last executing test programs: 6m12.056358686s ago: executing program 3 (id=330): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000003) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000066c0)=@newtaction={0x37c8, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{0x85c, 0x1, [@m_mpls={0x114, 0x16, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe7c, 0x401, 0x0, 0x5, 0x6}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xba, 0x6, "1cf9bff57db6ada86f308873b62819b6b3e08fd94275296956fc9415522c2993d328f76875f15536d4d49fe884af1a535790d8290bed50bdb8aecf5b6d2cebe80e5a241d43da0ad82d8c0d2ccfac2f4293bd56ea72184ad84fcb90fecb273ef7143f877f66c3f6941d451d8c4a590f7fbf5f9327ef3584dde9fa302158aff625fb21e7fe52e753d3ff059913698c065ca6f944fed5fd3745511be994404e5202d41af1cb7cefc9287e0059e1708f4df528bd74286b06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0x1dc, 0x13, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x0, 0x200, 0xb}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x2, 0x5, 0x5fa, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x60, 0x8, 0x8, 0x10000, 0x4}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x20000000, 0x6, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x7, 0x5, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x100, 0x2, 0x6, 0x8}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x8, 0x0, 0x2, 0x3ff}, 0xff}}]}, {0xcc, 0x6, "2cd2ecd36fc9e9e84bd0a1e0942556ddbabcfa5c39bbae3afbb6794545b600a3672f087897172f7c5d031d7d3fe862f6fdb166341f133d9f97a0205753c6a689f961c20cb32313913dc7e1195cf939678df11c647cfb8db949e819237f4446082a15b636d8d9704f13d2429c65ad0424b5e4a04b5ad9a41ea2de00f90daf2c4ff9b8dba6060467e9fe9a1f53e86247048ea4a11c562469d3eb167dd513fbd3168f79b99da5490f993e3ce19345ac3d39a5a1f656518ff9c3cb206d4eac16911b1594021dad6f7d01"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x5c, 0x13, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff2, 0xc, 0x6, 0x74, 0x6}, 0x1}}]}, {0x9, 0x6, "46a44cddd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mpls={0xec, 0x1b, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x4, 0x20000001, 0x10000, 0xc}, 0x6}}]}, {0xa1, 0x6, "ecc29221b2d32cc0b655b1c8a296ac4ccd6dc5ef09cf182d1bd543bbb2ef5ddec65be7bd912234aa06e031055244c18968933cba6652e15996152cc1c4106c04c1248a95f5951ec5230fa5ad5dea6d179b49c757080db912b607020b95a2db730790e9bc55f5667e0a04b2dc86c9dfb0c585296febdbb43e14f801ff9e49e4a521ac2c578d126bb2ef47b76fe87249e8c800ddfc5d3692c3849dc04d7b"}, {0xc}, {0xc, 0x8, {0x3, 0x8493c97c97d3bf77}}}}, @m_vlan={0x70, 0xd, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0xe43be4069110dc65}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x68ac0, 0x8, 0x0, 0xbf26, 0xa}, 0x3}}]}, {0x1e, 0x6, "e02b24e29ed2b001a6dab3a4ab7dab0d944ea87216459e236696"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x10c, 0x7, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0xd4, 0x6, "a22fc19fb1dfb275b144727c0202339f23abfb092d16c3a37ce5f3771c016dd054a9fa1fac0dc6e671e491a69a57640232aff52a5e4acbe979f492c6ba33ca720013f641e06d40bd107c8c8225b90bb318a8a05c172e029a49bc141f455bd0fc7286abb520d13d7b978095faa400c46fdfb8eaf63dc8bf90ed51d1dc2b67814d1eb8eb07ebea283422ff592fa38b9cf2ce9d47ecb642bb5367b324cf22723cc2a09bb399b0442b805654b0ccb86b5a440df5911f91c7eb31e662804bfeecc7c23257b51d43438b37531abe1b8ca9bc28"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x1a0, 0x1c, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0x5, 0x9}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xc, 0x20000000, 0x4, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x7d4f, 0xffffffffffffffff, 0x1, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb6, 0x200, 0x10000000, 0x4, 0x8001}, 0xd70}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf9be, 0x3ff, 0x4, 0xfffffff9, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000000, 0x7f, 0x7, 0xd66, 0x7f}, 0xd4e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x401, 0x7, 0x5a, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000, 0x3, 0x8000, 0x5}, 0x2}}]}, {0x74, 0x6, "482fae53d6543489a76d13e44fd9f6de1adc6f50c29961d4690c6419f9ddb59eb544e8b13ba2d16b9631928dc0763ae4ab2b5bc2b3d4b33de99a5cad12eb480168caee8ef0933257c5ece743b96a72797212e663abc0861e34702a7b23910862dd302b1ae21fe6d40507e74e3643330a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x104, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0x0, 0x7, 0x3}}]}, {0xc0, 0x6, "ee95a4fb02a4a9880eff23ea9b9b98728310dea1c6080c69f75414081af36ba397073ee76a8071bdf3085f1a7db36b7f95503ebadaab6379bd822c311a82e8aa84aa9ebf58ac3b5cddf1fe125345d24b87679988b8898192c1541612ef0b85a862468ba1f6af5574e116f212a28aba2bbbca4938ceb2e9ce9bae31e1290f012b8ec3157091e5acaf730123a3dd14d1154d6cb5465d6cb06ffaafc24a684df7e3bc40a72b95fb24bec0fdd5517f9ca26ac7be667ca95faa2d396f04a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x104c, 0x1, [@m_skbedit={0x1048, 0x13, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x12ac, 0x1, [@m_xt={0x1b0, 0xf, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x10c, 0x6, {0x0, 'raw\x00', 0x2, 0x9, "db16773c089ade8fa6326d3646bec833d93f77b338d592863045786fbbd2e7b445007ab26c055f7b795c7dd2fcc23910c75ea81b172ca8ed47ad8b17709f859d5ed6fef1a51f6a951d68997bfc251520ed21350027e37d7baddcbd515a1b2f719d17c96e7d93fe23f26737f1bffaae42a83326fd4f02ada2e7b3e20ea0c9ce045459e9674acb0a163732f5dcb012e2f9ac6289ace7f6b8380ef54da0a8b413c4033453ec5f25edb8765c460b07d68857f600f4b9ec3aa607f5be114f82c712942edc17adcebcd54cbd876aa5a4c8657e3ea47d3c464b3f60df3cd35288bbea6ab448"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0x5b, 0x6, "be54a8f754ca496afe0e809261c23e94baaf7a2620a7996998ae1364ccfb8ec2455785eb67669f0415854ee832d79ab493d19fd4860112effe51dc6047393b8fd99d69ab4579b674fefb5cdc312e669418401bdd5eb322"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x10f8, 0xe, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x400000, 0x1, 0x5, 0x997}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x200, 0x2, 0x0, 0xfad6}, 0x3d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4c, 0x1, 0x5, 0xfffffffa, 0x7c57}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x5, 0x9, 0x1}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x20000000, 0x4, 0x420}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff6a9, 0x6, 0x5, 0x2, 0xffff8001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x9, 0x10000000, 0x7, 0x4}, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x90, 0x1, [@m_tunnel_key={0x8c, 0xa, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x18ba, 0x6, 0x1, 0xfffffff7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x1c, 0x6, "46d53937bb5b11be49d90239b41268aff7df90db9cf47791"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xbd0, 0x1, [@m_police={0x9d8, 0x11, 0x0, 0x0, {{0xb}, {0x8b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffff22, 0x8, 0x7, 0x2, 0xa87, {0x99, 0x1, 0x1, 0x9, 0x40, 0x9}, {0x4, 0x1, 0x800, 0x4, 0x7, 0x4}, 0x1ee, 0x0, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd867}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0xb, 0x7ff, 0x4, 0xe48, 0x4, 0x40, 0x7, 0x6, 0x6, 0x4, 0x7, 0x10, 0x6, 0x4, 0x2, 0x5, 0x8, 0x6, 0x9, 0x8, 0x1ff, 0x80e, 0x7fffffff, 0x3, 0x3, 0x4, 0xd, 0x8, 0x200, 0xfffffffb, 0x3, 0x9, 0xfff, 0x7c5e, 0xf, 0x2, 0x10000, 0x5, 0xd1, 0x80000001, 0x8, 0x0, 0x1a, 0x6, 0x6, 0x41d9, 0x5, 0x0, 0x80, 0x7ff, 0xffffe0af, 0xfffffffe, 0xf39, 0x4, 0x0, 0x9, 0x3222, 0x3, 0x9, 0xffffffff, 0xc76e, 0x9, 0x4, 0x8, 0x401, 0x4, 0x0, 0x5, 0x7, 0x8, 0x4e09, 0xed0, 0x2, 0x0, 0x72, 0xfffffffb, 0x95, 0x7, 0x6, 0x24, 0x81, 0x26, 0x4, 0x0, 0x4, 0xfffffff8, 0x400, 0x5, 0x6, 0x7ff, 0x5, 0x9, 0x1000, 0x0, 0xffffffff, 0x2, 0x5, 0x3b, 0x0, 0x9, 0x81, 0xd, 0xedcd, 0x8, 0xf2, 0x5, 0x8, 0x800, 0x100, 0x6, 0x14f, 0x4, 0x48cb, 0x0, 0x7, 0x2, 0x40, 0x1, 0x5, 0x1, 0x0, 0x1897, 0x7, 0x4, 0xffffffa3, 0xb, 0x8a19257, 0x63, 0x1, 0x7, 0x35, 0x7, 0x3ff, 0x4, 0x9, 0x40, 0x6e, 0x800, 0x9, 0x4, 0x37c0, 0x0, 0x9d, 0x1ff, 0x0, 0x3, 0xff, 0x6, 0xe, 0xe, 0x40, 0xc, 0x1, 0xe, 0x8000, 0x3, 0x4, 0x4, 0x4, 0x3, 0xe, 0xda7, 0x800, 0xe, 0xc37, 0x40, 0x0, 0xfffffff9, 0x400, 0x5, 0xffffffff, 0x1, 0x5cc2, 0x4, 0x6, 0xe4, 0x0, 0x40, 0x7f, 0x4, 0x2, 0x1f1b7c2c, 0x3, 0x4, 0x3e3f, 0xfffffff4, 0x5, 0x5, 0x9, 0x6, 0x1, 0x3, 0x8, 0x9, 0x9, 0x9, 0x200000, 0x1, 0x401, 0x9, 0xe9, 0x4, 0x5, 0x4, 0xa8, 0x401, 0xf, 0x9, 0x10, 0x9, 0xfffffffe, 0x7, 0x40, 0x2, 0xffffffff, 0x1, 0x7, 0x452, 0x5, 0x3ff4, 0x930, 0x0, 0x6, 0xfffffff9, 0x7, 0xff, 0x8, 0x6, 0x5, 0x9, 0x400, 0xb, 0xffff, 0x6, 0xf57, 0xfffffbbb, 0xe0, 0x7, 0x401, 0x0, 0x9, 0xeb, 0xffffffeb, 0x8, 0x9, 0x6, 0x500, 0x1000, 0x10000, 0x4ae, 0x2, 0x400, 0x6, 0x800]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x679}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x80000000, 0x4, 0x2, {0x3c, 0x1, 0xd, 0xb, 0x8, 0x9}, {0xa, 0x0, 0x2, 0x380d, 0x3987, 0xfffffe78}, 0x5, 0x7, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0xb, 0x101, 0x7e3c1189, 0x2, 0x6, 0x691, 0x8, 0x4, 0xfffffff7, 0x3, 0x401, 0x8, 0x2, 0x1000, 0x0, 0x4, 0x4, 0x80000001, 0xe2000000, 0x160, 0x5, 0xffff0001, 0x6, 0x3, 0xfa9, 0x60, 0x101, 0x2, 0xb, 0x77d296de, 0xa, 0x3ff, 0x7ff, 0x80000001, 0x2, 0xbb, 0x0, 0x5, 0x4, 0x7, 0x5, 0xf0, 0x8, 0x1, 0xff, 0x8000, 0x5, 0xff, 0x9, 0x1, 0x8, 0x0, 0xc, 0x1, 0x340, 0x80000001, 0x4, 0x1, 0xc, 0x2, 0x4, 0x7fff, 0x8, 0x0, 0x7, 0x8001, 0x3, 0xa, 0x3, 0x8000, 0x10, 0x6, 0x10001, 0x9, 0x101, 0x64effd5e, 0x2c, 0x863c, 0x0, 0x0, 0x7ff, 0x10, 0x0, 0x7f57, 0xee9e, 0x0, 0x7, 0x7, 0x0, 0xffffffff, 0x6, 0x7fff, 0xdc, 0xd1d, 0x3, 0x22, 0xdd64713e, 0x3, 0x3, 0x10001, 0x130d, 0xb, 0x0, 0x7, 0x0, 0x9a, 0x81, 0x3, 0x3ff, 0x101, 0x7fff, 0x9, 0x2, 0xfffffff9, 0x1, 0x3ff, 0x6, 0x8, 0x9ee, 0x5d, 0x5, 0x510b, 0x2, 0x2, 0x1ff, 0x4, 0x5, 0x80000000, 0x5, 0x4, 0x2, 0x1, 0x9, 0x1000, 0x4, 0x5, 0x4, 0x80000001, 0x80000001, 0x0, 0x1f9, 0x467, 0x21d, 0xc, 0x100, 0x6, 0x6, 0x4fc8e92, 0x5, 0x4, 0x10000, 0x6, 0x2000000, 0x1, 0x1, 0x4, 0xd23, 0x2, 0x3, 0x1, 0x9, 0x7, 0x5, 0x5, 0x8, 0x101, 0x80000000, 0x7f, 0x4a95, 0x0, 0x10000, 0x4, 0x7, 0x7, 0x5, 0xa, 0x3ff, 0x3, 0xfffffffd, 0x2, 0x0, 0x7f, 0x4, 0x8, 0x0, 0x8a0, 0x3, 0xffffffff, 0x8000, 0x1ff, 0x0, 0x7, 0x0, 0x9, 0x4, 0x200, 0xfff, 0x6, 0x24d0, 0x0, 0x5, 0xfffffff7, 0x5efe, 0x5, 0x6, 0x2, 0x80, 0x8, 0x5, 0x1, 0x5, 0x7ff, 0x5, 0x4, 0x6, 0x50e, 0x2, 0x7, 0x8, 0xfff, 0x4, 0x9, 0x8, 0xfc32, 0x7f, 0x8001, 0x40, 0x2, 0x0, 0x8, 0x80000001, 0x4, 0x13b4, 0x80000001, 0x2, 0x7fff, 0x5, 0xfff, 0x4, 0x5, 0xb2, 0xfa3, 0x2, 0x1, 0x8, 0x8, 0x1, 0xfffffffe, 0x44, 0x9, 0x7f2fc8af, 0x4, 0x4, 0xf04d, 0x6e6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0xf8, 0x6, "b48b28d13d1c94a6884f9093696a626547a65360f06f1b5be1766ae5693f39b7b19a906211bc89e6bc893f9a5fd64ed07b14d9a0a2ae2ee111701bd44bacd4c23fea29cf04c857c2d837261a99488fd01d550ece1b9c44cd41da78d8ecb206cb7031bdb1fbae81460a3b7a0e5b20c029257a0b3480550c7b4d203ef30759982778319e3a0afb62067c1c31b156d1b07d4a1f1fe8515cc5619bbbd46170a1bd1f1df4100449c84a04d7888941c1339a916bb669c2118bafaacc3dc5940e95fa34dd48acb326c236d84c877a4916b92879fe2044d6ec75d56c9bfd0c42308767ff2cda6950dcb2bb3d738c7885d42e03422d8ecb77"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x94, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffc}]}, {0x56, 0x6, "b5fbff993e738914fdc5bb68dec0494b5339d01fd6dbfc30a3efa873688b209024e150705d9322907152a0bc97de82f8c36b2ab704f49395d055ef9890d232b95b4847ceb9d404864fbd118e10feeb896437"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x160, 0x1a, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x2, 0x7, 0x10000}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0xde, 0x6, "e73232496f7d4c5fc7283700dcae771ef45dd0eb84c7e896599775c7fa2b7d26019614f1c3c5eb1c3bff8f1c59b23df5792adaae2d66e5a88e35e854d49a46f61f1173f60ad1e58f46f2beaab292ded2a58a2ea304d605fc85655fad05f8290c2872eb6225d1725e57558305ebb1d00ffab89cf995fff9694a371642d8a4ce174f994b5fb207797192b63fc61392b9bf62521da69fdaf6f6c913b34de563324e9c83aab3d2e6f354fec0054c0aeb16019b50c2ee0be7426b1d9ede61a9ec89dce06d7d0a151885fc04d7bccce6ab3d0782be5c02a1ed1f4b5e68"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x37c8}, 0x1, 0x0, 0x0, 0x20004184}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r6 = fanotify_init(0x40, 0x8000) fanotify_mark(r6, 0x105, 0x48008949, r5, 0x0) recvmmsg(r2, &(0x7f00000027c0)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000000300)=""/220, 0xdc}], 0x3, &(0x7f0000000440)=""/45, 0x2d}, 0xc2f}, {{&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/222, 0xde}], 0x1, &(0x7f0000000640)=""/4096, 0x1000}, 0x1a}, {{&(0x7f0000001640)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000016c0)=""/11, 0xb}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/105, 0x69}, 0x6}], 0x3, 0x0, 0x0) 6m8.799434074s ago: executing program 3 (id=337): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10}}], 0x1, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m8.756383457s ago: executing program 3 (id=338): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x8, 0x2, 0x4, 0x0, 0xc}) writev(r0, &(0x7f0000000b80), 0x2) 6m5.647646926s ago: executing program 3 (id=346): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = socket(0x27, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) io_uring_setup(0x7, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000123000/0x3000)=nil, 0x3000, 0x0, 0x204031, 0xffffffffffffffff, 0xe60d6000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r6, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xf) bind$nfc_llcp(r4, &(0x7f00000003c0)={0x27, 0x0, 0x0, 0xcf97501c97e71178, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x34}, 0x60) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) 6m4.393297558s ago: executing program 3 (id=348): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, r2, 0x8, 0x10, 0xa}, [@NDA_DST_MAC={0xa}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 6m4.080732175s ago: executing program 3 (id=349): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) socket$kcm(0x10, 0x2, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000004) syz_open_dev$evdev(&(0x7f00000001c0), 0xfffffffffffffff8, 0x10000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x7ff}}, 0x18) getpeername(r5, 0x0, 0x0) 5m49.075992104s ago: executing program 32 (id=349): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) socket$kcm(0x10, 0x2, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000004) syz_open_dev$evdev(&(0x7f00000001c0), 0xfffffffffffffff8, 0x10000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x7ff}}, 0x18) getpeername(r5, 0x0, 0x0) 4m20.39822962s ago: executing program 2 (id=625): openat$cachefiles(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800f4e8", @ANYRES16=r6, @ANYBLOB="010600000000000000000900000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) ioprio_get$pid(0x1, r2) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r9 = fanotify_init(0xf00, 0x1) fanotify_mark(r9, 0x105, 0x40009975, r8, 0x0) process_mrelease(r7, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00bc22a7", @ANYRES16=r11, @ANYBLOB="000228bd7000fddbdf252100000005002000010000000500200000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80054}, 0x40011) fallocate(r7, 0x0, 0x1000000, 0x3) 4m19.335581949s ago: executing program 2 (id=626): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/190, 0xbe, 0x0, &(0x7f0000000500)=""/113, 0x71}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000}, 0x10, r5}, 0x94) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, &(0x7f00000002c0)) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x7, 0x2f, 0xb, 0x22, 0x8, 0x722, 0x6, 0x7, 0x7e, 0x27, 0x8, {0x10010001, 0x6fd8e849}, 0x3}}) 4m16.475171545s ago: executing program 2 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x94}, 0x80) set_mempolicy(0x3, 0x0, 0x7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in6}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) (fail_nth: 1) 4m15.09539274s ago: executing program 2 (id=642): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r6, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0xfffffffffffffe5e}]}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r7, 0x114, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r4, 0x4, 0x2000) shutdown(r4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4m13.139961092s ago: executing program 2 (id=648): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020400000004000000000500000080a000"/32], 0x20}, 0x1, 0x7}, 0x0) 4m12.940473141s ago: executing program 2 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, 0x0, 0x0) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 3m56.593901325s ago: executing program 33 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, 0x0, 0x0) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 10.160959118s ago: executing program 0 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x55d6, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54815}, 0x4880) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.835983756s ago: executing program 0 (id=1392): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x1a1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x424) socketpair$nbd(0x1, 0x1, 0x0, 0x0) dup3(r0, r1, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x18, 0x1a, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000100)={'wlan0\x00', @multicast}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r5, &(0x7f0000000980)=""/71, 0x47) 8.906213178s ago: executing program 0 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x40182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r4, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0xfffffffffffffe5e}]}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r6, 0x114, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(r2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 8.663283684s ago: executing program 4 (id=1398): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003420000004203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "d3f447aa6b467000b167758cf781086f1f975c5864fb465c9ed73e8a284aac0e93e8764e33e4db574009e785"}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x1c, 0x98, {0x98, 0x21, "6e766665535e548697e5dbad9a743104ed55f1c3cfbcfdecb13dc708eec4bb24b5d75047fc4ba4f3c0048c202c0f4d579799f27e67697bc932f0443480f2049d4ca6402504ff10530e525a49c3c1ed88f18ca40b48cef6775aaf942b4a63bb0a78c9296ffb071a5d405c5a8dc61b3e494abf6eceea36d9e30295664db6e8ac9c16a61cd532ce86b1c126b329d85c61ef7fe0ea89a859"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000140)={0x0, 0x17, 0xed, "c20fa412c2cd7a690be922b0355146dafe328df0d7b0e391c595df88f8c5a86c0a3c5ab467a3e3d3c164a2b493d9444346bf042c956daee1816dfb408073f579e029f516007be3787b2896003b7af6aeb29e8b3b53cf91ea135a497f16f7e0a15e385484dcd993b43db24973feb8c7fa10132aa794eadd42608e1c7dbe12b74dcff7604a245a778bd1aef67b5546101c72c1432ff80550f6555045660c618958bef683339ca2af163f0291df590c50648d45aefd8de54abbbbdfe7466a288d8a0ce3d40385dae8461ebc9962cc669c09a506c3f393fcecfc7060786919ac0d970d18e1b71879c1c76c2f5df7c9"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0x7, 0x4, "d753e67c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000c40)={0x20, 0x14, 0x1, 's'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.518977178s ago: executing program 0 (id=1399): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d0494c20000000000010902240001000000920927ad000000008ad0c4f42a9c3067222900090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x31, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) setgroups(0x0, 0x0) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x4000040) r3 = socket$pppl2tp(0x18, 0x1, 0x1) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(0xffffffffffffffff, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x208, 0x0, 0xffffffff, 0x2c0, 0x128, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x5}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @port=0x4e24, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x28011, r8, 0xe49c3000) 8.483121696s ago: executing program 5 (id=1400): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x40) write$dsp(r1, &(0x7f0000000380)="a58e477d556caef0890ba7ab6ac471d6f3041a2d30e3c44a4504b6fbeeec85cafc1eb07e949e545e47f0b6014d1b542401a43178a2939c88c943a65292f9b2b871f48d9d5459f6c4c5b799b0f859ab63108c55450e9317f808687b4bca7a23ffd47af1fb41253112d3533668cd4e30f24bd7a24b95ffd4485c74fabb0f6df916cd49ac59da556e4887c4f31b74e1283b80bccf0578da7b557066b0c81c1f0771d22f0fcf7ae3bde54eb8819b6ac7e3b9ee213780a1c8567c6a26b6cc49e9c001b8ad8146e737e41982d1000000000000000000", 0xd3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r0, r0) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x102a, &(0x7f0000001c80)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1008, 0x0, @opaque="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"}}}}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000080)={0x6, 0x494e4f4b, 0x2, @stepwise={0xf4, 0x2, 0x5, 0xfffe, 0x2, 0x6}}) io_uring_setup(0x3841, &(0x7f00000000c0)={0x0, 0x475, 0x200, 0x2, 0x101}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2a4, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd8, 0x3, "01f1c81690c7f1bcc8f07d72bd3b7b5e729165378e37469556a7aed8e7d0d909dd7b0732c91728160ffe36a092e3141c2f5f9a9513f2bcb3e803904dd110e5ca2406dba8283c82e442999bb9a4fd2be77d66009c987028d3fe451fae46274565cd2f7793dd489a708debdcfc9558dead97476515f14446480a3a2bc03a22036a0c3ba88875123604f34ec5428c9649958f01d0f232fb293d92d4c281310d187559ea1582b1675726d9deb284fa056a465e6d2ed7ffe3c0f3c90fa32c7153f9d81a4d1ec32944b6f03f292a00d95c05ebc1d93724"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "80588f04ada0c588b5ada25fa78cbbdcf3fa8b822ddb47365e18"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "dd19484ac28270b37996dbde625b4f7bb6a7ec3e67df3c276339"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "9f5831826901ce1ed2780c66bfd49abf6eabb968eaaf3774fa9c3560998ecf7fdf"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r9 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.599799734s ago: executing program 1 (id=1401): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x5d, 0x8000, 0x31435641, 0x2, 0x800, 0x9, 0x3, 0x800, 0x0, 0x6, 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000380)={{@any, 0xffffffff}, 0xffffffff, 0x8, 0x1ff, 0x0, 0x7, 0x10001, 0x8, 0x9}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x21ee0000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x7fffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x2f, 0x0, @empty, @multicast1}}}}) 5.956443118s ago: executing program 1 (id=1402): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e22, 0x4, @remote, 0xfff}, 0x1c) bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e20, 0x142, @private0, 0xfffffffe}, 0x1c) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) 5.784360763s ago: executing program 5 (id=1403): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0xe9f, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c70, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x6, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x4, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0xe, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0x7, 0x9, 0x6, 0x6, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x7e000000, 0xffff, 0xfffffe04, 0x4, 0x9, 0x3, 0x3, 0x8, 0x1, 0x3, 0x7, 0xfffffffe, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0xfffffffe, 0x805, 0x5, 0x8, 0x5, 0xfffffffe, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x266, 0x5, 0x5, 0x0, 0x30b1d69b, 0xa1f, 0x20000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="492955e2c7b7ec48", 0x8}], 0x1}}, {{&(0x7f0000002080)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffc}, 0x1c, &(0x7f0000002180)=[{&(0x7f00000020c0)='n', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000040000000800000006000000000000008ba35b9918be9f64b5fb2285c2f0335136d4064b25962801b6c4a99473635ca16a0a7553a3dafdafbeca5e2d78a9383886cab412a44959aff7e02de0c2b7a08f8aa5780b25313699eef7fd7c883f30b77486850ce3435b95882037d1ca27197f1ace9b43f0df3eaa8f87649eea60e3c32d8149874ba394cafd207bf3a0cf131b9a8eb1d5bbab7bde360bb553b96380cf8ff057", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a40)={r5, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r6, 0x1}, 0x20) setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES64=r7], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000780)={0x14}, 0x14) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) 5.532487186s ago: executing program 1 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2047c85e651847bf, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='mqueue\x00', 0x2000000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x9, 0xffffffffffffffff, 0x1, 0xffff7fff}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) 5.494906348s ago: executing program 1 (id=1405): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x1a1) mount(0x0, 0x0, &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x424) socketpair$nbd(0x1, 0x1, 0x0, 0x0) dup3(r0, r1, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x18, 0x1a, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000100)={'wlan0\x00', @multicast}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r5, &(0x7f0000000980)=""/71, 0x47) 5.444771238s ago: executing program 4 (id=1406): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/190, 0xbe, 0x0, &(0x7f0000000500)=""/113, 0x71}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000}, 0x10, r5}, 0x94) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, &(0x7f00000002c0)) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x7, 0x2f, 0xb, 0x22, 0x8, 0x722, 0x6, 0x7, 0x7e, 0x27, 0x8, {0x10010001, 0x6fd8e849}, 0x3}}) 4.429675619s ago: executing program 5 (id=1408): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x40) write$dsp(r1, &(0x7f0000000380)="a58e477d556caef0890ba7ab6ac471d6f3041a2d30e3c44a4504b6fbeeec85cafc1eb07e949e545e47f0b6014d1b542401a43178a2939c88c943a65292f9b2b871f48d9d5459f6c4c5b799b0f859ab63108c55450e9317f808687b4bca7a23ffd47af1fb41253112d3533668cd4e30f24bd7a24b95ffd4485c74fabb0f6df916cd49ac59da556e4887c4f31b74e1283b80bccf0578da7b557066b0c81c1f0771d22f0fcf7ae3bde54eb8819b6ac7e3b9ee213780a1c8567c6a26b6cc49e9c001b8ad8146e737e41982d1000000000000000000", 0xd3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r0, r0) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x102a, &(0x7f0000001c80)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1008, 0x0, @opaque="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"}}}}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000080)={0x6, 0x494e4f4b, 0x2, @stepwise={0xf4, 0x2, 0x5, 0xfffe, 0x2, 0x6}}) io_uring_setup(0x3841, &(0x7f00000000c0)={0x0, 0x475, 0x200, 0x2, 0x101}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2a4, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd8, 0x3, "01f1c81690c7f1bcc8f07d72bd3b7b5e729165378e37469556a7aed8e7d0d909dd7b0732c91728160ffe36a092e3141c2f5f9a9513f2bcb3e803904dd110e5ca2406dba8283c82e442999bb9a4fd2be77d66009c987028d3fe451fae46274565cd2f7793dd489a708debdcfc9558dead97476515f14446480a3a2bc03a22036a0c3ba88875123604f34ec5428c9649958f01d0f232fb293d92d4c281310d187559ea1582b1675726d9deb284fa056a465e6d2ed7ffe3c0f3c90fa32c7153f9d81a4d1ec32944b6f03f292a00d95c05ebc1d93724"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "80588f04ada0c588b5ada25fa78cbbdcf3fa8b822ddb47365e18"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "dd19484ac28270b37996dbde625b4f7bb6a7ec3e67df3c276339"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "9f5831826901ce1ed2780c66bfd49abf6eabb968eaaf3774fa9c3560998ecf7fdf"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 4.352422508s ago: executing program 4 (id=1409): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x69e, 0x80000, 0x0, 0x2dc}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1df, 0x20000, 0x3, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51bb, 0x80000, 0x0, 0x2a3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x80, 0x3, 0xe7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc888, 0x2000, 0x2, 0x203}}], 0x4, &(0x7f0000003000)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0xd35, 0x0, &(0x7f0000000840)=@buf_4k="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"}}, &(0x7f0000003080)) syz_io_uring_setup(0x2000246, &(0x7f0000000000)={0x0, 0xb129, 0x40000, 0x0, 0x1ff, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x33) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80085}, 0x8004) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) unshare(0x28000600) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x40, 0x31, 0xc2, {0xc2, 0x9, "42bc54f5e8f603cd1968c272a805585535f15c8664368fb4af885d777b7a1346320cb5e2e2297445334cdc6ac1d0b081eea3fb657b38db651e60bfd89dfd6cb9c26d5e6f169a6961cabd6235cebb7b16096a4dedeee21f5c97b73ab2d6529556d684f2bdd3e0852f078cfe4908d2b1bb85f6f35251d589048c672bc70004f0d979a59f9536ccae90383bdfe8d2e5a0b7b89e0c836b60cf2ad1aec360403da71dd737baccafc4c4b7059db62a8a920b375c99cbc8d762fff9322bdd39c39530e7"}}, &(0x7f0000000280)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "d295b806013b050b035f4b4e36f50f6236781852a2ce30bb56a603612ae892e03d722a3e11e8f1c998fd407265"}}, &(0x7f0000000400)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x9, "c25165c9"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x88}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0x1, 0xa8, "fb8dac12c216294b6af2c1a9c8a4735513f3c5188923d45fe4b91fabe2fe089401ae1aa7a816ce9f4dd264f024b428cc639ecfb0c89649e7e6c0553a6f53d787b70c678c35046b626b048540c5a0d2d60bdc4e1be724b7a5bccede4a518a9e0c5e16d44c30ab335314b52d58639ebcc725ce55aab2a775c776f6e57f4dcf259e7771d14d2088aaecc5d2e9d23926ddc6cb52c0fa2b652b34c9fdf1b78e2abbf2d67d1128da3e6abd"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)=ANY=[@ANYBLOB="20019b000000ab7d9dab2281ed8db7effb4e23036bf52c2a3c6d591c04dbb5ed21c8fffcbead93b2c36c8f2f8317b36355f3917828f9d085e29bb45e7645f68a4b3dd5b513f0e879e4fedfb9e3fa10d677c5b4d80f00f9e53b603f4b540d3b42aedcd5d6ad090fc1f5d12b46b8c9d3a3aae881b6ff3c1e74f42a2b3c501b8d3ffa9417713e6318504763236cc8b7fea56bc5b7036d599885890a5378a305168fa28242e1dcb552cd2355fa5bdc62cd59aae06079de0800828fe0f1d52092de478b3ded6c1ac432bafc127f0ba0880650758469414e508e101e1f"], &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x8}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101}) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1b8a, 0x1, 0x3, 0x28c}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) 3.965534636s ago: executing program 0 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x40182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r4, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0xfffffffffffffe5e}]}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r6, 0x114, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(r2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3.715263674s ago: executing program 1 (id=1411): socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f00006b3000/0x1000)=nil, 0x1000, 0xc) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x4, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.056525728s ago: executing program 6 (id=1412): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB='#s'], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000740)={[{@dyn}]}) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 3.012522074s ago: executing program 0 (id=1413): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x40) write$dsp(r1, &(0x7f0000000380)="a58e477d556caef0890ba7ab6ac471d6f3041a2d30e3c44a4504b6fbeeec85cafc1eb07e949e545e47f0b6014d1b542401a43178a2939c88c943a65292f9b2b871f48d9d5459f6c4c5b799b0f859ab63108c55450e9317f808687b4bca7a23ffd47af1fb41253112d3533668cd4e30f24bd7a24b95ffd4485c74fabb0f6df916cd49ac59da556e4887c4f31b74e1283b80bccf0578da7b557066b0c81c1f0771d22f0fcf7ae3bde54eb8819b6ac7e3b9ee213780a1c8567c6a26b6cc49e9c001b8ad8146e737e41982d1000000000000000000", 0xd3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r0, r0) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x102a, &(0x7f0000001c80)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1008, 0x0, @opaque="eacf83411e940631d1177c5419d8194af788aae8b9e6f49fdd8f087287ce20e2b8aead35077937c4f4df11921904e78d2c1ee1106293c71053e9b23d301bf5ea995eadb59b1bcea524abc8b3f7f5a17bb7c15686750cc25724638d59fa45f910082c2fb0d727dfadc3d4d7a760436da76427d7f0db92fd790c35b175166e74be34b4fba3ded3c947c40ce62ebe2594859d9d06e0578b3650ebfc9b377796b9e2c754477d6e79a290c3cdcd2c041db0f567fae6d4406f55986255ab696fbe9a8a5adc5f1ed4a99fb3fbf66c552bd97ef9af881a9f0dd48bc43a52285ee627a85771e0a779869232749a82cb37a854f9be86b81120852fe205d6c230b73a4bc6b851aaf3942e06635523a95b6889c811c310cba9ff6b71cdfb792cdc4dc2565f8b17618142e4924c8d23a9f79db882f866f30ad3b7747e856d06891f9a59045cf42684023f6c5e55197d72e0bc76c5dbcd2b2b1011813a31b912cadaf5e25ace31ede91dd573813536000db7fd426c2dd4940aa55c3665416ddeb03316e5c25871b0866f610fd6457e504507c529f8be0952b5a03ab69305bd4c2f66ba21fe0b90025b792391bb7a9445b6472d8e676c5c894476bd017ff96ca891374d4cf25ed4cbf92161ef10b4aee7ee89f5f6d85328030c35933b8b197eb16bc6dafd21f69a809779452cfef0860bcb258382ffe5bcee3aac978f92a5a4aeeb79464b288c75a5ad8db6faa7a8ef5628f51effb3d6cf2d6d65cbb1ce6d3d268de86fa1496259a9cf9686c73bc474ac890371b7a7cab2ac0a02e3d0f1c175c8e722df10f7e137b1d39c6f4640c1eb1691a1259732452d01adf4bf84a227198039c17493b6c2c59dae6d2ea6876b03d08e1ef4cdfca4c5b997d2d7bc672013c609803ecb634ee6824140acd66e2a354df0434d1acd5085909197d2f4d7e79967028237e01fe35867ff6b3b5685382a6815e35dafc279c25159e1ee2f54129ff7d310427287777589b9f44ee4e02cbc417f389890ba99c3fba2eafcf4ed8ac1e399649f636b9687ddffaf136605d2dd8a989a850092a693378777d0d0634edb83a6039d193ce1ac1035b81a10322369727b187d64fb1ef4708b81ce26503f0a44029265dd9a3e31ab8d8b3a745081693492e21349204311e1c46ea35b52ffffc6d4e7ea985ffe3b925384897503655bf8931fcb340ab568f0c3f3219f284697ae4748dc705deb97d8f44122c6e7f74bc2dba24a3ca47ad29146aed8a07483e430addce14b2c87bc273bdab76a08f544bdbda639c1c3c942f056f9b52a5bdb30bf6c8a9c5177c2760993d003304af0640c47bff9fdbbed0e837711ed76883e4af4430ac5b87df367ac6f2e556f658b13acaed052aea05b0b802e152bb3264e0b6c74951e5be82b4a4a6b03f9d33a6bda07eb5e8e982274e83d7d3a66a76cc21f0df152bb830c22a9efb0aa088c4bf79392cad3910486996bf187f3b99a099ecbfaaac96470c3cfe9ed91ed71dedbfe27f9cef7883e30c3413de120c6c68ecf33d5fa6de0353fbac3a85a099aa14cd90bcaec576ae97e1bec763feb131c1ba7134771da6af4c07f5b157d79eec848189cc0a4654890472d19043ebff3f033251dd8aa4b44939efd24a127cd751364e82f6e331e938815df34c6291faba82b7ebd2bdf9db630a3fb7a158cc63ff5eb47f2c2619122cf97a5c323fe5355a65863709ecdbb53b0c0818abdf0a6b775e18b0fd91338d8c25c43adfe7f46eabc9079511c2ded9cb6fd86de4dc1daeb99dd5c9bfbb0c1b0ecab6ebcdbe13df8d1bad4d2dd8a223eae7b7adce8a8b890ebdf972b34f04f027efdcf7402d19eda5d9feaee67a20d46197cfc2225e6d5d89ac7c6df4b3342591e0a87cb8cd88ee25e689de2c05d6d5bf4d4b7a040edf587cc986b59cb6f806e72dcd3f24a202bdafdef275cb1ce8971a7cb2b2c222e5afc453f84198f5fee3f6513b4efe7974ca03e08535d9e520943e3ce78d8a68f793444729d59afbbbe9465d6afdfe810ca28c81364ae03561eb7f3865171884bb394ae0d8676514aabd1c0e60bec3d09ae65683b83f5390b3d027fbb2e7eb86521193d9da3254c4118f7f82a9312d06bc8462cf8c6bcbcb5f4830549196ae9d936b1f3b2d5360ec266af607f3f773546760447740e1b08864c1327ae22774face56d42c21fe01a9d8320f99b8afe54fa952e182a2a8c6f3fb6078072647be431260e40e8b2979d38f5bce775887c503b1288fee8d23354e0519e424a54d1368fd2621cc943a4cd1eec057d69bdf51d7a539cf48fb8794a1e2b037a9586c2a3f529b726f583ba2785608ef740371db315e8f406e40b7ec358c35f0334fca281d5082a7b3c2f4c2b95db4773a610b6b9c7563fc213a672531d9bf3d4209a5839f2aa6c74a21e2e9b5bc107360e73c8b1735ecfb05520cde72cb49f924042216ab7f777ad81d844999f54cd49add432bc7858124d62ba7bd09785ac96f64e35399de1dcab142735efdb497d99e47edf940884dedc716f0116ab7997525bfa5404fb866cf08e67d07c9aa81caacc724676a3018bc6a633beaed5f034e07a2547eefab10b10a43a049fa7187864c32063fb2b1be39fb939cec48bd4abb96d54d63d2a27ab665a84cee315903d4ab0072fb37488a31df19c212eef5c9a81f845a69dd60b3f7b8bbaec699920aa00490a899442cf865710e3eb5d35cc790bf3625c0388ed82bcccc456b106b2e2698a00897a10b76693181ef0aa99f1d01c2b4750a3af4e23d82e6c71e1d38b0ecfa813e47865cda85c9cfed0fd25cc68d3613a95f70b6fa40f346fb02cd66b1ab2472f29b8b657358000de7797a3e2379cc2857bc235ac9d84eabb6a378e2ceb8245d5374504c6a9ef0fc32b8c0e933c03eb56062a479d33ec62e8c14bc17c397d5e47385db360efa77484a0dcb99c28d7d84a2aab97bc3e2869cc7fffc6cde95e738df6b3b741dd03d760f6b9942b1dc27d2d093c31dc0f9574ef47912b3a342bf9e5891db32f6e2074758c543028b8ec6c2857dc98e2cb653dd1b6beb21056350bf69aa033052369a6172a2c1fa1a11c64c5eebaba51106e09a7812353f1b3ee9370b3971511ec6a8eff183702a4f52cbd5c37194c73d430d7bceb0e969e6e39da2065cbf74b43b290a7b7900dd705a4556ab6daa11df39ddf5626555db4c3a90a7feeabdf0075881bb33309f0356f4eafe9b1fec1e1d372b04d0a0c73ea55deac783f4319746fb02a5c0f87d381000b1c9e0f29ef703a4b0d3e5e864d16c94b77b3087a89174d880d30cfed00610f79bf7fb1ef552a0e7080b81d403087e6d5ac0b07a304a909a1e3e59c16857263dfada9c6949494edf22b0c50d20311c402405dc112c110b881047505f30ac28d90254ee984a31f20fd8745f227fc4cd3845eb29ffadd24a87199fb7f8cafe6f1d15b53e595523e16c8a3aab7d1449805643dc8c019d69df0c9a7d86c0cf8ffab214269aedebec17846ef5ce22ec840eea633ec10aba1f090c5ccf8eadb6a311f677f80be3bd636c7ce6c7d1151b1b7d84faedefef9aa28740481cab45c22d6bfb70c6782779961bc414c716439bbd29ef94f3864c2b62774eb90a0f7a3fe43078025fc1bee923c4d9d1d9c3ee313e150a81e011674f798ccd74add3b8352b6e92b860caa13e92d2682f8bd5da6591a1356a9e93868478aab0f4ff750c0226723a85b27ce3c4fa12ef35c4e1c2a4270f5a9b4e4eecb5b3d83fcb556995e653f15af58478809b0f4fc1b69c5c1c66f4440ebd75dac9de592c794812821acc32523abcf895d37b61c4d113d18fb46599845645e52079dd63042ed289a644cfd615a82924604f2f5e53265b8ef6a97472c2aa406cc86620e2de2edbc7bb11357802c5bcf8ac8a98d6c56ce9682b69cecc1672b5e1921f241faa06de697a931f252d43d149c98b94aba967eab03ee074ed5c55227bfff988885cc4b4165a967deb1fe5c568652b0358a574ba87cae8e426c7de1a18ac8123ad5eedd45d42d4bba1886a613d5dcb891eb35ac2e713399381660f4aa74b88a145fb641352bc64ddcc869c33f5be8f9491afc5b5c5904c3ab7845cf219b6be7b1bf5259506bd6efab437c1247c30ede3b9689913b14dce7742e8b8c6361c11120fd7d094b39b3c2287fbd006a894d01c7f402484d9f685133aafacfb7d62c62e0c0bd31f7da2f80b9bd77f20e25e79b31c4226df9786c675dc1649be05459c602ae6637dbbee2745ad4bc50f3f0512a812e2b6a32aea2ae5f2a058b0d6e84a6cd36deefc9160e6583dd92c27f44ae733157c244189e69edc9f8b71105d5b66f563b833e561710e606f9f708bcd69dbe5a01ccbba8249371a8cd5832486631f3a0c6502443925819c062d4fc625fc69e4901a35b5a5626de029268348412ce86e005efb777e2cd556ff7cd6c5b2deb51ecd1a103b39965821f7bc2b8fca31d9e21be068dfb54fd0207b3f96acc3c8afd24fe5d6ff68e4fe9d1fcec9b145e370676086dd36f77982f9d5e5a11990e74aa3f478075c6a9e00cdd3bd567e9a2f1948c7303513f9e608bb9565356f785137b030fb41a7f130472f1ae672cd6fcf042d9b5c0d8c393d7d2a77371bde2685d09bafec9d0fd9c8552b99ac094ad9f8d36bc49c3ac92535a66d383d6d5146ba53bc31a471c07c55d68fec842f01587e185a37344eade7ceb664f247b4a580ac7ab5589a03c2dc0af5713319efed44238abeb3cee88375937eaf2d42827bd110fbf60f794e7a6fa2f44da278e321683510898e96f8af203881931d7d07cd11dcb194077839bba65ea1b2b3549f52b5ac574d6b91de2685d0144331ed7183f4e5453297909ae0aaae33f6f84959af5944fc4d213dca24423d9090257a20071f017c9f1acb49b44a210d046fe5204855198890af588b5a18df6bcd447ff15c3d19c3aaf88ce60ab43610b03fe2674f1636dc53b566804865603b0b66ec1afefe5da2bd96246fceda07a4b0132ffd41ea37a7e0738081509b05fadd1779a2a1efba0552bbf91114bfba58e10cd538dab40cd86fb814c3ef63746162675ba5016fc221349c6e03e634be44927b3c05b9eb1d0c959bbc07bfa1035092cd08191ef256cbad917a62037da079614f75f369641b8ddf53fe65efdb560b2216cea0d76c5f7825f5b2d87295bf15111e8e8d552878c2254c3b5dab2ca4cf015233d05cbc8191f75a275c507fbcea9118b51207f7042f519799d4d4162c3a4a14381f7f9bb3298c5766e36f96a01dc9c6a8c27124076f8cfe0632b7e12f880c7146aae3170a3855babf93c4f070f16379600fbb9e06fbdf8b516cab5a84569bffc69f2b17b6092c498c55e92d540d5aca20ad50e27eb51344636b57385d017aa5b4499e2934eb9c587aecebee9bd3ce8a6de83cd0f8f2cc92e11d1afab865ee564244b13bfbbd196af9bcb52fba938c58da1914c063ffcc80a9fa4d13b1d8cbc9971a2c3fcba8bc8238cbd187f62efa4ec642e317d5c29039dc339749241db19eacc73a13c7d7cf73d5cee235b1d5e7a635dff94584b9af6a4460c0414c141768c3240df1933e1abf500e39b62225f21b42112480374055c642bac1f3ee6c17e3ab30e328e30a3ecad60444870a69ecb2f76987b4bc4cb813501613a818433b36de75d45de59b76f527b1e91682e24b511099609f7e57a3e788e6199504b43350faf3f490d3498360263207499e7b4ee54965f86004032a5a03a0a826cdf432d4fa27bc525f0dcfee8e27b5884561616fc5fc9eb7b1c58af4d3d4f5cb5a69284e8bca155694a"}}}}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000080)={0x6, 0x494e4f4b, 0x2, @stepwise={0xf4, 0x2, 0x5, 0xfffe, 0x2, 0x6}}) io_uring_setup(0x3841, &(0x7f00000000c0)={0x0, 0x475, 0x200, 0x2, 0x101}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2a4, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd8, 0x3, "01f1c81690c7f1bcc8f07d72bd3b7b5e729165378e37469556a7aed8e7d0d909dd7b0732c91728160ffe36a092e3141c2f5f9a9513f2bcb3e803904dd110e5ca2406dba8283c82e442999bb9a4fd2be77d66009c987028d3fe451fae46274565cd2f7793dd489a708debdcfc9558dead97476515f14446480a3a2bc03a22036a0c3ba88875123604f34ec5428c9649958f01d0f232fb293d92d4c281310d187559ea1582b1675726d9deb284fa056a465e6d2ed7ffe3c0f3c90fa32c7153f9d81a4d1ec32944b6f03f292a00d95c05ebc1d93724"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "80588f04ada0c588b5ada25fa78cbbdcf3fa8b822ddb47365e18"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "dd19484ac28270b37996dbde625b4f7bb6a7ec3e67df3c276339"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "9f5831826901ce1ed2780c66bfd49abf6eabb968eaaf3774fa9c3560998ecf7fdf"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r9 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.90993652s ago: executing program 1 (id=1414): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xe8240, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xc2580) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = dup(r1) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r4) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000280)={r0, 0x0, 0x3, 0x9, 0x6, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.918951203s ago: executing program 5 (id=1415): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20010000) 1.905796144s ago: executing program 6 (id=1416): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) 1.881049088s ago: executing program 4 (id=1417): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000002c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c00)={&(0x7f0000001480)={0x175c, 0x0, 0x5, 0x301, 0x0, 0x0, {0xf, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x3}, 0x8, 0x5, 0x1446, 0x42c9, 0x19, 'syz1\x00', "761c15b3382d516eae5e179ef1b92458118d8cc268fb4cb48517ccba56e9eb73", "2a27343dc42f6fec982d95540fd581d19207ba7d225cd179ef340281370a92ff", [{0x15fc, 0x4, {0x0, 0x4}}, {0x0, 0x1, {0x2, 0x81}}, {0xff, 0x8e9, {0x3, 0xd5}}, {0x1, 0x1, {0x0, 0x2}}, {0x4, 0x0, {0x0, 0xfffffff6}}, {0x9, 0x1000, {0x0, 0x7}}, {0x33, 0xa30, {0x0, 0x3ff}}, {0xc, 0x5, {0x1}}, {0xc14, 0x7f, {0x3, 0x1}}, {0x8, 0xff, {0x0, 0x6}}, {0xd9f, 0x6, {0x3, 0xdac5}}, {0x510, 0x8, {0x0, 0x4}}, {0x8, 0x90, {0x0, 0xffffffff}}, {0xc, 0x8, {0x1}}, {0x6, 0x5, {0x1, 0x6}}, {0x4, 0x4, {0x3, 0x3}}, {0x100, 0x9, {0x0, 0x1}}, {0xeb, 0xff, {0x2, 0x7ff}}, {0x32ac, 0x8000, {0x0, 0xbeb}}, {0x0, 0xe0, {0x3, 0x3}}, {0x2, 0x6, {0x3, 0x7}}, {0xfffb, 0x2, {0x1, 0x80000001}}, {0x1, 0x1, {0x0, 0xffffffc0}}, {0x5, 0x7, {0x3, 0xd6}}, {0xd, 0x7, {0x1, 0x9}}, {0x10, 0x1}, {0x5, 0x7, {0x3, 0x56d5}}, {0xab, 0x5, {0x1, 0x7fff}}, {0x6, 0x9, {0x3, 0x3}}, {0x8000, 0x5, {0x1, 0xaa}}, {0x2, 0xff, {0x2, 0x3}}, {0x1, 0x8, {0x3, 0x10001}}, {0x9, 0x6, {0x3, 0x5}}, {0x3, 0xb}, {0x100, 0x0, {0x0, 0x3}}, {0x3, 0x5, {0x2, 0xfffffffb}}, {0x6, 0x101, {0x0, 0xfffffff8}}, {0xf, 0x93, {0x3, 0xd}}, {0x5, 0x9, {0x0, 0x8}}, {0x1, 0x1, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0x1000}, 0x7f, 0x9, 0xfd6, 0x5, 0x23, 'syz1\x00', "e611f4859da1b09ccdc8084f907cee14f34ffed8da2d0c380bd34ec78d368486", "31051723acb17ca945d48f63d3176bf62285a690238937dbf50761681583f835", [{0x2, 0x0, {0x1, 0x1}}, {0x80, 0x6, {0x1, 0x9}}, {0x4, 0x1ff, {0x0, 0xfffffff9}}, {0x0, 0x5, {0x3, 0x8}}, {0x76c, 0x6, {0x3, 0x1}}, {0xffff, 0x2, {0x1, 0x30000}}, {0x8, 0x8, {0x0, 0x8}}, {0x7ff, 0x4, {0x3, 0x6}}, {0x4, 0xfdc9, {0x2, 0x26b0}}, {0x5, 0x6, {0x1, 0x2}}, {0x0, 0xfff, {0x0, 0x6}}, {0xaa3, 0x7, {0x0, 0x4}}, {0xf800, 0x10, {0x0, 0x9}}, {0x697, 0x2828, {0x2, 0x3}}, {0x1, 0x6, {0x3, 0xf}}, {0x3, 0x1000, {0x2, 0x4}}, {0x0, 0xbe1, {0x2, 0xc14e}}, {0x1, 0x0, {0x2, 0xbf}}, {0x2, 0xa}, {0xa, 0x8, {0x1, 0x5}}, {0x4, 0xfff, {0x3, 0x9dc}}, {0x8001, 0x200, {0x0, 0x8}}, {0x9, 0x5, {0x2, 0x5e88}}, {0xfff, 0x51b, {0x3, 0x81}}, {0xf277, 0xfffa, {0x0, 0x2}}, {0x5, 0x8, {0x0, 0x1}}, {0x5, 0x66a, {0x0, 0x529d}}, {0x9, 0x20, {0x0, 0xc4ca}}, {0x9, 0x5, {0x3, 0x9}}, {0x0, 0x0, {0x2, 0x2a45}}, {0x6, 0x1, {0x2, 0x7}}, {0x7, 0x0, {0x2, 0x6}}, {0x0, 0x0, {0x3, 0xfffffe00}}, {0x3, 0x7, {0x1, 0x626d}}, {0x8, 0x2, {0x3, 0xf}}, {0x800, 0x1, {0x1, 0x5}}, {0x9, 0x9, {0x2, 0xa6}}, {0x9, 0x1a, {0x2, 0x7}}, {0x3, 0x9, {0x0, 0xfffffffe}}, {0x9, 0x101, {0x0, 0x80}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x1, 0xff, 0x200, 0x38, 0x13, 'syz0\x00', "059ea75f82afc497fba7d55c0a34d9c1acf7ac10e67c8372f2937b19bfb144b7", "63c34e7c12a5ed4fa28f98fe516dccb52e6987875a1a365d711c78211fb9843e", [{0x101, 0x44, {0x3, 0x10000}}, {0x0, 0x2, {0x1, 0x2}}, {0x71, 0x0, {0x0, 0x5}}, {0x8001, 0x101, {0x1, 0xc810}}, {0x9, 0x40, {0x8524413b5c747118, 0x64}}, {0x9, 0xff, {0x2, 0x6}}, {0x4, 0x1, {0x3, 0xc2}}, {0x3, 0xf40, {0x0, 0x4}}, {0xff, 0x6, {0x3, 0x8000}}, {0x1, 0xc03, {0x3, 0x3}}, {0x2, 0x3, {0x0, 0x4}}, {0x0, 0x94a6, {0x2, 0x5}}, {0x5, 0x6, {0x3, 0x3}}, {0x7, 0x81, {0x0, 0x6}}, {0x0, 0x8654, {0x0, 0xfffffffd}}, {0x1, 0xd, {0x2}}, {0xc48a, 0x7, {0x2, 0x9}}, {0x8000, 0xf001, {0x0, 0x6d8}}, {0xa, 0x1, {0x0, 0x1}}, {0x6db, 0x1ff, {0x1}}, {0x0, 0x6, {0x1, 0x6}}, {0x8924, 0x86, {0x2, 0x3}}, {0x7fff, 0x7000, {0x3, 0x3}}, {0xcb, 0x9, {0x0, 0x8}}, {0x8001, 0x100, {0x3, 0x10}}, {0x1, 0x80, {0x2, 0x35}}, {0x6, 0x0, {0x0, 0xd}}, {0x8, 0xb, {0x2, 0x10}}, {0x6, 0x10, {0x2, 0x4}}, {0xa57, 0x38df, {0x1, 0x6}}, {0x8d28, 0x21, {0x2, 0x1}}, {0x6, 0x1, {0x2, 0x200}}, {0x4, 0xd, {0x1, 0x14a9}}, {0x81, 0x200, {0x2, 0x15}}, {0xf, 0x8, {0x1, 0x7}}, {0x2, 0x688e, {0x1, 0x1}}, {0x1, 0x1, {0x0, 0x4}}, {0x1, 0x8001, {0x2, 0x8}}, {0x2, 0x28, {0x0, 0xa3}}, {0x0, 0x2, {0x0, 0x10001}}]}}}, {{0x254, 0x1, {{0x1, 0x64a}, 0x0, 0x9, 0x9, 0x4, 0x3, 'syz1\x00', "5d788045c5f3468318c3299b6b5bda49c6ada2748fd0bf6404529d42b161c542", "7de926b9a3239873cd6ccc63c75663be3c7d33ebb33e677e16583bca131f0a32", [{0x6, 0x9, {0x1, 0x9}}, {0x5, 0x7, {0x3, 0x3ff}}, {0x0, 0x5, {0x1, 0x7}}, {0x0, 0x2, {0x2, 0x8}}, {0x8, 0x4, {0x3, 0x2c1b}}, {0x4, 0x4, {0x2, 0x8}}, {0xf, 0x6, {0x0, 0x40}}, {0x6, 0x5, {0x3, 0x4}}, {0x7ff, 0x9, {0x3, 0x7fffffff}}, {0xfff5, 0x81, {0x3, 0x80000001}}, {0x82f2, 0xfffc, {0x2, 0x7c4}}, {0x8, 0x7, {0x0, 0x79d}}, {0x41a, 0x5, {0x2, 0x2}}, {0xa221, 0x5, {0x3, 0x9}}, {0x0, 0x0, {0x0, 0x1}}, {0xd, 0x7, {0x1, 0xffffff01}}, {0x3, 0x5, {0x3, 0xb}}, {0x1, 0x4, {0xd55e8e9186ee3daf, 0xa}}, {0x8, 0x1, {0x3, 0x8000}}, {0x0, 0x5, {0x0, 0x1}}, {0x8, 0x1, {0x1, 0x7}}, {0x551f, 0x675f, {0x3, 0x33766f9e}}, {0x7, 0x5, {0x0, 0x7fffffff}}, {0x40, 0xfffb}, {0x6, 0x2, {0x3, 0x101}}, {0xe1, 0x7, {0x3, 0xfb}}, {0x9, 0x9d14, {0x0, 0x1e}}, {0xffe0, 0x28, {0x3, 0x200}}, {0x5, 0x7d3, {0x0, 0x8001}}, {0xfffd, 0x9, {0x3, 0xa}}, {0x0, 0x2, {0x1, 0x3}}, {0x5, 0x80, {0x3}}, {0xffff, 0x8, {0x3, 0x1}}, {0x7ff, 0x7, {0x0, 0x3ff}}, {0x5, 0x24, {0xea8d8c4c41235fb5, 0x1}}, {0x1000, 0xc, {0x2, 0x8}}, {0x0, 0x5}, {0x6, 0x0, {0x2, 0x7}}, {0x1f, 0x0, {0x1, 0xe613}}, {0xe5a7, 0x10, {0x0, 0xe240}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x2, 0x8, 0x6, 0x7, 0x0, 'syz1\x00', "f9a57633d289fc2c39216b617874a29cc5d66c56e725a1fd9102965d2574c8a7", "045a866dbc8b63f52d2b7b2aeda6e4509b4a8b73d67411056fb537de20088f39", [{0x5761, 0x4, {0x1, 0x7}}, {0x9, 0x5}, {0x6, 0x1, {0x0, 0x9}}, {0xd, 0x8, {0x1}}, {0x4e5, 0x2, {0x2, 0x7ed6}}, {0x1000, 0xd, {0x3, 0x5}}, {0xec9, 0x8}, {0x6, 0xfffc, {0x2}}, {0x7, 0x5, {0x3, 0x4}}, {0x2, 0x3, {0x0, 0x1ff}}, {0x2, 0x101, {0x1, 0x4}}, {0x1, 0x4, {0x1, 0x3}}, {0x1, 0x7691, {0x2, 0x7fff}}, {0x8, 0x8b7e, {0x2, 0x6}}, {0x0, 0x3}, {0x1, 0x7ff, {0x0, 0x8}}, {0x6, 0x9, {0x1, 0x8}}, {0x2, 0x9, {0x1, 0xf}}, {0x2, 0x4fc, {0x2, 0x4}}, {0xff, 0x3, {0x0, 0x7}}, {0x6, 0x3, {0x0, 0x7}}, {0x7, 0x5, {0x3, 0x2}}, {0x8, 0x2, {0x0, 0x7fffffff}}, {0x0, 0x600, {0x7, 0xfffffff9}}, {0x4, 0x8, {0x2, 0x1}}, {0x6, 0x4, {0x3, 0x5}}, {0x51, 0x100, {0x0, 0x6}}, {0xa, 0xb, {0x3, 0x2}}, {0x0, 0xc0, {0x0, 0x6}}, {0x3ff, 0x2, {0x0, 0x8000}}, {0x1, 0x2, {0x0, 0x3ff}}, {0x598, 0x8001, {0x1, 0x9}}, {0x2, 0xe7, {0x1, 0x9}}, {0x3, 0x49, {0x3, 0x3ff}}, {0xe, 0x100, {0x3, 0x7fffffff}}, {0x3, 0xb, {0x2}}, {0xb, 0x0, {0x0, 0x94d}}, {0x81, 0xe75, {0x3, 0x238}}, {0xfff9, 0x3, {0x3, 0x2}}, {0xd, 0x5, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x7fff}, 0xd, 0x0, 0x4, 0x8, 0x19, 'syz1\x00', "244a4150b32b915e65b71b5d22d9eaf3241b925b3926f3bfd783200c8c36f0a3", "e832862ae5adb15cd389d46fdcee86e12be866f206342238a6ac4319f035d575", [{0x7, 0x6, {0x3, 0x1}}, {0x4, 0x9, {0x3, 0x3}}, {0xfff9, 0x200, {0x1, 0x77f5}}, {0x3, 0x74, {0x3}}, {0x5, 0xa, {0x0, 0x5}}, {0x9, 0x3, {0x3, 0x9}}, {0x3d02, 0x90, {0x0, 0x1}}, {0xe00, 0x75e3, {0x0, 0x380000}}, {0xfff, 0x0, {0x1, 0x3}}, {0x9, 0x8, {0x0, 0x4}}, {0x84d, 0x9, {0x0, 0xffffffff}}, {0x9, 0x3, {0x1, 0x1}}, {0x8, 0x6, {0x2, 0x3d}}, {0xfffb, 0x80c1, {0x2, 0x4}}, {0x9, 0x1000, {0x6, 0x8001}}, {0x0, 0x7ff, {0x1, 0x3}}, {0x800, 0xfeff, {0x2, 0x40000000}}, {0x7fff, 0xa2, {0x0, 0x6}}, {0xc78, 0xfff9, {0x3, 0x5}}, {0x3ff, 0x7ff, {0x1, 0x1ff}}, {0x5, 0x7, {0x2, 0x5}}, {0x8, 0xf408, {0x1, 0x10001}}, {0x6, 0x1, {0x3, 0x5}}, {0x8, 0xe, {0x2, 0x6}}, {0x7, 0x3, {0x2, 0x423c}}, {0x2, 0x2, {0x0, 0x1}}, {0x3, 0x4, {0x1, 0xfffffffd}}, {0x86e, 0xfff9, {0x0, 0x3}}, {0xb, 0x2e, {0x3, 0x6}}, {0x0, 0x44fd, {0x3, 0xad3}}, {0x5, 0x6, {0x3, 0x100}}, {0x9, 0x5, {0x3, 0x4}}, {0x4, 0xc, {0x3, 0x1}}, {0x7, 0x9, {0x2, 0x3}}, {0x40, 0x8, {0x0, 0x9}}, {0x40, 0x3, {0x2, 0x8000}}, {0xb8, 0x7d6f, {0x1, 0xa}}, {0x4, 0xc60, {0x2, 0x1}}, {0xfff, 0xfffd, {0x2, 0x8}}, {0x0, 0x6, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x7f, 0x9, 0xc, 0x2, 0x24, 'syz0\x00', "fa6e7a33936f6b6ebbcecc455672809d22424b3c1e8530b98b732666170ae713", "b26f27e3c710c55ec54c001531ccdd7b9daf76366123d08191d2e6e36dd45ddc", [{0xf, 0x3, {0x1, 0x2}}, {0x8000, 0xfbff, {0x1, 0x4335}}, {0x8, 0x2, {0x1}}, {0x0, 0x5, {0x3, 0x4}}, {0x9, 0xf1, {0x0, 0x10000}}, {0x0, 0x8, {0x1, 0x800}}, {0x5, 0xfee1, {0x1, 0xc37}}, {0x4, 0x9, {0x1, 0x910}}, {0x3, 0xff, {0x3, 0x8}}, {0xf, 0x6, {0x3, 0x5}}, {0x7, 0x6, {0x1, 0x3}}, {0x7d0, 0xc4d, {0x2, 0x80000001}}, {0xfff9, 0x8, {0x0, 0xcd61835f}}, {0x6, 0x6, {0x3, 0x8001}}, {0x4, 0x8, {0x0, 0x1}}, {0x67e9, 0x7, {0x2, 0xa1c7}}, {0x400, 0x3, {0x0, 0x9}}, {0x6a0, 0x9, {0x1, 0x5}}, {0x7fff, 0x99bc, {0x1, 0x5}}, {0x8, 0x3, {0x0, 0x7}}, {0x19c, 0x8, {0x3, 0x80000001}}, {0xf10, 0x19d5, {0x0, 0x2}}, {0x1e4, 0x9, {0x0, 0x800}}, {0xf, 0x6, {0x3, 0x6}}, {0x8, 0xff7f, {0x2}}, {0x6, 0x3, {0x3, 0x3}}, {0x4, 0xa0, {0x1, 0x7fffffff}}, {0x7c8, 0x1000, {0x3, 0x8}}, {0xe8, 0xff, {0x0, 0x5}}, {0x8, 0x2, {0x2, 0x3}}, {0x1ff, 0x1, {0x2, 0x401}}, {0x7ff, 0x458b, {0x3, 0x1}}, {0x7ff, 0xe, {0x3, 0x5}}, {0xfff8, 0xf2b5, {0x3, 0x7}}, {0x0, 0x7, {0x2, 0x100}}, {0x9, 0x4, {0x1, 0x9}}, {0x401, 0xe49, {0x0, 0x40000}}, {0x49, 0x8001, {0x2, 0x1d}}, {0x8001, 0x9, {0x0, 0x3}}, {0x3, 0xc1a, {0x2, 0x3ff}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x5, 0xff, 0x80e, 0x5, 0x18, 'syz0\x00', "82393101ee4dcb9d5224da3e9f9cf0e2cdfdd6f5304cf5a34769a880e1a1e09a", "c1c5ee108e4926edfd410a3c0aa7d93b57ea626f1f68cfbf6ffcff054a6ff920", [{0x3, 0x4134, {0x2, 0x3ff}}, {0x10, 0xffff, {0x3, 0x2fb2}}, {0x6, 0x5, {0x1, 0x130}}, {0x4, 0xffff, {0x0, 0x2}}, {0x515c, 0xb32a, {0x0, 0xe6e8}}, {0x1, 0x0, {0x3, 0x800}}, {0x1, 0x7fff, {0x3, 0x4}}, {0x400, 0x0, {0x1, 0x2}}, {0x7, 0x6, {0x2}}, {0x30, 0x1842, {0x1, 0x8}}, {0x1, 0xbe, {0x2, 0x7}}, {0x3, 0xe2, {0x0, 0x6}}, {0x9, 0x1, {0x3, 0x8}}, {0x2, 0x3, {0x3, 0xbf}}, {0xec, 0x80, {0x2, 0x4}}, {0x10, 0x4d4, {0x3, 0xffff}}, {0x4, 0x7, {0x2, 0x6}}, {0xff59, 0xf1d, {0x3, 0x6}}, {0x7ff, 0x4, {0x1, 0x9}}, {0x100, 0x7, {0x3, 0x2}}, {0x9, 0xf, {0x1, 0x2}}, {0x518, 0xfffe, {0x1, 0xffff}}, {0x9, 0x10, {0x2, 0x8}}, {0x88c, 0xfc01, {0x3, 0x5b1}}, {0x3, 0x8, {0x1, 0xfffffff2}}, {0x800, 0x3, {0x3, 0x2}}, {0x1, 0x7, {0x1, 0x9}}, {0x3, 0x2, {0x2, 0x8}}, {0x89, 0x2, {0x0, 0xfb}}, {0x4, 0xcec, {0x3, 0x4}}, {0x0, 0x1ff, {0x3, 0x6}}, {0x3, 0x5, {0x2}}, {0x6, 0x200, {0x1, 0x337}}, {0x6b, 0x9, {0x0, 0x2}}, {0x6, 0x5, {0x2, 0xf}}, {0xbdb, 0x0, {0x3, 0x9}}, {0x7fff, 0xd675, {0x0, 0x9}}, {0x1670, 0xfa92, {0x0, 0xa39c}}, {0x5, 0x1, {0x2, 0x7}}, {0x9, 0xfff9, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x8, 0x9, 0x3, 0x3, 0x1c, 'syz1\x00', "ffee1019a08e2c19b36dad5fae5f3c38d9ef196a30928e533c88468ba9c56e06", "1ad3f05eac8f999ad999cf74fb889ce7f5584fd24e1d66ba3119b9c0611b5c6f", [{0x7, 0x2, {0x3, 0x8}}, {0xffd9, 0x8, {0x0, 0x6}}, {0x100, 0x1, {0x2}}, {0xfff8, 0x8, {0x0, 0x7}}, {0x8, 0xfff, {0x1, 0x1}}, {0x5, 0x8001, {0x0, 0xa}}, {0x7, 0x3, {0x2, 0x17}}, {0x2, 0x4, {0x0, 0x400}}, {0x2, 0xff, {0x3, 0x2}}, {0xffff, 0x8a, {0x3, 0x44}}, {0x9, 0x1000, {0x2, 0xa}}, {0x3, 0xff, {0x0, 0x8}}, {0x6, 0x3, {0x2, 0x1}}, {0x1, 0x5, {0x1, 0x1}}, {0x2, 0x7, {0x2, 0x6}}, {0x400, 0xb7d, {0x1, 0x7}}, {0x9, 0x5, {0x0, 0x80000000}}, {0x3, 0x81, {0x2, 0x7}}, {0x4, 0x200, {0x2, 0x7fffffff}}, {0x4, 0x7ff, {0x1, 0x8}}, {0x3, 0x6, {0x2, 0x1}}, {0x4, 0x5, {0x2, 0x1}}, {0x1, 0x8, {0x1, 0xfffffff3}}, {0x0, 0x0, {0x0, 0x3}}, {0x1, 0x44cb, {0x0, 0x2}}, {0x1, 0x298, {0x2, 0xd}}, {0x8, 0x2, {0x2, 0x43000}}, {0x68, 0x8, {0x1, 0x1223}}, {0xb3b, 0x100, {0x3, 0x2}}, {0x5, 0x1, {0x2, 0x6}}, {0x1, 0x0, {0x3, 0xfe6b}}, {0xfff7, 0x3, {0x1, 0x2}}, {0x8, 0x3, {0x6, 0x6}}, {0x38, 0xc, {0x0, 0x9}}, {0x1, 0xff00, {0x2, 0x3}}, {0xfefc, 0x6, {0x0, 0x6}}, {0x4, 0xfff9, {0x2, 0x7}}, {0x1, 0x1, {0x1}}, {0x965, 0x1, {0x3, 0x5}}, {0x1, 0x1000, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x68e06b21}, 0x38, 0x38, 0x8, 0xe, 0x1, 'syz1\x00', "036d05240732c839fb472cd8b1c3cef9d7837d583076aa82272fcea1160a1385", "4e970249694f8a7402c7e09f0a4f5edf9676ae53bce4a798d7d7dfce06f43b00", [{0xf000, 0x80, {0x1, 0xac66}}, {0x100, 0x200, {0x1, 0x7}}, {0x6, 0x5, {0x2, 0xa5}}, {0x3, 0xf801, {0x1, 0xfffffffd}}, {0x9, 0x7, {0x3, 0x9}}, {0x1f, 0x8, {0x3}}, {0x3, 0x7ff, {0x3, 0xe7}}, {0x9, 0x4, {0x1, 0x5}}, {0x8, 0x9, {0x3, 0x3ff}}, {0x3, 0x79, {0x1, 0x6}}, {0x6, 0x1, {0x2, 0x2}}, {0xf, 0x81, {0x3}}, {0x6, 0x0, {0x2, 0xf32a}}, {0x7, 0x80ea, {0x0, 0x3a52}}, {0xad0b, 0xf, {0x2, 0xad}}, {0xff18, 0x7ff, {0x3, 0x6a65ba79}}, {0x8, 0xfff7, {0x1, 0x440af0da}}, {0x9, 0x8, {0x0, 0x4}}, {0xff, 0x9, {0x0, 0x364}}, {0x0, 0x8, {0x0, 0x5180}}, {0xd, 0x0, {0x1, 0x57e}}, {0x6, 0x400, {0x3, 0x8}}, {0x5, 0x9e, {0x4, 0xe}}, {0xffff, 0x5, {0x3, 0x49}}, {0x5, 0x101, {0x2, 0x940}}, {0x1, 0x9f2, {0x0, 0x3386}}, {0xffff, 0x4, {0x1, 0x2}}, {0xe, 0x0, {0x0, 0x4a94}}, {0x200, 0x6, {0x1, 0x5}}, {0x9, 0xffff, {0x3, 0x101}}, {0x0, 0x7, {0x2, 0x6}}, {0x7, 0x101, {0x2, 0x3}}, {0x6, 0x57d4, {0x1}}, {0x7ff, 0x4, {0x0, 0x1}}, {0xe, 0x7f, {0x0, 0x2}}, {0x4, 0x2, {0x0, 0x7}}, {0x100, 0x9, {0x1, 0x7ff}}, {0x7a9, 0x8, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x100}}, {0x2, 0x5, {0x1, 0x3}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000140)=0xfff) ioctl$PTP_PEROUT_REQUEST(r0, 0x40043d0d, 0x0) 1.631479074s ago: executing program 6 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x2, 0x0, {0x3e7, 0x5, 0x0, 0x18, 0x2, 0x5c, 0x4}}) 1.63089929s ago: executing program 5 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000f80)}, 0x20) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx4\x00', 0x1208801, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) read$rfkill(r1, &(0x7f0000000180), 0x8) 1.480465431s ago: executing program 6 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000e00)={0x1, [{0x1, 0x360, 0x1, &(0x7f0000000440)="483c80cc44f39beec7cab2bdc6603f651417396074ccd7b44d5df38b9b70b46b6825db709bf2d15b561bbe04dee581862f0bc0da7a9205505215c76fb6d67821b0194cb27af1bdd6feac183aca483abd460fd022b47857532df6bafb9a207ca35ea1a0a01d5a93a9f753ddba"}, {0x1, 0x600, 0x8001, &(0x7f0000000640)="af1bb3f9994dcf10e8bbcaf06a0d2ce21bf7a0f3c8c9adee08ce6077cbd045520aec31d3de4aa9a2831a7541c1d88ea9a75e148f335e815bcb3a89c23400f6102fd4ece450135f807a455b9a738e8704ad90405e0ed7a36128b3239536cfc2765893411a37f7a976941e971025c2be26ee68b316e2f3caaac7a2d38f94ad16c9e68e98ce8eac72e3437af92c591f26bc99c543598102cf949b4ac76bdfd1bf857b815efc3ae809e77f3a636f54f0c8d45bd681faa8a579f7727eb5ce3ffc6221"}, {0x1, 0x2f8, 0x1, &(0x7f0000000700)="cc351cbb6e5a0e7c70f8a364be879d618025b8336b8ffa438a49f6f1ea3d4b04479434fd07d0e82ef513952ec1a099be2103baddf982098aa50a7f845347a1d9699b64b39aececf8b361f7c7ce97a2c34556febd9d7df79168e6683f2198da"}, {0x0, 0x8, 0x1, &(0x7f00000007c0)=' '}, {0x1, 0x310, 0x0, &(0x7f0000000800)="60f6f4c9a7beb8c0519e56345dde3e13357fdf5c530a1e6e95ed965b00ac5d8fab345582554736c77e242d28c2ed41b51e4e42d96ca271047d1dbd956008c2fc4da3efd6d7d0b131f72ad09356ddec9437f6c77f5ac755650a503ef467ca47eedfa0"}, {0x2, 0x3a0, 0x80000001, &(0x7f0000000880)="daa2d6d17f1d09eb006048a30a2408943e05da44ce2985608649418ce9bc3bba3bc4625c7d9a9f641d4f01d2610dfa934112557deca89cc1d28deb9006981149e3db49a246656e63290ede0de658801b82ba385f86aac9503827913662b5a3eaba896de774df657a6bd96f2536877fd21be51957"}, {0x3, 0x408, 0xfffffffd, &(0x7f0000000900)="a9ae869af3e33e14ce06363e419d6b2bd82e011377e5dd043c53a368dd61b71f45a831c9ed8c6b30814973fc48b502cf8c9262f1b3b52c707e81142c26e53b9556949ab3ed7f0cb99b0317859a994c6cef48411cec8eba4445a0ab19e99129226928f59ffd55bd4d59dfbd6d4c044c067a43203b6a7b9ceb2a6bd5c9d76f155c95"}, {0x1, 0x3c8, 0x2, &(0x7f00000009c0)="78f85c1361b1c5c8d12ad97ebbbf41b7fc371c5dd7d0611c30060c4b84de3fd16cc6c85ecec3d7fb240cb975f1aa18a4fa926f9b0eb43141a8f8ad2000c84b315cc8afb6b8402f6ed9bf63cd5652d7fc74c4ee756666697d6a0a84ea5dc26cd761e86e8099b344a212d7be5e8eafa654353737e63b512b25a4"}, {0x1, 0x200, 0x1, &(0x7f0000000a40)="c9d76dadada1f87ad66cde363dcac1c654efb4b1ef57c86d500a590ab24108e95215651d8c4c6cb99041e1db289fc089a324b6389ff760e11cfbfa0b4e425705"}, {0x2, 0x10, 0x71375cd3, &(0x7f0000000a80)="1add"}, {0x1, 0x168, 0x1, &(0x7f0000000ac0)="69dda148ba18a344128661139d54a2703c2219a5d36b2ec9c69a117931490c4f3afff5e8bb8f5184a1d321ca92"}, {0x2, 0x4a8, 0x0, &(0x7f0000000b00)="78bf8a264d182d874a0bad9ba5cd042e1ed75619d434456d8ed23b2ca959f5c30bed53c59bcd8afa8769b4ce5f08a45a3f0f12b6af8850d1e30109e2875a86bdbfd0676ba3fbc4fd865be063e564aaef9447b89d1913818881b69a88ce04eeeb0ffbc2a4b2a75f84c0c545d387ec250fa37e7a5868360ee0efb5d259a11639e7fcdc6e87cdd4702022692eb6727923179bc4074706"}, {0x1, 0x150, 0x1, &(0x7f0000000bc0)="beaa1bdd0b2ee7533a3ba9ba6e2f342e545e7d2e4ea94cfce3fced2d5ce1f0c1c80319662e836450005d"}, {0x0, 0x0, 0x6, &(0x7f0000000c00)}, {0x1, 0x0, 0x1ff, &(0x7f0000000cc0)}, {0x2, 0x7f8, 0x2c4, &(0x7f0000000d00)="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"}]}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) getdents64(r4, &(0x7f0000000240)=""/157, 0x9d) getdents(r4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.479420978s ago: executing program 5 (id=1421): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d0494c20000000000010902240001000000920927ad000000008ad0c4f42a9c3067222900090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x31, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) setgroups(0x0, 0x0) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x4000040) r3 = socket$pppl2tp(0x18, 0x1, 0x1) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(0xffffffffffffffff, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x208, 0x0, 0xffffffff, 0x2c0, 0x128, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x5}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @port=0x4e24, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x28011, r8, 0xe49c3000) 750.372479ms ago: executing program 4 (id=1422): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x80000000, 0x0) ptrace(0x10, r4) r5 = syz_pidfd_open(r4, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040), 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048851}, 0x4800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) syz_emit_vhci(0x0, 0x11) 568.296095ms ago: executing program 6 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x40182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r4, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0xfffffffffffffe5e}]}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r6, 0x114, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(r2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 347.857188ms ago: executing program 4 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2047c85e651847bf, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000280)='mqueue\x00', 0x2000000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x9, 0xffffffffffffffff, 0x1, 0xffff7fff}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) 0s ago: executing program 6 (id=1425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040000000000000008000300", @ANYBLOB="f4d3f0cd98df1edca7d037807cceadac5138c634131c71ab7646d33ec9032d2b6867e164fa7c17f1bc136c49c8a336c36f95a08093eb0ca8", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="00080500000000002000000000000000"], 0x64, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000200)=""/42, 0x2a}], 0x2, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000180)={0x0, 0xfc53, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010c2abd7000fcdbdf250600000006000b00030000000000044000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x20004000) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x448000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r9, @ANYRES64=r1], 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r10, 0x20, &(0x7f0000000780)={&(0x7f0000000480)=""/99, 0x63, 0x0, &(0x7f0000000680)=""/218, 0xda}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) kernel console output (not intermixed with test programs): 412.305912][ T5696] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 412.576677][ T5696] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 413.469059][ T9588] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 413.477003][ T9588] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 413.497356][ T6962] gspca_sonixj: i2c_w8 err -110 [ 413.508647][ T5696] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 413.577768][ T5696] usb 7-1: Product: syz [ 413.586175][ T5696] usb 7-1: SerialNumber: syz [ 413.602748][ T5696] usb 7-1: config 0 descriptor?? [ 413.608321][ T6962] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 413.777580][ T9612] xt_nfacct: accounting object `syz1' does not exist [ 413.986218][ T6962] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 414.156458][ T6962] usb 2-1: Using ep0 maxpacket: 32 [ 414.174795][ T6962] usb 2-1: config index 0 descriptor too short (expected 5222, got 18) [ 414.192235][ T6962] usb 2-1: config 5 has too many interfaces: 172, using maximum allowed: 32 [ 414.217165][ T6962] usb 2-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 414.242826][ T6962] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 172 [ 414.268905][ T6962] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=f1.af [ 414.288236][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.296870][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.308768][ T5696] usb 7-1: USB disconnect, device number 6 [ 414.319367][ T6962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.329167][ T6962] usb 2-1: Product: syz [ 414.335095][ T6962] usb 2-1: Manufacturer: syz [ 414.340997][ T6962] usb 2-1: SerialNumber: syz [ 414.561536][ T9616] syzkaller0: entered promiscuous mode [ 414.577398][ T9616] syzkaller0: entered allmulticast mode [ 414.610737][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 414.637650][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 414.689814][ T6962] usb 2-1: USB disconnect, device number 35 [ 415.028102][ T5696] usb 1-1: USB disconnect, device number 32 [ 415.185224][ T30] audit: type=1400 audit(1784294522.157:1599): avc: denied { listen } for pid=9620 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.357000][ T5793] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 415.578598][ T30] audit: type=1400 audit(1784294522.157:1600): avc: denied { shutdown } for pid=9620 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.642669][ T30] audit: type=1400 audit(1784294522.157:1601): avc: denied { getopt } for pid=9620 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.697002][ T30] audit: type=1400 audit(1784294522.177:1602): avc: denied { wake_alarm } for pid=9620 comm="syz.4.980" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.737287][ T5793] usb 7-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 415.827176][ T5696] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 415.829659][ T5793] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.884485][ T9631] IPVS: length: 30 != 120 [ 415.896560][ T5793] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 415.939187][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.063112][ T5696] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 416.076471][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.078326][ T5793] usb 7-1: config 0 descriptor?? [ 416.120357][ T30] audit: type=1400 audit(1784294523.156:1603): avc: denied { accept } for pid=9629 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 416.257760][ T5696] usb 1-1: config 0 descriptor?? [ 416.275839][ T5696] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 416.342221][ T5711] usb 6-1: USB disconnect, device number 17 [ 416.728194][ T5711] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 416.969184][ T5711] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.978030][ T5711] usb 2-1: config 0 has no interface number 0 [ 416.987063][ T5711] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 416.997504][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.005697][ T5711] usb 2-1: Product: syz [ 417.014397][ T5711] usb 2-1: Manufacturer: syz [ 417.022271][ T5711] usb 2-1: SerialNumber: syz [ 417.100906][ T9644] xt_nfacct: accounting object `syz1' does not exist [ 417.534546][ T5711] usb 2-1: config 0 descriptor?? [ 417.658030][ T6962] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 417.760123][ T5711] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 417.774925][ T5711] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.785672][ T5711] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 417.794029][ T5711] usb 2-1: media controller created [ 417.819329][ T6962] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 417.832317][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.841068][ T6962] usb 6-1: config 1 interface 0 has no altsetting 0 [ 417.861655][ T6962] usb 6-1: string descriptor 0 read error: -22 [ 417.869747][ T6962] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.880333][ T6962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.974850][ T30] audit: type=1400 audit(1784294525.005:1604): avc: denied { getopt } for pid=9639 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.990778][ T5696] gspca_stv06xx: I2C: Read error writing address: -71 [ 418.014186][ T5696] usb 1-1: USB disconnect, device number 33 [ 418.315046][ T6962] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 418.341678][ T6962] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.000A/input/input22 [ 418.458081][ T6962] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 418.724158][ T5721] usb 7-1: USB disconnect, device number 7 [ 418.768570][ T9656] netlink: 'syz.0.989': attribute type 4 has an invalid length. [ 418.803332][ T5814] usb 6-1: USB disconnect, device number 18 [ 418.900886][ T5711] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 418.951734][ T9658] syzkaller0: entered promiscuous mode [ 418.969282][ T9658] syzkaller0: entered allmulticast mode [ 419.004980][ T5711] usb 2-1: USB disconnect, device number 36 [ 419.035877][ T9658] tipc: Started in network mode [ 419.049010][ T9658] tipc: Node identity f6ed7f079dcf, cluster identity 4711 [ 419.085000][ T9658] tipc: Enabled bearer , priority 0 [ 419.591457][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.992'. [ 419.726577][ T9657] tipc: Resetting bearer [ 419.750470][ T9657] tipc: Disabling bearer [ 420.300940][ T9680] netlink: 'syz.5.995': attribute type 21 has an invalid length. [ 420.358262][ T9680] netlink: 128 bytes leftover after parsing attributes in process `syz.5.995'. [ 420.429952][ T9680] netlink: 'syz.5.995': attribute type 5 has an invalid length. [ 420.513423][ T9680] netlink: 'syz.5.995': attribute type 6 has an invalid length. [ 420.579001][ T9680] netlink: 3 bytes leftover after parsing attributes in process `syz.5.995'. [ 421.265955][ T9698] FAULT_INJECTION: forcing a failure. [ 421.265955][ T9698] name failslab, interval 1, probability 0, space 0, times 0 [ 421.312824][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.4.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.312853][ T9698] Tainted: [L]=SOFTLOCKUP [ 421.312858][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 421.312864][ T9698] Call Trace: [ 421.312868][ T9698] [ 421.312873][ T9698] dump_stack_lvl+0x100/0x190 [ 421.312893][ T9698] should_fail_ex.cold+0x5/0xa [ 421.312907][ T9698] should_failslab+0xc2/0x120 [ 421.312920][ T9698] __kmalloc_noprof+0xfc/0x820 [ 421.312931][ T9698] ? sk_prot_alloc+0x10b/0x2a0 [ 421.312947][ T9698] sk_prot_alloc+0x10b/0x2a0 [ 421.312961][ T9698] sk_alloc+0x36/0xe80 [ 421.312972][ T9698] bpf_prog_test_run_skb+0x4db/0x3540 [ 421.312990][ T9698] ? find_held_lock+0x2b/0x80 [ 421.313006][ T9698] ? __fget_files+0x1f1/0x3d0 [ 421.313025][ T9698] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 421.313041][ T9698] ? fput+0x79/0x100 [ 421.313054][ T9698] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 421.313068][ T9698] __sys_bpf+0x2a12/0x4e80 [ 421.313088][ T9698] ? __pfx___sys_bpf+0x10/0x10 [ 421.313104][ T9698] ? find_held_lock+0x2b/0x80 [ 421.313118][ T9698] ? get_pid_task+0xfc/0x250 [ 421.313134][ T9698] ? get_pid_task+0xfc/0x250 [ 421.313153][ T9698] ? find_held_lock+0x2b/0x80 [ 421.313171][ T9698] ? rcu_read_lock_any_held+0x6a/0xa0 [ 421.313187][ T9698] ? find_held_lock+0x2b/0x80 [ 421.313201][ T9698] ? ksys_write+0x190/0x250 [ 421.313215][ T9698] ? ksys_write+0x190/0x250 [ 421.313239][ T9698] ? fput+0x79/0x100 [ 421.313251][ T9698] ? __x64_sys_bpf+0xce/0x140 [ 421.313260][ T9698] __x64_sys_bpf+0xce/0x140 [ 421.313272][ T9698] ? do_syscall_64+0x90/0x870 [ 421.313289][ T9698] do_syscall_64+0x115/0x870 [ 421.313303][ T9698] ? clear_bhb_loop+0x40/0x90 [ 421.313316][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.313327][ T9698] RIP: 0033:0x7f3e3199de99 [ 421.313336][ T9698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.313347][ T9698] RSP: 002b:00007f3e3281d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.313358][ T9698] RAX: ffffffffffffffda RBX: 00007f3e31c25fa0 RCX: 00007f3e3199de99 [ 421.313365][ T9698] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 421.313371][ T9698] RBP: 00007f3e3281d090 R08: 0000000000000000 R09: 0000000000000000 [ 421.313377][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.313388][ T9698] R13: 00007f3e31c26038 R14: 00007f3e31c25fa0 R15: 00007ffcd2e81558 [ 421.313402][ T9698] [ 421.737123][ T9702] FAULT_INJECTION: forcing a failure. [ 421.737123][ T9702] name failslab, interval 1, probability 0, space 0, times 0 [ 421.829747][ T9702] CPU: 1 UID: 0 PID: 9702 Comm: syz.1.1005 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.829768][ T9702] Tainted: [L]=SOFTLOCKUP [ 421.829771][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 421.829778][ T9702] Call Trace: [ 421.829782][ T9702] [ 421.829787][ T9702] dump_stack_lvl+0x100/0x190 [ 421.829804][ T9702] should_fail_ex.cold+0x5/0xa [ 421.829818][ T9702] should_failslab+0xc2/0x120 [ 421.829833][ T9702] __kmalloc_cache_noprof+0x91/0x6c0 [ 421.829850][ T9702] ? __io_queue_proc+0x2c2/0x900 [ 421.829872][ T9702] __io_queue_proc+0x2c2/0x900 [ 421.829886][ T9702] ? __io_queue_proc+0x16c/0x900 [ 421.829900][ T9702] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 421.829914][ T9702] snd_seq_pool_poll_wait+0x5b/0x160 [ 421.829931][ T9702] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 421.829945][ T9702] snd_seq_oss_poll+0x17d/0x1d0 [ 421.829961][ T9702] odev_poll+0x4a/0x90 [ 421.829974][ T9702] __io_arm_poll_handler+0x44b/0x1270 [ 421.829988][ T9702] ? __pfx_odev_poll+0x10/0x10 [ 421.830008][ T9702] io_poll_add+0xe0/0x1f0 [ 421.830028][ T9702] ? __pfx_io_poll_add+0x10/0x10 [ 421.830048][ T9702] ? find_held_lock+0x2b/0x80 [ 421.830069][ T9702] ? __fget_files+0x215/0x3d0 [ 421.830093][ T9702] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 421.830119][ T9702] ? __fget_files+0x21f/0x3d0 [ 421.830143][ T9702] __io_issue_sqe+0xe8/0x7a0 [ 421.830166][ T9702] io_issue_sqe+0x88/0x1540 [ 421.830191][ T9702] io_submit_sqes+0xb17/0x2480 [ 421.830226][ T9702] __do_sys_io_uring_enter+0xa88/0x1b10 [ 421.830252][ T9702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 421.830281][ T9702] ? __fget_files+0x21f/0x3d0 [ 421.830308][ T9702] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 421.830337][ T9702] ? xfd_validate_state+0x129/0x190 [ 421.830368][ T9702] do_syscall_64+0x115/0x870 [ 421.830395][ T9702] ? clear_bhb_loop+0x40/0x90 [ 421.830417][ T9702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.830435][ T9702] RIP: 0033:0x7f766dd9de99 [ 421.830450][ T9702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.830467][ T9702] RSP: 002b:00007f766ec33028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 421.830485][ T9702] RAX: ffffffffffffffda RBX: 00007f766e025fa0 RCX: 00007f766dd9de99 [ 421.830497][ T9702] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 421.830507][ T9702] RBP: 00007f766ec33090 R08: 0000000000000000 R09: 0000000000000000 [ 421.830517][ T9702] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 421.830528][ T9702] R13: 00007f766e026038 R14: 00007f766e025fa0 R15: 00007ffeec112df8 [ 421.830553][ T9702] [ 423.672081][ T5711] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 423.831406][ T5711] usb 7-1: device descriptor read/64, error -71 [ 424.311342][ T5711] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 424.359583][ T30] audit: type=1400 audit(1784294531.390:1605): avc: denied { read } for pid=9735 comm="syz.4.1014" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.375935][ T9741] FAULT_INJECTION: forcing a failure. [ 424.375935][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 424.419732][ T9742] syzkaller0: entered promiscuous mode [ 424.444321][ T9742] syzkaller0: entered allmulticast mode [ 424.450789][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.1.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.450816][ T9741] Tainted: [L]=SOFTLOCKUP [ 424.450823][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 424.450833][ T9741] Call Trace: [ 424.450838][ T9741] [ 424.450844][ T9741] dump_stack_lvl+0x100/0x190 [ 424.450868][ T9741] should_fail_ex.cold+0x5/0xa [ 424.450890][ T9741] should_failslab+0xc2/0x120 [ 424.450910][ T9741] __kmalloc_noprof+0xfc/0x820 [ 424.450928][ T9741] ? __pfx_dynamic_dname+0x10/0x10 [ 424.450950][ T9741] ? tomoyo_encode2+0xfb/0x3c0 [ 424.450978][ T9741] tomoyo_encode2+0xfb/0x3c0 [ 424.451005][ T9741] tomoyo_encode+0x29/0x50 [ 424.451029][ T9741] tomoyo_realpath_from_path+0x18c/0x690 [ 424.451055][ T9741] tomoyo_path_number_perm+0x23c/0x580 [ 424.451074][ T9741] ? tomoyo_path_number_perm+0x22e/0x580 [ 424.451094][ T9741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.451135][ T9741] ? find_held_lock+0x2b/0x80 [ 424.451156][ T9741] ? __fget_files+0x215/0x3d0 [ 424.451178][ T9741] ? hook_file_ioctl_common+0x140/0x440 [ 424.451192][ T9741] ? __fget_files+0x215/0x3d0 [ 424.451218][ T9741] ? __fget_files+0x21f/0x3d0 [ 424.451243][ T9741] security_file_ioctl+0xd3/0x230 [ 424.451265][ T9741] __x64_sys_ioctl+0xb7/0x210 [ 424.451286][ T9741] do_syscall_64+0x115/0x870 [ 424.451311][ T9741] ? clear_bhb_loop+0x40/0x90 [ 424.451330][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.451345][ T9741] RIP: 0033:0x7f766dd9de99 [ 424.451359][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.451373][ T9741] RSP: 002b:00007f766ec33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.451389][ T9741] RAX: ffffffffffffffda RBX: 00007f766e025fa0 RCX: 00007f766dd9de99 [ 424.451398][ T9741] RDX: 00002000000003c0 RSI: 00000000c0383e04 RDI: 0000000000000007 [ 424.451407][ T9741] RBP: 00007f766ec33090 R08: 0000000000000000 R09: 0000000000000000 [ 424.451417][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.451425][ T9741] R13: 00007f766e026038 R14: 00007f766e025fa0 R15: 00007ffeec112df8 [ 424.451446][ T9741] [ 424.451816][ T9741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.682551][ T5711] usb 7-1: device descriptor read/64, error -71 [ 424.723924][ T9744] tipc: Enabled bearer , priority 0 [ 424.760147][ T9742] tipc: Started in network mode [ 424.768590][ T9742] tipc: Node identity 4e70f6dfd934, cluster identity 4711 [ 424.779239][ T9742] tipc: Enabled bearer , priority 0 [ 424.789189][ T9745] syzkaller0: entered promiscuous mode [ 424.808745][ T9745] syzkaller0: entered allmulticast mode [ 424.841818][ T5711] usb usb7-port1: attempt power cycle [ 424.872364][ T5696] IPVS: starting estimator thread 0... [ 424.879930][ T9747] IPVS: fo: FWM 3 0x00000003 - no destination available [ 424.911003][ T9742] tipc: Resetting bearer [ 424.947924][ T9739] tipc: Resetting bearer [ 424.969306][ T9748] IPVS: using max 43 ests per chain, 103200 per kthread [ 425.028417][ T9739] tipc: Disabling bearer [ 425.127598][ T9735] tipc: Resetting bearer [ 425.171121][ T9735] tipc: Disabling bearer [ 425.173818][ T5721] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 425.192375][ T5711] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 425.456304][ T5711] usb 7-1: device descriptor read/8, error -71 [ 425.614974][ T5721] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.724107][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.753322][ T5721] usb 2-1: Product: syz [ 425.758178][ T5721] usb 2-1: Manufacturer: syz [ 426.309255][ T5711] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 426.351412][ T30] audit: type=1400 audit(1784294533.329:1606): avc: denied { map } for pid=9757 comm="syz.4.1020" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 426.512084][ T5711] usb 7-1: device descriptor read/8, error -71 [ 426.663400][ T5711] usb usb7-port1: unable to enumerate USB device [ 426.674230][ T5721] usb 2-1: SerialNumber: syz [ 426.680040][ T9771] FAULT_INJECTION: forcing a failure. [ 426.680040][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 426.703745][ T5721] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 426.733833][ T5814] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 426.788727][ T9771] CPU: 0 UID: 0 PID: 9771 Comm: syz.4.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.788761][ T9771] Tainted: [L]=SOFTLOCKUP [ 426.788768][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 426.788778][ T9771] Call Trace: [ 426.788784][ T9771] [ 426.788792][ T9771] dump_stack_lvl+0x100/0x190 [ 426.788820][ T9771] should_fail_ex.cold+0x5/0xa [ 426.788843][ T9771] should_failslab+0xc2/0x120 [ 426.788871][ T9771] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 426.788892][ T9771] ? __alloc_skb+0x140/0x710 [ 426.788914][ T9771] __alloc_skb+0x140/0x710 [ 426.788931][ T9771] ? __pfx___alloc_skb+0x10/0x10 [ 426.788956][ T9771] tcp_stream_alloc_skb+0x34/0x660 [ 426.788978][ T9771] tcp_sendmsg_locked+0x13b2/0x44d0 [ 426.789005][ T9771] ? __lock_acquire+0x49f/0x1a40 [ 426.789033][ T9771] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 426.789056][ T9771] ? do_raw_spin_lock+0x128/0x260 [ 426.789080][ T9771] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 426.789108][ T9771] ? __local_bh_enable_ip+0x9e/0x120 [ 426.789134][ T9771] tcp_sendmsg+0x2e/0x50 [ 426.789152][ T9771] ? __pfx_tcp_sendmsg+0x10/0x10 [ 426.789173][ T9771] inet_sendmsg+0xb9/0x140 [ 426.789193][ T9771] __sys_sendto+0x453/0x4e0 [ 426.789219][ T9771] ? __pfx_inet_sendmsg+0x10/0x10 [ 426.789238][ T9771] ? __pfx___sys_sendto+0x10/0x10 [ 426.789272][ T9771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 426.789311][ T9771] ? ksys_write+0x1ac/0x250 [ 426.789337][ T9771] ? __pfx_ksys_write+0x10/0x10 [ 426.789363][ T9771] __x64_sys_sendto+0xe0/0x1c0 [ 426.789390][ T9771] ? do_syscall_64+0x90/0x870 [ 426.789416][ T9771] ? lockdep_hardirqs_on+0x78/0x100 [ 426.789441][ T9771] do_syscall_64+0x115/0x870 [ 426.789466][ T9771] ? clear_bhb_loop+0x40/0x90 [ 426.789488][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.789506][ T9771] RIP: 0033:0x7f3e3199de99 [ 426.789521][ T9771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.789538][ T9771] RSP: 002b:00007f3e3281d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 426.789556][ T9771] RAX: ffffffffffffffda RBX: 00007f3e31c25fa0 RCX: 00007f3e3199de99 [ 426.789567][ T9771] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 426.789578][ T9771] RBP: 00007f3e3281d090 R08: 0000000000000000 R09: 0000000000000000 [ 426.789588][ T9771] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 426.789598][ T9771] R13: 00007f3e31c26038 R14: 00007f3e31c25fa0 R15: 00007ffcd2e81558 [ 426.789623][ T9771] [ 428.491041][ T5721] usb 2-1: USB disconnect, device number 37 [ 428.642080][ T5696] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 428.804166][ T5696] usb 7-1: Using ep0 maxpacket: 8 [ 428.819774][ T5696] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 428.834089][ T5696] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.860425][ T5696] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.878280][ T5696] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.902438][ T5696] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.924005][ T5696] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.946737][ T5696] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.177390][ T5696] usb 7-1: GET_CAPABILITIES returned 0 [ 429.184212][ T9795] 8021q: VLANs not supported on ipvlan0 [ 429.195595][ T5696] usbtmc 7-1:16.0: can't read capabilities [ 429.214328][ T5814] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 429.275807][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'. [ 429.305966][ T5814] ath9k_htc: Failed to initialize the device [ 429.353440][ T5721] usb 2-1: ath9k_htc: USB layer deinitialized [ 429.367915][ T30] audit: type=1400 audit(1784294536.397:1607): avc: denied { create } for pid=9788 comm="syz.0.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 429.414940][ T9778] FAULT_INJECTION: forcing a failure. [ 429.414940][ T9778] name failslab, interval 1, probability 0, space 0, times 0 [ 429.513255][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.6.1024 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.513284][ T9778] Tainted: [L]=SOFTLOCKUP [ 429.513289][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 429.513298][ T9778] Call Trace: [ 429.513303][ T9778] [ 429.513307][ T9778] dump_stack_lvl+0x100/0x190 [ 429.513325][ T9778] should_fail_ex.cold+0x5/0xa [ 429.513339][ T9778] should_failslab+0xc2/0x120 [ 429.513353][ T9778] __kmalloc_noprof+0xfc/0x820 [ 429.513366][ T9778] ? usb_alloc_urb+0x66/0xa0 [ 429.513382][ T9778] usb_alloc_urb+0x66/0xa0 [ 429.513397][ T9778] usbtmc_create_urb+0x13/0x150 [ 429.513410][ T9778] usbtmc_generic_read+0x3dc/0x1810 [ 429.513427][ T9778] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 429.513439][ T9778] ? __might_fault+0xc5/0x140 [ 429.513457][ T9778] ? __might_fault+0xc5/0x140 [ 429.513478][ T9778] usbtmc_ioctl+0x1203/0x2840 [ 429.513490][ T9778] ? do_vfs_ioctl+0x226/0x13e0 [ 429.513505][ T9778] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 429.513518][ T9778] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 429.513529][ T9778] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 429.513550][ T9778] ? __fget_files+0x215/0x3d0 [ 429.513570][ T9778] ? selinux_file_ioctl+0x13b/0x290 [ 429.513584][ T9778] ? selinux_file_ioctl+0xb6/0x290 [ 429.513600][ T9778] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 429.513612][ T9778] __x64_sys_ioctl+0x18e/0x210 [ 429.513628][ T9778] do_syscall_64+0x115/0x870 [ 429.513643][ T9778] ? clear_bhb_loop+0x40/0x90 [ 429.513657][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.513668][ T9778] RIP: 0033:0x7ff18a99de99 [ 429.513677][ T9778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.513687][ T9778] RSP: 002b:00007ff188bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.513698][ T9778] RAX: ffffffffffffffda RBX: 00007ff18ac25fa0 RCX: 00007ff18a99de99 [ 429.513705][ T9778] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 429.513711][ T9778] RBP: 00007ff188bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.513717][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.513723][ T9778] R13: 00007ff18ac26038 R14: 00007ff18ac25fa0 R15: 00007fffad6c23c8 [ 429.513737][ T9778] [ 429.824726][ T9801] bridge_slave_0: entered promiscuous mode [ 429.868359][ T9807] FAULT_INJECTION: forcing a failure. [ 429.868359][ T9807] name failslab, interval 1, probability 0, space 0, times 0 [ 429.881954][ T5704] usb 7-1: USB disconnect, device number 12 [ 429.883870][ T9807] CPU: 0 UID: 60929 PID: 9807 Comm: syz.5.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.883896][ T9807] Tainted: [L]=SOFTLOCKUP [ 429.883901][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 429.883909][ T9807] Call Trace: [ 429.883915][ T9807] [ 429.883921][ T9807] dump_stack_lvl+0x100/0x190 [ 429.883945][ T9807] should_fail_ex.cold+0x5/0xa [ 429.883965][ T9807] should_failslab+0xc2/0x120 [ 429.883983][ T9807] kmem_cache_alloc_noprof+0x91/0x6a0 [ 429.883999][ T9807] ? trace_kmem_cache_alloc+0xdd/0x100 [ 429.884017][ T9807] ? security_file_alloc+0x34/0x2c0 [ 429.884046][ T9807] security_file_alloc+0x34/0x2c0 [ 429.884067][ T9807] init_file+0x95/0x480 [ 429.884084][ T9807] alloc_empty_file+0x79/0x1c0 [ 429.884102][ T9807] path_openat+0xe7/0x4280 [ 429.884115][ T9807] ? __kasan_slab_alloc+0x89/0x90 [ 429.884131][ T9807] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 429.884145][ T9807] ? do_getname+0x35/0x390 [ 429.884161][ T9807] ? do_sys_openat2+0xc7/0x1e0 [ 429.884176][ T9807] ? __x64_sys_openat+0x12d/0x210 [ 429.884191][ T9807] ? do_syscall_64+0x115/0x870 [ 429.884212][ T9807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.884234][ T9807] ? __pfx_path_openat+0x10/0x10 [ 429.884254][ T9807] do_file_open+0x20e/0x430 [ 429.884269][ T9807] ? __pfx_do_file_open+0x10/0x10 [ 429.884298][ T9807] ? alloc_fd+0x471/0x7a0 [ 429.884315][ T9807] ? do_getname+0x191/0x390 [ 429.884334][ T9807] do_sys_openat2+0x10f/0x1e0 [ 429.884350][ T9807] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.884368][ T9807] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.884392][ T9807] ? __fget_files+0x21f/0x3d0 [ 429.884417][ T9807] __x64_sys_openat+0x12d/0x210 [ 429.884435][ T9807] ? __pfx___x64_sys_openat+0x10/0x10 [ 429.884451][ T9807] ? ksys_write+0x1ac/0x250 [ 429.884478][ T9807] do_syscall_64+0x115/0x870 [ 429.884498][ T9807] ? clear_bhb_loop+0x40/0x90 [ 429.884516][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.884535][ T9807] RIP: 0033:0x7fb54439de99 [ 429.884549][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.884563][ T9807] RSP: 002b:00007fb5425f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.884579][ T9807] RAX: ffffffffffffffda RBX: 00007fb544625fa0 RCX: 00007fb54439de99 [ 429.884589][ T9807] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 429.884599][ T9807] RBP: 00007fb5425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.884608][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.884617][ T9807] R13: 00007fb544626038 R14: 00007fb544625fa0 R15: 00007ffcea39f348 [ 429.884638][ T9807] [ 430.544446][ T5721] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 430.561605][ T9814] vlan2: entered promiscuous mode [ 430.573625][ T9814] macvlan0: entered promiscuous mode [ 430.700143][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 430.729383][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.771844][ T5721] usb 2-1: Product: syz [ 430.782651][ T5721] usb 2-1: Manufacturer: syz [ 430.810658][ T5721] usb 2-1: SerialNumber: syz [ 430.854656][ T5721] usb 2-1: config 0 descriptor?? [ 430.938834][ T9822] FAULT_INJECTION: forcing a failure. [ 430.938834][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.969229][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.0.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.969257][ T9822] Tainted: [L]=SOFTLOCKUP [ 430.969263][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 430.969272][ T9822] Call Trace: [ 430.969277][ T9822] [ 430.969283][ T9822] dump_stack_lvl+0x100/0x190 [ 430.969307][ T9822] should_fail_ex.cold+0x5/0xa [ 430.969328][ T9822] _copy_to_user+0x32/0xd0 [ 430.969351][ T9822] simple_read_from_buffer+0xcb/0x170 [ 430.969380][ T9822] proc_fail_nth_read+0x1af/0x230 [ 430.969411][ T9822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.969436][ T9822] ? rw_verify_area+0xce/0x6d0 [ 430.969455][ T9822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.969477][ T9822] vfs_read+0x1e4/0xb40 [ 430.969502][ T9822] ? __pfx_vfs_read+0x10/0x10 [ 430.969531][ T9822] ? __fget_files+0x215/0x3d0 [ 430.969563][ T9822] ? __fget_files+0x21f/0x3d0 [ 430.969601][ T9822] ksys_read+0x12a/0x250 [ 430.969623][ T9822] ? __pfx_ksys_read+0x10/0x10 [ 430.969654][ T9822] do_syscall_64+0x115/0x870 [ 430.969679][ T9822] ? clear_bhb_loop+0x40/0x90 [ 430.969701][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.969719][ T9822] RIP: 0033:0x7f3e7895e6ce [ 430.969742][ T9822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.969759][ T9822] RSP: 002b:00007f3e7989afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.969777][ T9822] RAX: ffffffffffffffda RBX: 00007f3e7989b6c0 RCX: 00007f3e7895e6ce [ 430.969788][ T9822] RDX: 000000000000000f RSI: 00007f3e7989b0a0 RDI: 0000000000000004 [ 430.969798][ T9822] RBP: 00007f3e7989b090 R08: 0000000000000000 R09: 0000000000000000 [ 430.969808][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.969818][ T9822] R13: 00007f3e78c26038 R14: 00007f3e78c25fa0 R15: 00007fff5f223058 [ 430.969841][ T9822] [ 431.180998][ T5721] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 431.225525][ T30] audit: type=1326 audit(1784294538.256:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.6.1036" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff18a99de99 code=0x0 [ 431.564959][ T5696] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 431.730374][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.759491][ T9830] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 431.766202][ T9830] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 431.774557][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.787508][ T5696] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.28 [ 431.797886][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.813773][ T9830] vhci_hcd vhci_hcd.0: Device attached [ 431.821381][ T5696] usb 1-1: config 0 descriptor?? [ 431.832625][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 431.998320][ T30] audit: type=1400 audit(1784294539.015:1609): avc: denied { write } for pid=9815 comm="syz.6.1036" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 432.534089][ T5696] usbhid 1-1:0.0: can't add hid device: -71 [ 432.672270][ T5721] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 432.803024][ T5721] usb 2-1: USB disconnect, device number 38 [ 432.892712][ T5696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 432.910249][ T5696] usb 1-1: USB disconnect, device number 34 [ 432.916429][ T30] audit: type=1400 audit(1784294539.025:1610): avc: denied { open } for pid=9815 comm="syz.6.1036" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 432.955365][ T30] audit: type=1400 audit(1784294539.025:1611): avc: denied { ioctl } for pid=9815 comm="syz.6.1036" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 432.990315][ T30] audit: type=1400 audit(1784294539.175:1612): avc: denied { read } for pid=9824 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 433.045766][ T5697] usb 46-1: SetAddress Request (2) to port 0 [ 433.054196][ T5697] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 433.134540][ T9831] vhci_hcd: connection reset by peer [ 433.152952][ T13] vhci_hcd vhci_hcd.6: stop threads [ 433.175795][ T13] vhci_hcd vhci_hcd.6: release socket [ 433.183391][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 433.190371][ T9839] FAULT_INJECTION: forcing a failure. [ 433.190371][ T9839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.278076][ T9839] CPU: 0 UID: 0 PID: 9839 Comm: syz.0.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.278107][ T9839] Tainted: [L]=SOFTLOCKUP [ 433.278113][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 433.278123][ T9839] Call Trace: [ 433.278129][ T9839] [ 433.278136][ T9839] dump_stack_lvl+0x100/0x190 [ 433.278164][ T9839] should_fail_ex.cold+0x5/0xa [ 433.278185][ T9839] _copy_from_user+0x2e/0xd0 [ 433.278208][ T9839] copy_msghdr_from_user+0x9f/0x4c0 [ 433.278235][ T9839] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 433.278269][ T9839] ___sys_sendmsg+0x106/0x1e0 [ 433.278294][ T9839] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.278314][ T9839] ? __lock_acquire+0x49f/0x1a40 [ 433.278333][ T9839] ? get_pid_task+0x106/0x250 [ 433.278383][ T9839] __sys_sendmsg+0x160/0x210 [ 433.278402][ T9839] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.278433][ T9839] do_syscall_64+0x115/0x870 [ 433.278459][ T9839] ? clear_bhb_loop+0x40/0x90 [ 433.278480][ T9839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.278498][ T9839] RIP: 0033:0x7f3e7899de99 [ 433.278513][ T9839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.278529][ T9839] RSP: 002b:00007f3e7987a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.278547][ T9839] RAX: ffffffffffffffda RBX: 00007f3e78c26090 RCX: 00007f3e7899de99 [ 433.278564][ T9839] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 433.278574][ T9839] RBP: 00007f3e7987a090 R08: 0000000000000000 R09: 0000000000000000 [ 433.278585][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.278594][ T9839] R13: 00007f3e78c26128 R14: 00007f3e78c26090 R15: 00007fff5f223058 [ 433.278618][ T9839] [ 433.370244][ T9838] syzkaller0: entered promiscuous mode [ 433.504922][ T9838] syzkaller0: entered allmulticast mode [ 433.776432][ T5814] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 433.978598][ T5814] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 434.022959][ T5814] usb 2-1: config 1 interface 0 has no altsetting 0 [ 434.040725][ T5814] usb 2-1: string descriptor 0 read error: -22 [ 434.076649][ T5814] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.114456][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.761565][ T5814] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 434.800860][ T5814] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.000B/input/input23 [ 435.175942][ T5814] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 435.328124][ T5814] usb 2-1: USB disconnect, device number 39 [ 437.173233][ T9854] syzkaller0: entered promiscuous mode [ 437.179170][ T9854] syzkaller0: entered allmulticast mode [ 437.195289][ T9867] netlink: 'syz.6.1048': attribute type 4 has an invalid length. [ 437.376256][ T9878] FAULT_INJECTION: forcing a failure. [ 437.376256][ T9878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.398006][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.1.1050 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.398035][ T9878] Tainted: [L]=SOFTLOCKUP [ 437.398041][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 437.398052][ T9878] Call Trace: [ 437.398058][ T9878] [ 437.398065][ T9878] dump_stack_lvl+0x100/0x190 [ 437.398092][ T9878] should_fail_ex.cold+0x5/0xa [ 437.398113][ T9878] _copy_from_user+0x2e/0xd0 [ 437.398135][ T9878] copy_msghdr_from_user+0x9f/0x4c0 [ 437.398160][ T9878] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 437.398195][ T9878] ___sys_sendmsg+0x106/0x1e0 [ 437.398219][ T9878] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.398241][ T9878] ? __lock_acquire+0x49f/0x1a40 [ 437.398261][ T9878] ? get_pid_task+0x106/0x250 [ 437.398318][ T9878] __sys_sendmsg+0x160/0x210 [ 437.398338][ T9878] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.398370][ T9878] do_syscall_64+0x115/0x870 [ 437.398397][ T9878] ? clear_bhb_loop+0x40/0x90 [ 437.398419][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.398438][ T9878] RIP: 0033:0x7f766dd9de99 [ 437.398453][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.398470][ T9878] RSP: 002b:00007f766ec33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.398488][ T9878] RAX: ffffffffffffffda RBX: 00007f766e025fa0 RCX: 00007f766dd9de99 [ 437.398500][ T9878] RDX: 0000000000008000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 437.398510][ T9878] RBP: 00007f766ec33090 R08: 0000000000000000 R09: 0000000000000000 [ 437.398520][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.398531][ T9878] R13: 00007f766e026038 R14: 00007f766e025fa0 R15: 00007ffeec112df8 [ 437.398554][ T9878] [ 438.178623][ T5697] usb 46-1: device descriptor read/8, error -110 [ 438.598552][ T9887] use of bytesused == 0 is deprecated and will be removed in the future, [ 438.607109][ T9887] use the actual size instead. [ 439.144112][ T5697] usb usb46-port1: attempt power cycle [ 439.168746][ T5814] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 439.258987][ T9896] CIFS: VFS: UNC: path must begin with // or \\ [ 439.265260][ T9896] Malformed UNC in devname [ 439.265260][ T9896] [ 439.269257][ T5726] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 439.279704][ T9896] CIFS: VFS: Malformed UNC in devname [ 439.290660][ T30] audit: type=1400 audit(1784294546.281:1613): avc: denied { getopt } for pid=9894 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 439.441856][ T5814] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 439.523117][ T5726] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 439.623051][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.800417][ T5814] usb 2-1: config 1 interface 0 has no altsetting 0 [ 439.811903][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.832009][ T5814] usb 2-1: string descriptor 0 read error: -22 [ 439.936779][ T5726] usb 1-1: config 0 descriptor?? [ 439.943684][ T5814] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.957394][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.103482][ T5697] usb usb46-port1: unable to enumerate USB device [ 440.367822][ T5726] usb 1-1: Cannot read MAC address [ 440.431802][ T9910] FAULT_INJECTION: forcing a failure. [ 440.431802][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.444962][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.6.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.444989][ T9910] Tainted: [L]=SOFTLOCKUP [ 440.444996][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 440.445005][ T9910] Call Trace: [ 440.445011][ T9910] [ 440.445018][ T9910] dump_stack_lvl+0x100/0x190 [ 440.445046][ T9910] should_fail_ex.cold+0x5/0xa [ 440.445068][ T9910] _copy_from_user+0x2e/0xd0 [ 440.445091][ T9910] mptcp_setsockopt+0x1e5b/0x3300 [ 440.445113][ T9910] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 440.445143][ T9910] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 440.445170][ T9910] ? selinux_socket_setsockopt+0x6a/0x80 [ 440.445191][ T9910] ? sock_common_setsockopt+0x2e/0xf0 [ 440.445212][ T9910] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 440.445235][ T9910] do_sock_setsockopt+0xf3/0x1d0 [ 440.445259][ T9910] __sys_setsockopt+0x195/0x220 [ 440.445281][ T9910] __x64_sys_setsockopt+0xbd/0x160 [ 440.445297][ T9910] ? do_syscall_64+0x90/0x870 [ 440.445322][ T9910] ? lockdep_hardirqs_on+0x78/0x100 [ 440.445347][ T9910] do_syscall_64+0x115/0x870 [ 440.445371][ T9910] ? clear_bhb_loop+0x40/0x90 [ 440.445393][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.445410][ T9910] RIP: 0033:0x7ff18a99de99 [ 440.445425][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.445441][ T9910] RSP: 002b:00007ff188bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 440.445460][ T9910] RAX: ffffffffffffffda RBX: 00007ff18ac26180 RCX: 00007ff18a99de99 [ 440.445471][ T9910] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000006 [ 440.445482][ T9910] RBP: 00007ff188bb4090 R08: 0000000000000004 R09: 0000000000000000 [ 440.445492][ T9910] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 440.445503][ T9910] R13: 00007ff18ac26218 R14: 00007ff18ac26180 R15: 00007fffad6c23c8 [ 440.445527][ T9910] [ 440.682734][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1060'. [ 440.753075][ T5814] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 440.766463][ T5814] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.000C/input/input24 [ 440.907034][ T5726] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 440.947777][ T5814] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 440.996455][ T5726] usb 1-1: USB disconnect, device number 35 [ 441.030243][ T5814] usb 2-1: USB disconnect, device number 40 [ 441.256122][ T9913] fido_id[9913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 441.520699][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 441.822198][ T9925] syzkaller0: entered promiscuous mode [ 441.827911][ T9925] syzkaller0: entered allmulticast mode [ 442.680695][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1065'. [ 443.732708][ T30] audit: type=1400 audit(1784294550.759:1614): avc: denied { mount } for pid=9927 comm="syz.4.1065" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 444.921642][ T5704] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 445.427838][ T5704] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 445.921821][ T5704] usb 6-1: config 127 has no interface number 0 [ 446.007720][ T5704] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 446.340945][ T5704] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 446.459808][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.474641][ T9308] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 446.475152][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 446.509096][ T5704] usb 6-1: Product: syz [ 446.583490][ T5704] usb 6-1: Manufacturer: syz [ 446.612316][ T5704] usb 6-1: SerialNumber: syz [ 446.663084][ T9958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.838811][ T9308] Bluetooth: hci6: command 0x0406 tx timeout [ 446.913874][ T5711] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 447.112837][ T5711] usb 2-1: device descriptor read/64, error -71 [ 447.418704][ T9958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 447.473183][ T5711] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 447.633025][ T5711] usb 2-1: device descriptor read/64, error -71 [ 447.674377][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'. [ 447.731200][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 447.746519][ T5711] usb usb2-port1: attempt power cycle [ 448.208910][ T5704] asix 6-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 181 [ 448.239511][ T9982] IPv6: sit2: Disabled Multicast RS [ 448.266107][ T9982] sit2: entered allmulticast mode [ 448.448423][ T5711] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 448.486625][ T5696] usb 6-1: USB disconnect, device number 19 [ 448.506616][ T5711] usb 2-1: device descriptor read/8, error -71 [ 448.830858][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 448.914377][ T5711] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 448.975437][ T5711] usb 2-1: device descriptor read/8, error -71 [ 449.103718][ T5711] usb usb2-port1: unable to enumerate USB device [ 449.782251][T10002] comedi: No check for data length of config insn id 1025 is implemented [ 449.820476][T10002] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 449.835776][T10004] netlink: 'syz.1.1086': attribute type 4 has an invalid length. [ 449.864636][T10002] comedi: Assuming n=29764 is correct [ 449.989810][T10007] ubi: mtd0 is already attached to ubi31 [ 450.405675][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1088'. [ 450.556124][ T5704] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 450.716243][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.952321][ T30] audit: type=1400 audit(1784294557.901:1615): avc: denied { ioctl } for pid=10017 comm="syz.0.1091" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 450.988475][T10020] FAULT_INJECTION: forcing a failure. [ 450.988475][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.009478][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.5.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.009497][T10020] Tainted: [L]=SOFTLOCKUP [ 451.009501][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 451.009507][T10020] Call Trace: [ 451.009512][T10020] [ 451.009518][T10020] dump_stack_lvl+0x100/0x190 [ 451.009534][T10020] should_fail_ex.cold+0x5/0xa [ 451.009548][T10020] _copy_from_iter+0x1f4/0x1690 [ 451.009564][T10020] ? __pfx__copy_from_iter+0x10/0x10 [ 451.009577][T10020] ? _parse_integer_limit+0x1ac/0x220 [ 451.009595][T10020] ? _kstrtoull+0x13c/0x1f0 [ 451.009609][T10020] ? __pfx__kstrtoull+0x10/0x10 [ 451.009626][T10020] tun_get_user+0x3ba/0x3c20 [ 451.009648][T10020] ? __pfx_tun_get_user+0x10/0x10 [ 451.009666][T10020] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 451.009685][T10020] ? find_held_lock+0x2b/0x80 [ 451.009705][T10020] ? tun_get+0x191/0x370 [ 451.009719][T10020] ? tun_get+0x191/0x370 [ 451.009736][T10020] tun_chr_write_iter+0xdc/0x200 [ 451.009753][T10020] vfs_write+0x6ac/0x1050 [ 451.009768][T10020] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 451.009785][T10020] ? __pfx_vfs_write+0x10/0x10 [ 451.009799][T10020] ? find_held_lock+0x2b/0x80 [ 451.009822][T10020] ksys_write+0x12a/0x250 [ 451.009837][T10020] ? __pfx_ksys_write+0x10/0x10 [ 451.009855][T10020] do_syscall_64+0x115/0x870 [ 451.009871][T10020] ? clear_bhb_loop+0x40/0x90 [ 451.009883][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.009894][T10020] RIP: 0033:0x7fb54439de99 [ 451.009904][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.009914][T10020] RSP: 002b:00007fb5425f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.009925][T10020] RAX: ffffffffffffffda RBX: 00007fb544625fa0 RCX: 00007fb54439de99 [ 451.009932][T10020] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 451.009938][T10020] RBP: 00007fb5425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.009944][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.009950][T10020] R13: 00007fb544626038 R14: 00007fb544625fa0 R15: 00007ffcea39f348 [ 451.009963][T10020] [ 451.010419][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.245746][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.292693][ T5704] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 451.575835][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.644013][ T5704] usb 2-1: config 0 descriptor?? [ 452.053507][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 452.096907][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 452.223600][ T5704] usb 2-1: USB disconnect, device number 45 [ 453.269190][ T5721] IPVS: starting estimator thread 0... [ 453.356061][ T5726] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 453.376075][T10036] IPVS: using max 78 ests per chain, 187200 per kthread [ 453.388002][T10039] overlayfs: missing 'lowerdir' [ 453.515942][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 453.565069][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 453.619347][ T5726] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 453.666114][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.877625][ T5726] usb 1-1: Product: syz [ 453.927358][ T5726] usb 1-1: Manufacturer: syz [ 453.964412][ T5726] usb 1-1: SerialNumber: syz [ 454.074958][ T5726] usb 1-1: config 0 descriptor?? [ 454.123466][ T5726] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 454.580215][ T30] audit: type=1400 audit(1784294561.599:1616): avc: denied { listen } for pid=10031 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.926688][ T5726] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 454.949731][ T5726] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 455.188096][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.318623][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.381648][ T5697] usb 1-1: USB disconnect, device number 36 [ 456.483876][T10076] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 456.881522][ T30] audit: type=1400 audit(1784294563.888:1617): avc: denied { create } for pid=10081 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 456.941504][ T30] audit: type=1400 audit(1784294563.888:1618): avc: denied { setopt } for pid=10081 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 457.056898][ T30] audit: type=1400 audit(1784294563.888:1619): avc: denied { connect } for pid=10081 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 457.093620][ T30] audit: type=1400 audit(1784294563.888:1620): avc: denied { name_connect } for pid=10081 comm="syz.6.1106" dest=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 457.166795][ T30] audit: type=1400 audit(1784294563.948:1621): avc: denied { create } for pid=10081 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 457.222388][ T30] audit: type=1400 audit(1784294563.948:1622): avc: denied { create } for pid=10081 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 457.348476][ T30] audit: type=1400 audit(1784294564.368:1623): avc: denied { append } for pid=10092 comm="syz.4.1107" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 457.422152][ T30] audit: type=1400 audit(1784294564.418:1624): avc: denied { create } for pid=10092 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 457.513452][ T30] audit: type=1400 audit(1784294564.518:1625): avc: denied { sys_admin } for pid=10092 comm="syz.4.1107" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 457.928267][ T5711] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 458.119832][ T5711] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.128505][ T5711] usb 2-1: config 0 has no interface number 0 [ 458.152160][ T5711] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 458.167555][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.186676][ T5711] usb 2-1: Product: syz [ 458.204768][ T5711] usb 2-1: Manufacturer: syz [ 458.228774][ T5711] usb 2-1: SerialNumber: syz [ 458.247935][ T5711] usb 2-1: config 0 descriptor?? [ 458.483489][ T5711] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 458.512382][ T5711] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.625227][ T5711] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 458.637624][ T5711] usb 2-1: media controller created [ 458.661052][T10119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=10119 comm=syz.1.1117 [ 458.677523][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.894491][T10120] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 459.241292][ T5711] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 459.296816][ T5711] usb 2-1: USB disconnect, device number 46 [ 460.159267][ T5726] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 461.322530][ T5726] usb 7-1: Using ep0 maxpacket: 16 [ 461.425609][ T30] audit: type=1400 audit(1784294568.436:1626): avc: denied { map } for pid=10109 comm="syz.0.1115" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 461.493642][ T5726] usb 7-1: config index 0 descriptor too short (expected 16411, got 27) [ 461.525382][ T5726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 461.580206][ T5726] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 461.627862][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.662271][ T5726] usb 7-1: Product: syz [ 461.689311][ T5726] usb 7-1: Manufacturer: syz [ 461.709135][ T5726] usb 7-1: SerialNumber: syz [ 461.736519][ T5726] usb 7-1: config 0 descriptor?? [ 461.773059][ T5726] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.821265][ T5726] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 462.031453][T10141] FAULT_INJECTION: forcing a failure. [ 462.031453][T10141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.045027][T10141] CPU: 0 UID: 0 PID: 10141 Comm: syz.4.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.045056][T10141] Tainted: [L]=SOFTLOCKUP [ 462.045062][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 462.045071][T10141] Call Trace: [ 462.045080][T10141] [ 462.045088][T10141] dump_stack_lvl+0x100/0x190 [ 462.045111][T10141] should_fail_ex.cold+0x5/0xa [ 462.045125][T10141] _copy_from_user+0x2e/0xd0 [ 462.045140][T10141] simple_attr_write_xsigned.isra.0+0x10e/0x310 [ 462.045155][T10141] ? __pfx_simple_attr_write_xsigned.isra.0+0x10/0x10 [ 462.045181][T10141] debugfs_attr_write+0x74/0xb0 [ 462.045204][T10141] ? __pfx_debugfs_attr_write+0x10/0x10 [ 462.045223][T10141] vfs_writev+0x5ed/0xdd0 [ 462.045248][T10141] ? __pfx_vfs_writev+0x10/0x10 [ 462.045263][T10141] ? rcu_read_lock_any_held+0x6a/0xa0 [ 462.045289][T10141] ? __fget_files+0x21f/0x3d0 [ 462.045315][T10141] ? do_writev+0x13e/0x340 [ 462.045335][T10141] do_writev+0x13e/0x340 [ 462.045357][T10141] ? __pfx_do_writev+0x10/0x10 [ 462.045385][T10141] do_syscall_64+0x115/0x870 [ 462.045403][T10141] ? clear_bhb_loop+0x40/0x90 [ 462.045416][T10141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.045428][T10141] RIP: 0033:0x7f3e3199de99 [ 462.045439][T10141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.045452][T10141] RSP: 002b:00007f3e327fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 462.045469][T10141] RAX: ffffffffffffffda RBX: 00007f3e31c26090 RCX: 00007f3e3199de99 [ 462.045480][T10141] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000005 [ 462.045490][T10141] RBP: 00007f3e327fc090 R08: 0000000000000000 R09: 0000000000000000 [ 462.045500][T10141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.045509][T10141] R13: 00007f3e31c26128 R14: 00007f3e31c26090 R15: 00007ffcd2e81558 [ 462.045532][T10141] [ 462.661110][ T5726] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 463.518894][T10135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 463.627254][ T5726] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 463.657091][ T5726] em28xx 7-1:0.0: board has no eeprom [ 463.661105][ T5697] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 463.771364][ T5726] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 463.791045][ T5726] em28xx 7-1:0.0: dvb set to bulk mode. [ 463.803004][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 463.803020][ T30] audit: type=1400 audit(1784294570.821:1628): avc: denied { append } for pid=10155 comm="syz.4.1129" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.889159][ T5726] usb 7-1: USB disconnect, device number 13 [ 463.902047][ T5704] em28xx 7-1:0.0: Binding DVB extension [ 463.923015][ T5697] usb 2-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 463.971794][ T5726] em28xx 7-1:0.0: Disconnecting em28xx [ 463.991188][ T5697] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.010695][ T30] audit: type=1400 audit(1784294570.881:1629): avc: denied { getopt } for pid=10155 comm="syz.4.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.055660][ T5697] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 464.145765][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.194563][ T30] audit: type=1400 audit(1784294570.881:1630): avc: denied { map } for pid=10155 comm="syz.4.1129" path="socket:[29210]" dev="sockfs" ino=29210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.251590][ T5697] usb 2-1: config 0 descriptor?? [ 464.310677][ T30] audit: type=1400 audit(1784294571.051:1631): avc: denied { execute } for pid=10158 comm="syz.5.1130" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 464.597138][ T5704] em28xx 7-1:0.0: Registering input extension [ 465.176411][ T5726] em28xx 7-1:0.0: Closing input extension [ 465.395435][T10178] xt_nfacct: accounting object `syz1' does not exist [ 466.320314][ T5726] em28xx 7-1:0.0: Freeing device [ 466.325359][ T5793] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 466.484378][ T5793] usb 6-1: not running at top speed; connect to a high speed hub [ 466.511615][ T5793] usb 6-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 466.578610][ T5793] usb 6-1: New USB device found, idVendor=17cc, idProduct=9021, bcdDevice= 0.40 [ 466.617447][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.652624][ T5793] usb 6-1: Product: syz [ 466.670423][ T5793] usb 6-1: Manufacturer: syz [ 466.687803][ T5793] usb 6-1: SerialNumber: syz [ 467.880293][ T5704] usb 2-1: USB disconnect, device number 47 [ 469.279367][ T5793] usb 6-1: BAAD HEADPHONE p_chmask mismatch [ 469.607426][ T30] audit: type=1400 audit(1784294576.618:1632): avc: denied { mount } for pid=10206 comm="syz.6.1144" name="/" dev="ramfs" ino=29313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 470.376186][ T5793] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 470.469621][ T5793] usb 6-1: USB disconnect, device number 20 [ 470.553103][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.636879][ T6962] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 471.249181][ T6962] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.262724][ T6962] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.269177][ T30] audit: type=1400 audit(1784294578.277:1633): avc: denied { name_bind } for pid=10222 comm="syz.5.1150" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 471.274036][ T6962] usb 7-1: config 0 interface 0 has no altsetting 0 [ 471.301189][ T6962] usb 7-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 471.311058][ T6962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.373200][ T6962] usb 7-1: config 0 descriptor?? [ 471.810448][ T6962] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x1 [ 471.820968][ T6962] hid-rmi 0003:06CB:81A7.000D: unexpected long global item [ 471.831888][ T6962] hid-rmi 0003:06CB:81A7.000D: parse failed [ 471.841083][ T6962] hid-rmi 0003:06CB:81A7.000D: probe with driver hid-rmi failed with error -22 [ 472.389331][ T5793] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 472.621754][ T5793] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 472.830652][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.860459][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.203323][ T30] audit: type=1400 audit(1784294580.206:1634): avc: denied { ioctl } for pid=10240 comm="syz.4.1155" path="socket:[28249]" dev="sockfs" ino=28249 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 473.207440][T10241] netlink: 'syz.4.1155': attribute type 5 has an invalid length. [ 473.470898][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 473.632965][ T9565] Bluetooth: hci0: unexpected event for opcode 0x200c [ 473.688932][T10255] comedi: No check for data length of config insn id 1025 is implemented [ 473.779521][T10255] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 473.788899][ T5704] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 473.875819][T10255] comedi: Assuming n=29757 is correct [ 474.012113][ T5704] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 474.149482][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 474.258715][ T5704] usb 2-1: Product: syz [ 474.850475][ T5704] usb 2-1: SerialNumber: syz [ 474.897794][ T5704] usb 2-1: config 0 descriptor?? [ 475.017704][T10262] kAFS: No cell specified [ 475.046030][ T5711] usb 7-1: USB disconnect, device number 14 [ 475.686581][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.695771][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.926636][ T5704] usb 2-1: USB disconnect, device number 48 [ 476.089186][ T30] audit: type=1400 audit(1784294583.105:1635): avc: denied { setattr } for pid=10267 comm="syz.0.1164" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 476.138059][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1165'. [ 476.419274][ T5798] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 476.491564][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 477.257861][ T5798] usb 7-1: Using ep0 maxpacket: 32 [ 477.581815][T10290] kAFS: No cell specified [ 477.828677][ T30] audit: type=1400 audit(1784294584.574:1636): avc: denied { read } for pid=10283 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 478.105175][ T5798] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.244350][ T5798] usb 7-1: config 0 has no interface number 0 [ 478.402149][ T5798] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 478.618820][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.627400][ T5798] usb 7-1: Product: syz [ 478.631801][ T5798] usb 7-1: Manufacturer: syz [ 478.636389][ T5798] usb 7-1: SerialNumber: syz [ 478.650703][ T5798] usb 7-1: config 0 descriptor?? [ 478.657853][ T5798] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 478.667245][ T5798] usb 7-1: selecting invalid altsetting 1 [ 478.673136][ T5798] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 478.691084][ T5798] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.956043][ T5798] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 479.088831][ T5704] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 479.353527][ T5798] usb 7-1: media controller created [ 479.431997][ T5704] usb 2-1: config 0 has no interfaces? [ 479.447142][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.460178][ T5704] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 479.497276][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.562455][ T5704] usb 2-1: config 0 descriptor?? [ 479.659307][ T5711] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 479.692825][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 479.720707][T10304] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1174'. [ 479.817082][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.829256][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 479.845885][T10304] tipc: Invalid UDP bearer configuration [ 479.845929][T10304] tipc: Enabling of bearer rejected, failed to enable media [ 479.868166][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.882185][ T5711] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 479.893570][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.953921][ T5711] usb 5-1: Product: syz [ 479.996567][ T5711] usb 5-1: Manufacturer: syz [ 480.010855][ T5697] usb 2-1: USB disconnect, device number 49 [ 480.048022][ T5711] usb 5-1: SerialNumber: syz [ 480.088104][ T5711] usb 5-1: config 0 descriptor?? [ 480.109976][ T5711] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 480.386564][ T30] audit: type=1400 audit(1784294587.393:1637): avc: denied { create } for pid=10313 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 480.509503][ T5697] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 480.612344][ T5798] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 480.637748][ T5798] zl10353_read_register: readreg error (reg=127, ret==-110) [ 480.699629][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 480.722571][ T5697] usb 2-1: config 1 interface 0 has no altsetting 0 [ 480.733604][ T5697] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 480.757250][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.794214][ T5697] usb 2-1: Product: syz [ 480.819239][ T5697] usb 2-1: Manufacturer: syz [ 480.835077][ T5697] usb 2-1: SerialNumber: syz [ 481.350270][ T5711] gspca_sonixj: reg_w1 err -110 [ 481.410808][ T5711] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 481.460169][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.493912][T10337] fuse: Unknown parameter 'rootRode' [ 482.147514][ T30] audit: type=1400 audit(1784294588.752:1638): avc: denied { open } for pid=10336 comm="syz.5.1181" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 482.181452][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.497453][ T5697] pegasus_notetaker 2-1:1.0: packet size is too small (0) [ 482.510484][ T5697] pegasus_notetaker 2-1:1.0: probe with driver pegasus_notetaker failed with error -22 [ 482.528642][ T5697] usbhid 2-1:1.0: can't add hid device: -71 [ 482.534804][ T5697] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 482.548916][ T5697] usb 2-1: USB disconnect, device number 50 [ 482.589176][ T5798] usb 5-1: USB disconnect, device number 37 [ 482.602670][T10342] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 482.671130][T10346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1182'. [ 483.386566][ T5697] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 483.593164][T10342] bond3: entered promiscuous mode [ 483.619677][T10342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.627415][ T30] audit: type=1400 audit(1784294590.631:1639): avc: denied { call } for pid=10352 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 483.653028][T10353] binder_alloc: 10352: pid 10352 spamming oneway? 1 buffers allocated for a total size of 4096 [ 483.678158][T10346] bond3: entered allmulticast mode [ 483.689564][ T5798] usb 7-1: USB disconnect, device number 15 [ 483.723850][ T5697] usb 2-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid maxpacket 991, setting to 8 [ 483.744874][ T5697] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.767004][ T5697] usb 2-1: config 0 interface 0 has no altsetting 0 [ 483.811933][ T5697] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 483.830864][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.847118][ T5697] usb 2-1: config 0 descriptor?? [ 483.860032][T10345] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.885901][T10350] bond3: (slave bridge1): making interface the new active one [ 483.897172][T10350] bridge1: entered promiscuous mode [ 483.919213][T10350] bridge1: entered allmulticast mode [ 483.942105][T10350] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 484.025939][T10363] overlayfs: missing 'lowerdir' [ 484.303419][ T5697] elecom 0003:056E:00E6.000F: reserved main item tag 0xd [ 484.601706][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.748557][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.285791][ T5697] elecom 0003:056E:00E6.000F: unknown main item tag 0x0 [ 485.293050][ T5697] elecom 0003:056E:00E6.000F: unknown main item tag 0x1 [ 485.300119][ T5697] elecom 0003:056E:00E6.000F: unknown main item tag 0x0 [ 485.307216][ T5697] elecom 0003:056E:00E6.000F: unknown main item tag 0x0 [ 485.315696][ T5697] elecom 0003:056E:00E6.000F: unknown main item tag 0x1 [ 485.322848][ T5697] elecom 0003:056E:00E6.000F: unknown main item tag 0x7 [ 485.335344][ T5697] elecom 0003:056E:00E6.000F: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 485.757673][ T5697] usb 2-1: USB disconnect, device number 51 [ 485.887574][T10382] overlayfs: missing 'lowerdir' [ 486.185993][ T5726] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 486.871557][ T5726] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.920395][ T5726] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.051103][ T5726] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.201406][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.241019][ T5726] usb 6-1: SerialNumber: syz [ 488.919355][ T30] audit: type=1400 audit(1784294595.918:1640): avc: denied { accept } for pid=10414 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 488.931763][ T5726] usb 6-1: 0:2 : does not exist [ 488.997985][ T5726] usb 6-1: unit 5: unexpected type 0x09 [ 490.461644][T10433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 490.506662][ T5726] usb 6-1: USB disconnect, device number 21 [ 493.562610][T10465] comedi: No check for data length of config insn id 1025 is implemented [ 493.596104][T10465] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 493.629568][T10465] comedi: Assuming n=29752 is correct [ 494.766521][ T9565] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 494.775107][T10470] Bluetooth: hci0: command 0x0c1a tx timeout [ 495.172308][ T30] audit: type=1400 audit(1784294602.165:1641): avc: denied { write } for pid=10471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.796359][ T30] audit: type=1400 audit(1784294602.775:1642): avc: denied { write } for pid=10500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.299414][T10507] netlink: 'syz.5.1224': attribute type 4 has an invalid length. [ 496.387521][T10470] Bluetooth: hci6: command 0x0406 tx timeout [ 496.657749][ T30] audit: type=1400 audit(1784294603.664:1643): avc: denied { mounton } for pid=10508 comm="syz.5.1226" path="/165/file0" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 496.681345][T10509] fuse: Bad value for 'user_id' [ 496.688145][T10513] comedi comedi4: bad chanlist[2]=0xffffffc3 chan=65475 range length=2 [ 496.708894][T10509] fuse: Bad value for 'user_id' [ 496.865041][T10516] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 497.850143][ T30] audit: type=1400 audit(1784294604.854:1644): avc: denied { relabelto } for pid=10515 comm="syz.4.1225" name="file0" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 497.926478][ T30] audit: type=1400 audit(1784294604.854:1645): avc: denied { associate } for pid=10515 comm="syz.4.1225" name="file0" dev="tmpfs" ino=1370 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0" [ 498.335577][T10533] kAFS: No cell specified [ 499.200373][ T5696] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 499.402655][ T30] audit: type=1400 audit(1784294606.393:1646): avc: denied { write } for pid=10517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.522377][ T30] audit: type=1400 audit(1784294606.523:1647): avc: denied { write } for pid=10548 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.630901][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 499.664680][ T5696] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 499.678980][ T5711] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 499.692742][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.709044][ T5696] usb 1-1: Product: syz [ 499.718055][ T5696] usb 1-1: Manufacturer: syz [ 499.734838][ T5696] usb 1-1: SerialNumber: syz [ 499.751720][ T5696] usb 1-1: config 0 descriptor?? [ 499.765900][ T5696] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 499.784293][T10551] netlink: 'syz.6.1233': attribute type 1 has an invalid length. [ 499.808141][T10551] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1233'. [ 499.833001][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 499.846134][ T5711] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 499.977999][ T5711] usb 5-1: config 222 has no interface number 0 [ 499.997745][ T5711] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 500.043772][ T5711] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 500.055822][ T9308] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 500.070189][T10553] macvlan0: entered promiscuous mode [ 500.089973][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 500.115835][ T9308] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.166010][ T5711] usb 5-1: config 222 interface 31 has no altsetting 0 [ 500.375810][ T5711] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 500.397291][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.406068][ T5696] usb 1-1: clie_3_5_startup: get interface number failed: -32 [ 500.419745][ T5696] visor 1-1:0.0: probe with driver visor failed with error -32 [ 500.427491][ T5711] usb 5-1: Product: syz [ 500.432190][ T5711] usb 5-1: Manufacturer: syz [ 500.438430][ T5711] usb 5-1: SerialNumber: syz [ 500.445334][ T5696] usb 1-1: USB disconnect, device number 37 [ 500.458622][T10546] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 500.707449][ T5711] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 500.726705][ T5711] usb 5-1: USB disconnect, device number 38 [ 500.739484][ T5697] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 500.751173][ T5711] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 500.909596][ T5697] usb 2-1: Using ep0 maxpacket: 8 [ 501.005228][T10562] MPI: mpi too large (110728 bits) [ 501.094737][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.843182][T10568] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 502.316478][ T5697] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 502.440912][ T5697] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 502.442524][T10570] xt_hashlimit: size too large, truncated to 1048576 [ 502.453965][ T5697] usb 2-1: config 0 interface 0 has no altsetting 0 [ 502.454007][ T5697] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 502.454027][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.583398][ T5697] usb 2-1: config 0 descriptor?? [ 502.890683][ T5798] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 503.062758][ T5798] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 503.078259][ T5798] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 503.117946][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.176497][ T5798] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 503.298235][ T5697] chicony 0003:04F2:1123.0010: unknown main item tag 0x0 [ 503.311940][ T5697] chicony 0003:04F2:1123.0010: unknown main item tag 0x7 [ 503.323511][T10588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 503.352880][ T5697] chicony 0003:04F2:1123.0010: unknown main item tag 0x0 [ 503.360201][ T5697] chicony 0003:04F2:1123.0010: item fetching failed at offset 6/40 [ 503.380075][ T5697] chicony 0003:04F2:1123.0010: Chicony hid parse failed: -22 [ 503.390873][ T5697] chicony 0003:04F2:1123.0010: probe with driver chicony failed with error -22 [ 503.545710][ T5697] usb 2-1: USB disconnect, device number 52 [ 503.656540][T10602] comedi: No check for data length of config insn id 1025 is implemented [ 503.677970][T10602] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 503.739021][T10602] comedi: Assuming n=29750 is correct [ 503.766416][T10597] vti0: entered promiscuous mode [ 503.805747][T10597] binder: 10596:10597 ioctl 4018620d 0 returned -22 [ 504.023290][T10608] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 504.422666][ T5798] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 505.057348][ T5798] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 505.074381][ T5798] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 505.084826][ T5798] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 505.536091][T10625] FAULT_INJECTION: forcing a failure. [ 505.536091][T10625] name failslab, interval 1, probability 0, space 0, times 0 [ 505.548835][T10625] CPU: 1 UID: 0 PID: 10625 Comm: syz.1.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.548864][T10625] Tainted: [L]=SOFTLOCKUP [ 505.548870][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 505.548881][T10625] Call Trace: [ 505.548888][T10625] [ 505.548895][T10625] dump_stack_lvl+0x100/0x190 [ 505.548922][T10625] should_fail_ex.cold+0x5/0xa [ 505.548946][T10625] should_failslab+0xc2/0x120 [ 505.548969][T10625] __kmalloc_noprof+0xfc/0x820 [ 505.548987][T10625] ? rcu_is_watching+0x12/0xc0 [ 505.549012][T10625] ? tomoyo_realpath_from_path+0xb6/0x690 [ 505.549043][T10625] tomoyo_realpath_from_path+0xb6/0x690 [ 505.549075][T10625] tomoyo_path_number_perm+0x23c/0x580 [ 505.549097][T10625] ? tomoyo_path_number_perm+0x22e/0x580 [ 505.549119][T10625] ? print_kernel_ident+0x14/0x40 [ 505.549145][T10625] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.549169][T10625] ? rcu_is_watching+0x12/0xc0 [ 505.549220][T10625] ? find_held_lock+0x2b/0x80 [ 505.549245][T10625] ? __fget_files+0x215/0x3d0 [ 505.549271][T10625] ? hook_file_ioctl_common+0x140/0x440 [ 505.549288][T10625] ? __fget_files+0x215/0x3d0 [ 505.549318][T10625] ? __fget_files+0x21f/0x3d0 [ 505.549349][T10625] security_file_ioctl+0xd3/0x230 [ 505.549374][T10625] __x64_sys_ioctl+0xb7/0x210 [ 505.549401][T10625] do_syscall_64+0x115/0x870 [ 505.549427][T10625] ? clear_bhb_loop+0x40/0x90 [ 505.549449][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.549472][T10625] RIP: 0033:0x7f766dd9de99 [ 505.549487][T10625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.549505][T10625] RSP: 002b:00007f766ebf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.549522][T10625] RAX: ffffffffffffffda RBX: 00007f766e026180 RCX: 00007f766dd9de99 [ 505.549534][T10625] RDX: 0000200000000100 RSI: 00000000c0045627 RDI: 0000000000000007 [ 505.549545][T10625] RBP: 00007f766ebf1090 R08: 0000000000000000 R09: 0000000000000000 [ 505.549555][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.549566][T10625] R13: 00007f766e026218 R14: 00007f766e026180 R15: 00007ffeec112df8 [ 505.549590][T10625] [ 505.549611][T10625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.761994][ T5697] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 505.787715][ T5696] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 505.955499][ T5696] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 506.120921][ T5697] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 506.217323][ T5798] usb 5-1: USB disconnect, device number 39 [ 507.303643][ T5696] usb 1-1: config 0 has no interface number 0 [ 507.309815][ T5697] usb 7-1: config 1 interface 0 has no altsetting 0 [ 507.318078][ T5696] usb 1-1: config 0 interface 48 has no altsetting 0 [ 507.341070][ T5697] usb 7-1: string descriptor 0 read error: -22 [ 507.348827][ T5697] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 507.358694][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.379138][ T5696] usb 1-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=8e.7d [ 507.388421][ T5696] usb 1-1: New USB device strings: Mfr=69, Product=2, SerialNumber=3 [ 507.407506][ T5696] usb 1-1: Product: 裿㦩鱑㻇៎䍲৽褥െ夂윜⬘訣맏㍹㚛㟬临⮨俑女迁⨰돮쿚퓰尵戃᪔漣䣚ꇝ좊뜃 [ 507.428050][ T5696] usb 1-1: Manufacturer: syz [ 507.433615][ T5696] usb 1-1: SerialNumber: ී䡆薧藴ᦒᠣ멏 [ 507.445597][ T5696] usb 1-1: config 0 descriptor?? [ 507.659248][ T5696] gspca_main: sonixb-2.14.0 probing 0c45:6007 [ 507.667121][ T5696] sonixb 1-1:0.48: Error reading register 00: -71 [ 507.681280][ T5696] usb 1-1: USB disconnect, device number 38 [ 507.842440][ T5697] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 507.890129][ T5697] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0926:3333.0011/input/input28 [ 508.253871][ T5697] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 508.305612][ T5697] usb 7-1: USB disconnect, device number 16 [ 508.457757][T10664] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1260'. [ 508.463342][ T5798] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 508.731824][T10661] fido_id[10661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 509.822847][ T5798] usb 2-1: Using ep0 maxpacket: 32 [ 509.881459][ T5798] usb 2-1: config 3 has an invalid interface number: 79 but max is 0 [ 509.906404][ T5798] usb 2-1: config 3 has no interface number 0 [ 509.943844][ T5798] usb 2-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 510.028227][ T5798] usb 2-1: config 3 interface 79 has no altsetting 0 [ 510.056034][ T5798] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 510.107347][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.151583][ T5798] usb 2-1: Product: syz [ 510.168902][ T5798] usb 2-1: Manufacturer: syz [ 510.191945][ T5798] usb 2-1: SerialNumber: syz [ 510.521779][ T5798] kobil_sct 2-1:3.79: KOBIL USB smart card terminal converter detected [ 510.655177][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 511.117468][ T5798] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 511.399025][ T5798] usb 2-1: USB disconnect, device number 53 [ 511.721960][ T5798] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 511.778817][ T5798] kobil_sct 2-1:3.79: device disconnected [ 511.950116][T10703] syz_tun: entered allmulticast mode [ 512.037316][T10702] syz_tun: left allmulticast mode [ 513.325959][ T30] audit: type=1400 audit(1784294620.196:1648): avc: denied { accept } for pid=10715 comm="syz.6.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 513.365133][T10718] tls_set_device_offload: netdev not found [ 513.649852][ T30] audit: type=1400 audit(1784294620.396:1649): avc: denied { setopt } for pid=10722 comm="syz.4.1280" lport=39104 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 513.829566][ T30] audit: type=1400 audit(1784294620.396:1650): avc: denied { getopt } for pid=10722 comm="syz.4.1280" lport=39104 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 514.078998][T10737] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 514.119987][T10737] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 514.287841][ T30] audit: type=1400 audit(1784294621.276:1651): avc: denied { write } for pid=10736 comm="syz.5.1283" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 514.315771][ T30] audit: type=1400 audit(1784294621.276:1652): avc: denied { open } for pid=10736 comm="syz.5.1283" path="/174/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 514.466382][ T5696] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 514.516383][ T5704] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 514.616542][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 514.630288][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.640962][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.653130][ T5696] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.665829][ T5696] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 514.676452][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 514.693222][ T5696] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 514.706642][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.710060][ T5704] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 514.725723][ T5696] usb 2-1: Product: syz [ 514.730090][ T6962] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 514.741619][ T5696] usb 2-1: Manufacturer: syz [ 514.747141][ T5696] usb 2-1: SerialNumber: syz [ 514.767064][ T5696] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 514.777193][ T5696] usb 2-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 514.792248][ T5704] usb 6-1: config 179 has no interface number 0 [ 514.801359][ T5696] usb 2-1: 1:1 : unsupported format bits 0x28b06562 [ 514.816012][ T5704] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 514.831434][ T5696] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 514.837695][ T5704] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 514.904117][ T5704] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 515.029190][ T6962] usb 1-1: Using ep0 maxpacket: 32 [ 515.040090][ T5696] usb 2-1: unit 3 not found! [ 515.066764][ T6962] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.088921][ T6962] usb 1-1: config 0 has no interface number 0 [ 515.107349][ T5704] usb 6-1: config 179 interface 65 has no altsetting 0 [ 515.125448][ T5704] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 515.143224][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.148360][ T6962] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 515.175314][ T6962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.202658][ T6962] usb 1-1: Product: syz [ 515.215713][ T5696] usb 2-1: USB disconnect, device number 54 [ 515.221799][ T6962] usb 1-1: Manufacturer: syz [ 515.226601][ T6962] usb 1-1: SerialNumber: syz [ 515.237607][ T6962] usb 1-1: config 0 descriptor?? [ 515.351544][ T6962] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 515.384593][ T6962] usb 1-1: selecting invalid altsetting 1 [ 515.399972][ T5711] usb 6-1: USB disconnect, device number 22 [ 515.414893][ T6962] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 515.447929][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.489095][ T6962] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.521181][ T6962] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 515.545742][ T6962] usb 1-1: media controller created [ 515.569734][ T6962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.618736][T10746] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 516.637734][T10751] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 516.668909][ T6962] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 516.677624][ T6962] zl10353_read_register: readreg error (reg=127, ret==-71) [ 516.685758][ T6962] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 516.746899][ T6962] usb 1-1: USB disconnect, device number 39 [ 519.012807][T10774] MPI: mpi too large (110728 bits) [ 520.109869][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1299'. [ 520.172285][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1299'. [ 520.969887][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1302'. [ 522.072074][T10806] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 522.195136][T10806] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1306'. [ 522.993910][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1309'. [ 523.830470][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 525.482534][T10843] xt_time: unknown flags 0xc [ 526.503029][ T5798] hid-generic 0000:0020:0000.0012: item fetching failed at offset 0/2 [ 526.560999][ T5798] hid-generic 0000:0020:0000.0012: probe with driver hid-generic failed with error -22 [ 527.275596][T10881] comedi: No check for data length of config insn id 1025 is implemented [ 527.307913][T10881] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 527.332725][T10881] comedi: Assuming n=29747 is correct [ 527.437662][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 527.466354][T10886] netlink: 'syz.5.1328': attribute type 21 has an invalid length. [ 527.865123][ T5798] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 528.096066][ T5798] usb 6-1: Using ep0 maxpacket: 16 [ 528.166988][ T5798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.276835][ T5798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.327494][T10904] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 528.337368][T10904] SELinux: failed to load policy [ 528.381299][ T30] audit: type=1400 audit(1784294635.292:1653): avc: denied { load_policy } for pid=10893 comm="syz.4.1331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 528.429476][ T5798] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 528.551560][ T5798] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 528.577612][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.641636][ T5798] usb 6-1: config 0 descriptor?? [ 529.575343][T10892] xt_connbytes: Forcing CT accounting to be enabled [ 529.660618][T10892] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 529.758246][ T5798] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0013/input/input29 [ 529.903452][ T5798] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 530.009814][ T5798] usb 6-1: USB disconnect, device number 23 [ 530.716848][T10918] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1335'. [ 532.154939][T10903] vcan1: entered promiscuous mode [ 532.197675][T10903] vcan1: entered allmulticast mode [ 532.417348][ T30] audit: type=1400 audit(1784294639.400:1654): avc: denied { mounton } for pid=10923 comm="syz.5.1337" path="/185/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 532.689927][ T5721] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 532.978004][ T5721] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 532.996133][ T5721] usb 2-1: config 1 interface 0 has no altsetting 0 [ 533.021902][ T5721] usb 2-1: string descriptor 0 read error: -22 [ 533.042092][ T5721] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 533.059783][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.305792][T10940] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1343'. [ 533.791766][ T5711] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 533.958444][ T5711] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 533.973937][ T5711] usb 5-1: config 1 interface 0 has no altsetting 0 [ 533.985938][ T5711] usb 5-1: string descriptor 0 read error: -22 [ 533.992699][ T5711] usb 5-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.40 [ 534.003967][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.238004][ T5721] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 534.296339][ T5721] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0014/input/input30 [ 534.448232][ T30] audit: type=1400 audit(1784294641.429:1655): avc: denied { listen } for pid=10936 comm="syz.4.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 534.487829][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.497749][ T5721] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 534.541056][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.576550][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.579559][ T5721] usb 2-1: USB disconnect, device number 55 [ 534.623697][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.657620][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.677396][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.712203][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.735026][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.766557][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.802001][ T5711] apple 0003:05AC:029A.0015: unknown main item tag 0x0 [ 534.867541][ T5711] apple 0003:05AC:029A.0015: hidraw1: USB HID v0.01 Device [HID 05ac:029a] on usb-dummy_hcd.4-1/input0 [ 534.945438][ T5711] usb 5-1: USB disconnect, device number 40 [ 535.009125][T10947] fido_id[10947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 535.040046][T10952] FAULT_INJECTION: forcing a failure. [ 535.040046][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 535.083683][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.5.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.083711][T10952] Tainted: [L]=SOFTLOCKUP [ 535.083717][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 535.083724][T10952] Call Trace: [ 535.083728][T10952] [ 535.083733][T10952] dump_stack_lvl+0x100/0x190 [ 535.083750][T10952] should_fail_ex.cold+0x5/0xa [ 535.083764][T10952] should_failslab+0xc2/0x120 [ 535.083778][T10952] kmem_cache_alloc_noprof+0x91/0x6a0 [ 535.083790][T10952] ? ima_inode_get+0x11f/0x580 [ 535.083809][T10952] ima_inode_get+0x11f/0x580 [ 535.083827][T10952] process_measurement+0x1213/0x2350 [ 535.083848][T10952] ? __pfx_process_measurement+0x10/0x10 [ 535.083866][T10952] ? avc_has_perm+0x135/0x1e0 [ 535.083878][T10952] ? __pfx_avc_has_perm+0x10/0x10 [ 535.083889][T10952] ? find_held_lock+0x2b/0x80 [ 535.083904][T10952] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 535.083915][T10952] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 535.083938][T10952] ? __file_map_prot_check+0x3b1/0x550 [ 535.083954][T10952] ima_file_mmap+0x1bb/0x1e0 [ 535.083971][T10952] ? __pfx_ima_file_mmap+0x10/0x10 [ 535.083988][T10952] ? proc_fail_nth_write+0x9f/0x220 [ 535.084005][T10952] security_mmap_file+0x278/0x9b0 [ 535.084022][T10952] vm_mmap_pgoff+0xec/0x470 [ 535.084036][T10952] ? find_held_lock+0x2b/0x80 [ 535.084051][T10952] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 535.084063][T10952] ? __fget_files+0x215/0x3d0 [ 535.084082][T10952] ? __fget_files+0x21f/0x3d0 [ 535.084101][T10952] ksys_mmap_pgoff+0x3cb/0x610 [ 535.084115][T10952] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 535.084127][T10952] ? fput+0x79/0x100 [ 535.084144][T10952] ? ksys_write+0x1ac/0x250 [ 535.084158][T10952] ? __pfx_ksys_write+0x10/0x10 [ 535.084175][T10952] __x64_sys_mmap+0x125/0x190 [ 535.084191][T10952] do_syscall_64+0x115/0x870 [ 535.084207][T10952] ? clear_bhb_loop+0x40/0x90 [ 535.084220][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.084232][T10952] RIP: 0033:0x7fb54439de99 [ 535.084242][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.084253][T10952] RSP: 002b:00007fb5425f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 535.084264][T10952] RAX: ffffffffffffffda RBX: 00007fb544625fa0 RCX: 00007fb54439de99 [ 535.084271][T10952] RDX: 0000000002000004 RSI: 0000000000009000 RDI: 0000200000ff5000 [ 535.084278][T10952] RBP: 00007fb5425f6090 R08: 0000000000000003 R09: 0000000180000000 [ 535.084284][T10952] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 535.084291][T10952] R13: 00007fb544626038 R14: 00007fb544625fa0 R15: 00007ffcea39f348 [ 535.084305][T10952] [ 535.085483][T10950] fido_id[10950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 535.159415][ T30] audit: type=1400 audit(1784294642.038:1656): avc: denied { bind } for pid=10953 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 535.546885][ T5726] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 535.610003][ T30] audit: type=1400 audit(1784294642.048:1657): avc: denied { bind } for pid=10954 comm="syz.6.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.687707][ T30] audit: type=1400 audit(1784294642.048:1658): avc: denied { write } for pid=10953 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.707771][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 535.727664][ T5726] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.737989][ T5726] usb 1-1: config 0 has no interface number 0 [ 535.753482][ T30] audit: type=1400 audit(1784294642.148:1659): avc: denied { read } for pid=10953 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.778049][ T5721] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 535.796640][ T5726] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 535.807066][ T6962] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 535.815053][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.838392][ T5726] usb 1-1: Product: syz [ 535.846992][ T5726] usb 1-1: Manufacturer: syz [ 535.847042][ T5711] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 535.866833][ T5726] usb 1-1: SerialNumber: syz [ 535.911249][ T5726] usb 1-1: config 0 descriptor?? [ 535.925934][ T5726] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 535.950545][ T5726] usb 1-1: selecting invalid altsetting 1 [ 535.962752][ T5726] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 535.971025][ T6962] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 535.984954][ T5721] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 535.985032][ T6962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.004905][ T5711] usb 5-1: device descriptor read/64, error -71 [ 536.015040][ T6962] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 536.038019][ T6962] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 536.046562][ T6962] usb 7-1: Manufacturer: syz [ 536.058342][ T5726] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 536.068437][ T6962] usb 7-1: config 0 descriptor?? [ 536.085752][ T5721] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 536.122798][ T5726] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 536.154402][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 536.171930][ T5726] usb 1-1: media controller created [ 536.178438][ T5721] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 536.199242][ T6962] rc_core: IR keymap rc-hauppauge not found [ 536.209922][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 536.222415][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.242933][ T6962] Registered IR keymap rc-empty [ 536.257275][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 536.258131][ T5711] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 536.285649][ T6962] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 536.310942][ T6962] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input31 [ 536.350870][ T6962] usb 7-1: USB disconnect, device number 17 [ 536.367799][ T5721] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.393210][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.427323][ T5711] usb 5-1: device descriptor read/64, error -71 [ 536.440095][ T5721] usb 2-1: Product: syz [ 536.464794][ T5721] usb 2-1: Manufacturer: syz [ 536.483192][T10962] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 536.509687][ T5721] cdc_wdm 2-1:1.0: skipping garbage [ 536.526179][ T5721] cdc_wdm 2-1:1.0: skipping garbage [ 536.537602][ T5711] usb usb5-port1: attempt power cycle [ 536.554932][ T5721] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 536.571713][ T5721] cdc_wdm 2-1:1.0: Unknown control protocol [ 536.768346][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.775106][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.781628][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.781920][ T30] audit: type=1400 audit(1784294643.738:1660): avc: denied { read write } for pid=10953 comm="syz.1.1349" name="cdc-wdm0" dev="devtmpfs" ino=3462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 536.788243][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.788436][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.824996][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.832542][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.839145][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.846519][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.853109][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.859535][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.866111][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.872460][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.879144][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.886917][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.893500][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.899829][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.906401][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.912618][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 536.919192][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 536.960680][ T6962] usb 2-1: USB disconnect, device number 56 [ 536.966629][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 536.997712][ T5711] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 537.018971][ T5711] usb 5-1: device descriptor read/8, error -71 [ 537.074190][ T30] audit: type=1400 audit(1784294643.738:1661): avc: denied { open } for pid=10953 comm="syz.1.1349" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 537.187844][T10949] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 537.207940][T10972] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 537.228174][ T5726] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 537.235472][ T5726] zl10353_read_register: readreg error (reg=127, ret==-71) [ 537.266748][ T5726] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 537.267741][ T5711] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 537.308307][ T5711] usb 5-1: device descriptor read/8, error -71 [ 537.396356][ T5726] usb 1-1: USB disconnect, device number 40 [ 537.452148][ T5711] usb usb5-port1: unable to enumerate USB device [ 538.444551][T10987] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1359'. [ 538.992348][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'. [ 539.007393][ T5711] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 539.166945][T11021] netlink: 'syz.6.1366': attribute type 4 has an invalid length. [ 539.208763][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 539.552624][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.573590][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.587157][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.608925][ T5711] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 539.619947][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.847387][ T5711] usb 5-1: config 0 descriptor?? [ 540.169226][ T6962] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 540.319270][ T6962] usb 2-1: device descriptor read/64, error -71 [ 540.320261][T10997] xt_connbytes: Forcing CT accounting to be enabled [ 540.388402][T10997] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 540.514231][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input32 [ 540.600079][ T6962] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 540.621032][ T5711] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 540.769572][ T6962] usb 2-1: device descriptor read/64, error -71 [ 540.838658][ T5711] usb 5-1: USB disconnect, device number 45 [ 540.892766][ T6962] usb usb2-port1: attempt power cycle [ 540.948756][T11032] fido_id[11032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 541.209732][ T5696] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 541.260201][ T6962] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 541.302395][ T6962] usb 2-1: device descriptor read/8, error -71 [ 541.329748][ T5798] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 541.349778][ T5696] usb 7-1: device descriptor read/64, error -71 [ 541.510491][ T5798] usb 6-1: device descriptor read/64, error -71 [ 541.678710][T11045] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1372'. [ 541.870122][ T5798] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 541.909793][ T6962] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 541.995231][ T5726] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 542.010227][ T5798] usb 6-1: device descriptor read/64, error -71 [ 542.097927][ T5696] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 542.123588][ T5798] usb usb6-port1: attempt power cycle [ 542.157003][ T5726] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 542.189529][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 542.470342][ T9308] Bluetooth: hci6: command 0x0406 tx timeout [ 542.812107][ T5726] usb 5-1: Product: syz [ 542.848277][ T5726] usb 5-1: SerialNumber: syz [ 542.857956][ T6962] usb 2-1: device descriptor read/8, error -71 [ 542.914017][ T5726] usb 5-1: config 0 descriptor?? [ 542.930575][ T5696] usb 7-1: device descriptor read/64, error -71 [ 543.088303][ T6962] usb usb2-port1: unable to enumerate USB device [ 543.101232][ T5696] usb usb7-port1: attempt power cycle [ 543.593872][ T5798] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 543.652513][ T5798] usb 6-1: device descriptor read/8, error -71 [ 543.865386][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.874058][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.883090][ T5696] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 543.883620][ T5726] usb 5-1: USB disconnect, device number 46 [ 543.914518][ T5798] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 543.985012][ T5798] usb 6-1: device descriptor read/8, error -71 [ 544.020635][ T5696] usb 7-1: device descriptor read/8, error -71 [ 544.151926][ T5798] usb usb6-port1: unable to enumerate USB device [ 544.316139][T11070] overlayfs: missing 'lowerdir' [ 544.370390][ T6962] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 544.612911][ T6962] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.713278][ T6962] usb 1-1: config 0 has no interface number 0 [ 544.725415][ T30] audit: type=1400 audit(1784294651.704:1662): avc: denied { remount } for pid=11077 comm="syz.4.1380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 545.395633][ T6962] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 545.439169][ T6962] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.470575][ T6962] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 545.503858][ T6962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.552953][ T6962] usb 1-1: config 0 descriptor?? [ 545.671970][ T6963] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 545.781177][ T6962] usbhid 1-1:0.1: can't add hid device: -71 [ 545.797450][ T6962] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 545.834911][ T6962] usb 1-1: USB disconnect, device number 41 [ 545.853246][ T6963] usb 5-1: Using ep0 maxpacket: 8 [ 545.888535][ T6963] usb 5-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 545.937225][ T6963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 545.968127][ T6963] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 546.004876][ T6963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.029970][ T6963] usb 5-1: config 0 descriptor?? [ 546.715220][ T6963] usbhid 5-1:0.0: can't add hid device: -71 [ 546.725719][ T6963] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.744278][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 546.753200][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1385'. [ 546.767272][ T8708] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.785141][ T6963] usb 5-1: USB disconnect, device number 47 [ 546.802235][ T8708] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.842392][ T8708] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.868822][ T8708] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.330083][ T30] audit: type=1400 audit(1784294654.302:1663): avc: denied { lock } for pid=11106 comm="syz.0.1388" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 547.536731][T11112] tipc: Enabled bearer , priority 0 [ 547.575335][T11112] syzkaller0: entered promiscuous mode [ 547.599553][T11112] syzkaller0: entered allmulticast mode [ 547.669611][T11111] tipc: Resetting bearer [ 547.697137][T11111] tipc: Disabling bearer [ 547.742984][ T5726] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 547.903162][ T5726] usb 2-1: device descriptor read/64, error -71 [ 547.972722][T11118] overlayfs: missing 'lowerdir' [ 548.268118][T11122] netlink: 'syz.6.1393': attribute type 4 has an invalid length. [ 548.276388][ T5726] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 548.454290][ T5726] usb 2-1: device descriptor read/64, error -71 [ 548.472323][ T30] audit: type=1400 audit(1784294655.442:1664): avc: denied { shutdown } for pid=11124 comm="syz.6.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.537208][ T30] audit: type=1400 audit(1784294655.462:1665): avc: denied { getopt } for pid=11124 comm="syz.6.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.603765][ T5726] usb usb2-port1: attempt power cycle [ 548.815010][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 548.983592][ T5726] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 549.029508][ T5726] usb 2-1: device descriptor read/8, error -71 [ 549.264018][ T5793] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 549.309596][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1397'. [ 549.328912][T11141] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1397'. [ 549.402631][ T5726] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 549.485731][ T5726] usb 2-1: device descriptor read/8, error -71 [ 549.539320][ T5793] usb 5-1: Using ep0 maxpacket: 16 [ 549.626715][ T5793] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.656882][ T5726] usb usb2-port1: unable to enumerate USB device [ 549.737867][ T5793] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.856080][ T5793] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 549.887287][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.912281][ T5793] usb 5-1: SerialNumber: syz [ 549.934342][ T5721] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 550.004457][ T5798] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 550.176375][ T5721] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 550.201173][ T5793] usb 5-1: 0:2 : does not exist [ 550.221631][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 550.340000][ T5798] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 550.360276][ T5721] usb 7-1: Product: syz [ 550.418611][ T5721] usb 7-1: SerialNumber: syz [ 550.515742][ T5798] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.925611][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.946569][ T5721] usb 7-1: config 0 descriptor?? [ 550.961921][ T5798] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 551.003826][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.020860][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.078429][ T5798] usb 1-1: config 0 descriptor?? [ 551.478169][ T5793] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 551.498438][ T5721] usb 7-1: USB disconnect, device number 22 [ 551.551401][ T5793] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 551.617713][ T5793] usb 5-1: USB disconnect, device number 48 [ 551.656003][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.823247][ T30] audit: type=1400 audit(1784294658.790:1666): avc: denied { name_bind } for pid=11155 comm="syz.1.1402" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 551.870667][T11157] xt_nfacct: accounting object `syz1' does not exist [ 552.122428][T11160] netlink: 'syz.1.1404': attribute type 4 has an invalid length. [ 552.278048][T11165] overlayfs: missing 'lowerdir' [ 553.600472][ T6963] usb 1-1: USB disconnect, device number 42 [ 553.735053][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 553.761956][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 553.774600][T11181] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 553.785724][ T57] Bluetooth: hci2: Frame reassembly failed (-84) [ 553.912033][T11180] vlan2: entered promiscuous mode [ 554.043433][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 554.055237][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 554.113167][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 554.165878][T11179] ceph: No mds server is up or the cluster is laggy [ 555.677124][ T9308] Bluetooth: hci2: command 0x1003 tx timeout [ 555.717720][T10470] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 556.957725][ T5798] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 557.135455][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 557.145765][ T5798] usb 6-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 557.177649][ T5798] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.202260][ T5798] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 557.240773][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.293305][ T5798] usb 6-1: config 0 descriptor?? [ 557.440319][T11237] netlink: 'syz.4.1424': attribute type 4 has an invalid length. [ 557.641709][ T7119] ------------[ cut here ]------------ [ 557.647203][ T7119] time_after(jiffies, warn_timeout) [ 557.647214][ T7119] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x36c/0x9d0, CPU#1: syz.3.349/7119 [ 557.663856][ T7119] Modules linked in: [ 557.668177][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.3.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.679174][ T7119] Tainted: [L]=SOFTLOCKUP [ 557.683488][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 557.693726][ T7119] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 557.699791][ T7119] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 df c2 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 8f a7 f1 fc 4d 85 ff 79 aa e8 e5 ac f1 fc 90 <0f> 0b 90 eb 9f e8 da ac f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 557.719705][ T7119] RSP: 0018:ffffc9000265f8c0 EFLAGS: 00010293 [ 557.725960][ T7119] RAX: 0000000000000000 RBX: ffff888038077000 RCX: ffffffff85182fb1 [ 557.734005][ T7119] RDX: ffff888030c1a540 RSI: ffffffff85182fbb RDI: ffff888030c1a540 [ 557.742099][ T7119] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 557.750110][ T7119] R10: ffffffffffffe85d R11: 0000000000000000 R12: 0000000100004c71 [ 557.758123][ T7119] R13: 0000000000001b58 R14: ffff888038077018 R15: ffffffffffffe85d [ 557.766077][ T7119] FS: 00007f169857f6c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 557.775015][ T7119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.781629][ T7119] CR2: 00007fffad6c0fe0 CR3: 0000000024305000 CR4: 00000000003526f0 [ 557.789658][ T7119] Call Trace: [ 557.792962][ T7119] [ 557.795886][ T7119] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 557.801497][ T7119] ? __pfx___might_resched+0x10/0x10 [ 557.806794][ T7119] ? io_wq_set_exit_on_idle+0x156/0x290 [ 557.812372][ T7119] io_uring_clean_tctx+0x114/0x180 [ 557.817484][ T7119] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 557.823458][ T7119] ? percpu_counter_add_batch+0xb9/0x230 [ 557.829371][ T7119] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 557.835882][ T7119] io_uring_cancel_generic+0x798/0x7f0 [ 557.841482][ T7119] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 557.847447][ T7119] ? __pfx___file_ref_put+0x10/0x10 [ 557.852668][ T7119] ? __pfx_autoremove_wake_function+0x10/0x10 [ 557.858755][ T7119] ? fput+0xd9/0x100 [ 557.862626][ T7119] ? io_uring_unreg_ringfd+0xca/0x140 [ 557.868004][ T7119] do_exit+0x344/0x2ae0 [ 557.872163][ T7119] ? __pfx___might_resched+0x10/0x10 [ 557.877428][ T7119] ? __pfx_do_exit+0x10/0x10 [ 557.882038][ T7119] ? do_raw_spin_lock+0x128/0x260 [ 557.887042][ T7119] ? find_held_lock+0x2b/0x80 [ 557.891713][ T7119] ? get_signal+0x7e0/0x21e0 [ 557.896284][ T7119] do_group_exit+0xd5/0x2a0 [ 557.900794][ T7119] get_signal+0x1ec7/0x21e0 [ 557.905275][ T7119] ? __pfx_msr_read+0x10/0x10 [ 557.909960][ T7119] ? security_file_permission+0x76/0x210 [ 557.915582][ T7119] ? __pfx_get_signal+0x10/0x10 [ 557.920627][ T7119] ? __pfx_vfs_read+0x10/0x10 [ 557.925525][ T7119] ? find_held_lock+0x2b/0x80 [ 557.930363][ T7119] arch_do_signal_or_restart+0x91/0x7e0 [ 557.935902][ T7119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 557.942117][ T7119] ? fput+0x79/0x100 [ 557.946007][ T7119] exit_to_user_mode_loop+0x139/0x6f0 [ 557.951392][ T7119] ? rcu_is_watching+0x12/0xc0 [ 557.956150][ T7119] do_syscall_64+0x666/0x870 [ 557.960747][ T7119] ? clear_bhb_loop+0x40/0x90 [ 557.965417][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.971317][ T7119] RIP: 0033:0x7f169779de99 [ 557.975720][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.995384][ T7119] RSP: 002b:00007f169857f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.003947][ T7119] RAX: 0000000000018ff8 RBX: 00007f1697a25fa0 RCX: 00007f169779de99 [ 558.011977][ T7119] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 558.020006][ T7119] RBP: 00007f1697833eaf R08: 0000000000000000 R09: 0000000000000000 [ 558.028556][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.036862][ T7119] R13: 00007f1697a26038 R14: 00007f1697a25fa0 R15: 00007ffdc9d6f298 [ 558.044935][ T7119] [ 558.047983][ T7119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.055284][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.3.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.066048][ T7119] Tainted: [L]=SOFTLOCKUP [ 558.070368][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 558.080425][ T7119] Call Trace: [ 558.083707][ T7119] [ 558.086633][ T7119] dump_stack_lvl+0x100/0x190 [ 558.091330][ T7119] vpanic+0x552/0x970 [ 558.095312][ T7119] ? __pfx_vpanic+0x10/0x10 [ 558.099817][ T7119] panic+0xd1/0xe0 [ 558.103533][ T7119] ? __pfx_panic+0x10/0x10 [ 558.107954][ T7119] ? check_panic_on_warn+0x1f/0x90 [ 558.113077][ T7119] check_panic_on_warn.cold+0x19/0x34 [ 558.118452][ T7119] ? io_wq_put_and_exit+0x36c/0x9d0 [ 558.123644][ T7119] __warn.cold+0x191/0x318 [ 558.128059][ T7119] __report_bug+0x30f/0x440 [ 558.132565][ T7119] ? io_wq_put_and_exit+0x36c/0x9d0 [ 558.137750][ T7119] ? __pfx___report_bug+0x10/0x10 [ 558.142769][ T7119] ? do_raw_spin_lock+0x128/0x260 [ 558.147784][ T7119] ? find_held_lock+0x2b/0x80 [ 558.152449][ T7119] ? __wait_for_common+0x1f3/0x4c0 [ 558.157548][ T7119] ? rcu_is_watching+0x12/0xc0 [ 558.162297][ T7119] ? io_wq_put_and_exit+0x36c/0x9d0 [ 558.167480][ T7119] report_bug+0xb2/0x220 [ 558.171712][ T7119] ? io_wq_put_and_exit+0x36c/0x9d0 [ 558.176896][ T7119] handle_bug+0x16a/0x2a0 [ 558.181208][ T7119] exc_invalid_op+0x17/0x50 [ 558.185692][ T7119] asm_exc_invalid_op+0x1a/0x20 [ 558.190529][ T7119] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 558.196321][ T7119] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 df c2 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 8f a7 f1 fc 4d 85 ff 79 aa e8 e5 ac f1 fc 90 <0f> 0b 90 eb 9f e8 da ac f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 558.215924][ T7119] RSP: 0018:ffffc9000265f8c0 EFLAGS: 00010293 [ 558.221972][ T7119] RAX: 0000000000000000 RBX: ffff888038077000 RCX: ffffffff85182fb1 [ 558.229924][ T7119] RDX: ffff888030c1a540 RSI: ffffffff85182fbb RDI: ffff888030c1a540 [ 558.237888][ T7119] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 558.245838][ T7119] R10: ffffffffffffe85d R11: 0000000000000000 R12: 0000000100004c71 [ 558.253790][ T7119] R13: 0000000000001b58 R14: ffff888038077018 R15: ffffffffffffe85d [ 558.261753][ T7119] ? io_wq_put_and_exit+0x361/0x9d0 [ 558.266938][ T7119] ? io_wq_put_and_exit+0x36b/0x9d0 [ 558.272124][ T7119] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 558.277661][ T7119] ? __pfx___might_resched+0x10/0x10 [ 558.282930][ T7119] ? io_wq_set_exit_on_idle+0x156/0x290 [ 558.288462][ T7119] io_uring_clean_tctx+0x114/0x180 [ 558.293656][ T7119] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 558.299274][ T7119] ? percpu_counter_add_batch+0xb9/0x230 [ 558.304889][ T7119] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 558.311386][ T7119] io_uring_cancel_generic+0x798/0x7f0 [ 558.316827][ T7119] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 558.322786][ T7119] ? __pfx___file_ref_put+0x10/0x10 [ 558.327971][ T7119] ? __pfx_autoremove_wake_function+0x10/0x10 [ 558.334027][ T7119] ? fput+0xd9/0x100 [ 558.337905][ T7119] ? io_uring_unreg_ringfd+0xca/0x140 [ 558.343272][ T7119] do_exit+0x344/0x2ae0 [ 558.347419][ T7119] ? __pfx___might_resched+0x10/0x10 [ 558.352687][ T7119] ? __pfx_do_exit+0x10/0x10 [ 558.357265][ T7119] ? do_raw_spin_lock+0x128/0x260 [ 558.362274][ T7119] ? find_held_lock+0x2b/0x80 [ 558.366935][ T7119] ? get_signal+0x7e0/0x21e0 [ 558.371508][ T7119] do_group_exit+0xd5/0x2a0 [ 558.376000][ T7119] get_signal+0x1ec7/0x21e0 [ 558.380484][ T7119] ? __pfx_msr_read+0x10/0x10 [ 558.385146][ T7119] ? security_file_permission+0x76/0x210 [ 558.390770][ T7119] ? __pfx_get_signal+0x10/0x10 [ 558.395605][ T7119] ? __pfx_vfs_read+0x10/0x10 [ 558.400268][ T7119] ? find_held_lock+0x2b/0x80 [ 558.404941][ T7119] arch_do_signal_or_restart+0x91/0x7e0 [ 558.410468][ T7119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 558.416604][ T7119] ? fput+0x79/0x100 [ 558.420485][ T7119] exit_to_user_mode_loop+0x139/0x6f0 [ 558.425842][ T7119] ? rcu_is_watching+0x12/0xc0 [ 558.430593][ T7119] do_syscall_64+0x666/0x870 [ 558.435170][ T7119] ? clear_bhb_loop+0x40/0x90 [ 558.439834][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.445708][ T7119] RIP: 0033:0x7f169779de99 [ 558.450104][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.469704][ T7119] RSP: 002b:00007f169857f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.478126][ T7119] RAX: 0000000000018ff8 RBX: 00007f1697a25fa0 RCX: 00007f169779de99 [ 558.486089][ T7119] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 558.494041][ T7119] RBP: 00007f1697833eaf R08: 0000000000000000 R09: 0000000000000000 [ 558.502004][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.509957][ T7119] R13: 00007f1697a26038 R14: 00007f1697a25fa0 R15: 00007ffdc9d6f298 [ 558.517919][ T7119] [ 558.521119][ T7119] Kernel Offset: disabled [ 558.525429][ T7119] Rebooting in 86400 seconds..