370291][T12088] ? __fget_files+0x215/0x3d0 [ 803.370319][T12088] ? __fget_files+0x21f/0x3d0 [ 803.370350][T12088] ksys_write+0x12a/0x250 [ 803.370375][T12088] ? __pfx_ksys_write+0x10/0x10 [ 803.370395][T12088] ? trace_hardirqs_off+0x70/0x170 [ 803.370427][T12088] do_syscall_64+0x123/0x790 [ 803.370456][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.370476][T12088] RIP: 0033:0x7f1d6995e98e [ 803.370492][T12088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 803.370510][T12088] RSP: 002b:00007f1d6a7fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 803.370529][T12088] RAX: ffffffffffffffda RBX: 00007f1d6a7ff6c0 RCX: 00007f1d6995e98e [ 803.370542][T12088] RDX: 0000000000000001 RSI: 00007f1d6a7ff0a0 RDI: 0000000000000004 [ 803.370554][T12088] RBP: 00007f1d6a7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 803.370566][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.370577][T12088] R13: 00007f1d69c26128 R14: 00007f1d69c26090 R15: 00007ffc25e5e328 [ 803.370604][T12088] [ 804.165648][ T25] hid-sensor-hub 0003:8086:0000.0012: item fetching failed at offset 61/62 [ 804.166278][ T25] hid-sensor-hub 0003:8086:0000.0012: parse failed [ 804.166356][ T25] hid-sensor-hub 0003:8086:0000.0012: probe with driver hid-sensor-hub failed with error -22 [ 804.169692][ T25] usb 7-1: USB disconnect, device number 25 [ 804.273993][ T31] audit: type=1400 audit(1789662719.658:644): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 804.633162][ T31] audit: type=1400 audit(1789662720.008:645): avc: denied { setopt } for pid=12093 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 804.633216][ T31] audit: type=1404 audit(1789662720.008:646): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 804.700911][ T31] audit: type=1400 audit(1789662720.078:647): avc: denied { shutdown } for pid=12093 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 804.766076][ T31] audit: type=1400 audit(1789662720.148:648): avc: denied { execmem } for pid=12101 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 804.843969][ T31] audit: type=1400 audit(1789662720.228:649): avc: denied { prog_load } for pid=12095 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 804.844145][ T31] audit: type=1400 audit(1789662720.228:650): avc: denied { map_create } for pid=12095 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 804.844262][ T31] audit: type=1400 audit(1789662720.228:651): avc: denied { read } for pid=12095 comm="syz.5.1581" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 804.844318][ T31] audit: type=1400 audit(1789662720.228:652): avc: denied { ioctl } for pid=12095 comm="syz.5.1581" path="/dev/nvme-fabrics" dev="devtmpfs" ino=701 ioctlcmd=0x5761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 806.773166][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 806.773185][ T31] audit: type=1400 audit(1789662722.158:714): avc: denied { create } for pid=12125 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 806.783492][ T31] audit: type=1400 audit(1789662722.168:715): avc: denied { create } for pid=12125 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 806.805678][ T31] audit: type=1400 audit(1789662722.178:716): avc: denied { read } for pid=12125 comm="syz.3.1591" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 806.805727][ T31] audit: type=1400 audit(1789662722.188:717): avc: denied { mounton } for pid=12125 comm="syz.3.1591" path="/307/proc" dev="tmpfs" ino=1730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 806.884089][ T31] audit: type=1400 audit(1789662722.268:718): avc: denied { read write } for pid=5595 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 806.970293][ T31] audit: type=1400 audit(1789662722.358:719): avc: denied { execmem } for pid=12128 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 807.035776][ T31] audit: type=1400 audit(1789662722.418:720): avc: denied { block_suspend } for pid=12118 comm="syz.6.1589" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 807.264314][ T31] audit: type=1400 audit(1789662722.648:721): avc: denied { execmem } for pid=12133 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 807.401678][ T31] audit: type=1400 audit(1789662722.788:722): avc: denied { module_request } for pid=12133 comm="syz.4.1593" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 807.401789][ T31] audit: type=1400 audit(1789662722.788:723): avc: denied { sys_module } for pid=12133 comm="syz.4.1593" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 809.949322][T12170] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 809.949365][T12170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 809.949434][T12170] vhci_hcd vhci_hcd.0: Device attached [ 809.955044][T12174] usbip_core: unknown command [ 809.955059][T12174] vhci_hcd: unknown pdu 0 [ 809.955068][T12174] usbip_core: unknown command [ 809.980949][ T55] vhci_hcd vhci_hcd.6: stop threads [ 809.980976][ T55] vhci_hcd vhci_hcd.6: release socket [ 809.980993][ T55] vhci_hcd vhci_hcd.6: disconnect device [ 812.163840][ T31] kauditd_printk_skb: 130 callbacks suppressed [ 812.163858][ T31] audit: type=1400 audit(1789662727.548:854): avc: denied { prog_load } for pid=12209 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 812.170137][ T31] audit: type=1400 audit(1789662727.558:855): avc: denied { mounton } for pid=12209 comm="syz.4.1618" path="/330/myproc" dev="tmpfs" ino=1858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 812.205772][ T31] audit: type=1400 audit(1789662727.588:856): avc: denied { execmem } for pid=12209 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 812.208837][ T31] audit: type=1400 audit(1789662727.598:857): avc: denied { prog_load } for pid=12209 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 812.209033][ T31] audit: type=1400 audit(1789662727.598:858): avc: denied { map_create } for pid=12209 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 812.333397][ T31] audit: type=1400 audit(1789662727.718:859): avc: denied { execmem } for pid=12212 comm="syz.4.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 812.537415][ T31] audit: type=1400 audit(1789662727.918:860): avc: denied { create } for pid=12214 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 812.620061][ T31] audit: type=1400 audit(1789662728.008:861): avc: denied { read write } for pid=5595 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 812.716211][ T31] audit: type=1400 audit(1789662728.098:862): avc: denied { create } for pid=12216 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 812.722220][ T31] audit: type=1400 audit(1789662728.108:863): avc: denied { prog_load } for pid=12216 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 813.826778][T12230] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 815.988761][ T9064] libceph: connect (1)[c::]:6789 error -101 [ 815.989043][ T9064] libceph: mon0 (1)[c::]:6789 connect error [ 816.025954][ T9064] libceph: connect (1)[c::]:6789 error -101 [ 816.026121][ T9064] libceph: mon0 (1)[c::]:6789 connect error [ 816.278981][ T9064] libceph: connect (1)[c::]:6789 error -101 [ 816.279079][ T9064] libceph: mon0 (1)[c::]:6789 connect error [ 816.499981][T12265] capability: warning: `syz.3.1636' uses 32-bit capabilities (legacy support in use) [ 816.525752][T12256] ceph: No mds server is up or the cluster is laggy [ 817.188494][ T31] kauditd_printk_skb: 3791 callbacks suppressed [ 817.188518][ T31] audit: type=1400 audit(1789662732.578:4655): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.189903][ T31] audit: type=1400 audit(1789662732.578:4656): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.266181][ T31] audit: type=1400 audit(1789662732.658:4657): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.288938][ T31] audit: type=1400 audit(1789662732.678:4658): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.312379][ T31] audit: type=1400 audit(1789662732.708:4659): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.314439][ T31] audit: type=1400 audit(1789662732.708:4660): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.314764][ T31] audit: type=1400 audit(1789662732.708:4661): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.315624][ T31] audit: type=1400 audit(1789662732.708:4662): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.390867][ T31] audit: type=1400 audit(1789662732.778:4663): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.390915][ T31] audit: type=1400 audit(1789662732.778:4664): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 822.347224][ T31] kauditd_printk_skb: 320 callbacks suppressed [ 822.347247][ T31] audit: type=1400 audit(1789662737.548:4985): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 822.347286][ T31] audit: type=1400 audit(1789662737.578:4986): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 822.347323][ T31] audit: type=1400 audit(1789662737.608:4987): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 822.347359][ T31] audit: type=1400 audit(1789662737.638:4988): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 822.876546][ C1] sched: DL replenish lagged too much [ 823.115040][ T31] audit: type=1400 audit(1789662738.388:4989): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 823.115093][ T31] audit: type=1400 audit(1789662738.428:4990): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 823.115130][ T31] audit: type=1400 audit(1789662738.458:4991): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 823.115166][ T31] audit: type=1400 audit(1789662738.478:4992): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 824.626758][ T31] audit: type=1400 audit(1789662739.848:4993): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 824.898337][ T31] audit: type=1400 audit(1789662740.208:4994): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 825.125516][ T55] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 829.042728][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 829.042748][ T31] audit: type=1400 audit(1789662744.248:4997): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.042788][ T31] audit: type=1400 audit(1789662744.278:4998): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.042825][ T31] audit: type=1400 audit(1789662744.298:4999): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.042862][ T31] audit: type=1400 audit(1789662744.328:5000): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.042901][ T31] audit: type=1400 audit(1789662744.348:5001): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.042937][ T31] audit: type=1400 audit(1789662744.368:5002): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.042981][ T31] audit: type=1400 audit(1789662744.398:5003): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.043018][ T31] audit: type=1400 audit(1789662744.418:5004): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.093150][ T31] audit: type=1400 audit(1789662744.458:5005): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 829.897519][ T31] audit: type=1400 audit(1789662745.228:5006): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 834.185260][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 834.185281][ T31] audit: type=1400 audit(1789662749.478:5008): avc: denied { execmem } for pid=12278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 835.200553][ T31] audit: type=1400 audit(1789662750.558:5009): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 838.547616][ T31] audit: type=1400 audit(1789662753.878:5010): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 838.547668][ T31] audit: type=1400 audit(1789662753.908:5011): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 841.215428][ T31] audit: type=1400 audit(1789662756.538:5012): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 841.215481][ T31] audit: type=1400 audit(1789662756.568:5013): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 841.884226][ T31] audit: type=1400 audit(1789662757.228:5014): avc: denied { execmem } for pid=12277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 843.796761][ T31] audit: type=1400 audit(1789662759.158:5015): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 847.975190][ T31] audit: type=1400 audit(1789662763.288:5016): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 849.399705][ T31] audit: type=1400 audit(1789662764.708:5017): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 849.399757][ T31] audit: type=1400 audit(1789662764.758:5018): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 850.013645][ T31] audit: type=1400 audit(1789662765.388:5019): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 854.153807][ T31] audit: type=1400 audit(1789662769.528:5020): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 854.886906][ T31] audit: type=1400 audit(1789662770.238:5021): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 867.409956][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.114357][ T31] audit: type=1400 audit(1789662787.458:5022): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 877.726836][ T31] audit: type=1400 audit(1789662792.908:5023): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 886.241695][ T31] audit: type=1400 audit(1789662801.558:5024): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 916.548885][ T7257] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.208167][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.242265][ T31] audit: type=1400 audit(1789662887.548:5025): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 972.242319][ T31] audit: type=1400 audit(1789662887.598:5026): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 987.921726][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.653353][ T31] audit: type=1400 audit(1789662921.028:5027): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1010.349157][ T1115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1028.498845][ T32] INFO: task kworker/1:3:9839 blocked for more than 143 seconds. [ 1028.498874][ T32] Tainted: G L syzkaller #0 [ 1028.498885][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1028.498893][ T32] task:kworker/1:3 state:D stack:22344 pid:9839 tgid:9839 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1028.498950][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 1028.498976][ T32] Call Trace: [ 1028.498982][ T32] [ 1028.498994][ T32] __schedule+0x1259/0x6920 [ 1028.499027][ T32] ? mark_held_locks+0x40/0x70 [ 1028.499048][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1028.499077][ T32] ? __pfx___schedule+0x10/0x10 [ 1028.499097][ T32] ? find_held_lock+0x2b/0x80 [ 1028.499124][ T32] ? schedule+0x225/0x2c0 [ 1028.499150][ T32] schedule+0xdd/0x2c0 [ 1028.499171][ T32] schedule_preempt_disabled+0x13/0x30 [ 1028.499193][ T32] __mutex_lock+0xccb/0x1bd0 [ 1028.499219][ T32] ? reg_check_chans_work+0x169/0x12e0 [ 1028.499239][ T32] ? reg_check_chans_work+0x471/0x12e0 [ 1028.499260][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1028.499287][ T32] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1028.499320][ T32] ? cfg80211_reg_check_beaconing+0x20d/0xe60 [ 1028.499343][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1028.499366][ T32] ? reg_check_chans_work+0x169/0x12e0 [ 1028.499384][ T32] reg_check_chans_work+0x169/0x12e0 [ 1028.499409][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1028.499431][ T32] ? lock_acquire+0x1d1/0x380 [ 1028.499453][ T32] ? process_one_work+0x906/0x1b10 [ 1028.499489][ T32] ? process_one_work+0x906/0x1b10 [ 1028.499521][ T32] process_one_work+0xac7/0x1b10 [ 1028.499561][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1028.499590][ T32] ? lock_acquire+0x1d1/0x380 [ 1028.499617][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1028.499639][ T32] worker_thread+0x5ef/0xe50 [ 1028.499679][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1028.499713][ T32] ? kthread+0x13a/0x450 [ 1028.499738][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1028.499764][ T32] kthread+0x373/0x450 [ 1028.499789][ T32] ? __pfx_kthread+0x10/0x10 [ 1028.499816][ T32] ret_from_fork+0x730/0xd60 [ 1028.499845][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1028.499868][ T32] ? __switch_to+0x800/0x10f0 [ 1028.499898][ T32] ? __pfx_kthread+0x10/0x10 [ 1028.499925][ T32] ret_from_fork_asm+0x1a/0x30 [ 1028.499959][ T32] [ 1028.499974][ T32] [ 1028.499974][ T32] Showing all locks held in the system: [ 1028.499981][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 1028.499995][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1028.500044][ T32] locks held by kworker/R-kvfre/6: 1, last CPU#0: [ 1028.500057][ T32] #0: ffffffff8ec92f60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1028.500108][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 1028.500121][ T32] #0: ffff888036049940 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.500177][ T32] #1: ffffc90000117d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.500230][ T32] #2: ffff88807a6ed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1028.500281][ T32] #3: ffff88807ddf8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1028.500331][ T32] locks held by kworker/R-mm_pe/14: 1, last CPU#0: [ 1028.500345][ T32] #0: ffffffff8ec92f60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1028.500396][ T32] locks held by kworker/1:0/25: 2, last CPU#1: [ 1028.500409][ T32] #0: ffff8880350e4d40 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.500464][ T32] #1: ffffc900001f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.500533][ T32] locks held by kworker/1:1/30: 4, last CPU#1: [ 1028.500546][ T32] #0: ffff88802dc8b140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.500602][ T32] #1: ffffc90000a57d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.500681][ T32] #2: ffff8880365d1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 1028.500732][ T32] #3: ffff88807ddff028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 1028.500782][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1028.500795][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1028.500848][ T32] locks held by kworker/u8:2/43: 4, last CPU#0: [ 1028.500861][ T32] #0: ffff88807eb52140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.500917][ T32] #1: ffffc90000b37d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.500969][ T32] #2: ffff888038945440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1028.501018][ T32] #3: ffff88807d35aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1028.501070][ T32] locks held by kworker/u8:3/55: 3, last CPU#0: [ 1028.501083][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.501134][ T32] #1: ffffc9000130fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.501185][ T32] #2: ffff8880589e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1028.501239][ T32] locks held by kworker/u8:4/59: 2, last CPU#0: [ 1028.501252][ T32] #0: ffff88802b6cd140 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.501307][ T32] #1: ffffc9000200fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.501361][ T32] locks held by kworker/u8:5/80: 4, last CPU#0: [ 1028.501374][ T32] #0: ffff888036d91940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.501429][ T32] #1: ffffc9000203fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.501481][ T32] #2: ffff8880365d5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1028.501531][ T32] #3: ffff88801cfbc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1028.501581][ T32] locks held by kswapd0/87: 2, last CPU#0: [ 1028.501594][ T32] #0: ffffffff8efcaca0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x243/0x1f00 [ 1028.501644][ T32] #1: ffff8880371360e8 (&type->s_umount_key#58){++++}-{4:4}, at: super_cache_scan+0x9b/0x550 [ 1028.501708][ T32] locks held by kworker/u8:6/151: 4, on CPU#1: [ 1028.501721][ T32] #0: ffff88802b6cc140 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.501777][ T32] #1: ffffc90002eafd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.501830][ T32] #2: ffff88802aa39440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1028.501884][ T32] #3: ffff8880598a5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1028.501933][ T32] locks held by kworker/u8:7/163: 4, last CPU#0: [ 1028.501946][ T32] #0: ffff88802bf1c140 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.501997][ T32] #1: ffffc90002eefd08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.502050][ T32] #2: ffff88805b31f980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1028.502102][ T32] #3: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1028.502147][ T32] locks held by kworker/0:2/982: 2, last CPU#0: [ 1028.502160][ T32] #0: ffff88805acc6540 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.502214][ T32] #1: ffffc90004ef7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.502286][ T32] locks held by kworker/u8:8/1105: 4, last CPU#0: [ 1028.502307][ T32] #0: ffff88802b6ce940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.502363][ T32] #1: ffffc900052c7d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.502421][ T32] #2: ffff88802be8d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1028.502471][ T32] #3: ffff88807ddfbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1028.502522][ T32] locks held by kworker/u8:9/1115: 2, last CPU#0: [ 1028.502534][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.502585][ T32] #1: ffffc90005357d08 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.502637][ T32] locks held by kworker/1:2/1215: 3, last CPU#1: [ 1028.502650][ T32] #0: ffff88805acac540 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.502711][ T32] #1: ffffc90005727d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.502779][ T32] #2: ffff88801cfbd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 1028.502830][ T32] locks held by kworker/0:3/2280: 3, last CPU#0: [ 1028.502843][ T32] #0: ffff88807c84fd40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.502899][ T32] #1: ffffc900071c7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1028.502968][ T32] #2: ffff8880598a5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 1028.503027][ T32] locks held by kworker/R-bat_e/3222: 5, last CPU#1: [ 1028.503041][ T32] #0: ffff888030c96140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1028.503093][ T32] #1: [ 1036.723052][ T31] audit: type=1400 audit(1789662952.068:5028): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1044.925774][ T32] ffffc9000e7c7c68 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.925848][ T32] #2: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1044.925896][ T32] #3: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 1044.925943][ T32] #4: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x1dc/0x4f0 [ 1044.925992][ T32] locks held by udevd/4968: 3, last CPU#1: [ 1044.926008][ T32] #0: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 1044.926055][ T32] #1: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1044.926100][ T32] #2: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1044.926150][ T32] locks held by dhcpcd/5262: 1, last CPU#1: [ 1044.926162][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1044.926205][ T32] locks held by dhcpcd/5263: 1, last CPU#1: [ 1044.926217][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1044.926261][ T32] locks held by getty/5359: 2, on CPU#0: [ 1044.926274][ T32] #0: ffff8880328ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1044.926315][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1044.926365][ T32] locks held by syz-executor/5595: 2, last CPU#1: [ 1044.926379][ T32] #0: ffff888033f26ce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5a/0x520 [ 1044.926427][ T32] #1: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1044.939152][ T32] locks held by kworker/1:4/5605: 2, last CPU#1: [ 1044.939168][ T32] #0: ffff88807c84d540 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.939227][ T32] #1: ffffc900040cfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.939298][ T32] locks held by syz-executor/5621: 3, last CPU#1: [ 1044.939312][ T32] #0: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 1044.939355][ T32] #1: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1044.939394][ T32] #2: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1044.939442][ T32] locks held by kworker/R-wg-cr/5681: 1, last CPU#0: [ 1044.939454][ T32] #0: ffffffff8ec92f60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 1044.939504][ T32] locks held by kworker/1:5/5691: 3, last CPU#1: [ 1044.939517][ T32] #0: ffff88805acc6540 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10