last executing test programs: 25m45.526629226s ago: executing program 32 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000005c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpriority(0x2, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="182bfd8262e5b6dad2c9620000000540000000000000270000006b11100b0000000095000000000000000325a18ad6e8e042982b35507313a78594144d5e0680222821a95248c789a680984f9cb0a3c5f454e31965cdc4b1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x3}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 21m46.066803414s ago: executing program 1 (id=1041): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 21m45.698258691s ago: executing program 1 (id=1042): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000010c0)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x5, @local, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001040)) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000580)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x308}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0xa, {@empty, {[0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'wlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$kvm(0xffffffffffffff9c, 0x0, 0x82801, 0x0) 21m44.43626878s ago: executing program 1 (id=1046): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x7, 0x400}) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = getuid() r5 = getegid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x89d081, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}]}}) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 21m39.307297796s ago: executing program 1 (id=1066): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400013000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18090000feffffff0000000000000000183a00000100000000000000000000009500000000000000689fbff85518c49983ce555ec69e12"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = userfaultfd(0x80001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pidfd_send_signal(0xffffffffffffffff, 0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2008000001240400140000000014001680100001499407f94fbc93bb000800"/48], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000500)={{0x2, 0x4e23, @local}, {0x306, @random="0ee946646f82"}, 0x40, {0x2, 0x4e21, @empty}, 'macsec0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x2, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x40020000, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 21m37.858296826s ago: executing program 1 (id=1078): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0xf}, 0x1000000, 0x5, 0x7000, {0x2, 0x1}, 0x2, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690003"], 0x20}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x17, 0x7ff, 0x1, 0x800, 0x1, 0x7, "0b42d5faefc7a3b078a1f4e2d7cd86571768e1bccc3016"}}, 0x12f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000400)=0x7) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x401, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2f, 0x84, 0x3}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 21m36.583430851s ago: executing program 1 (id=1083): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xfffffffffffffee6, 0x24, 0xd0f, 0x70bd2c, 0x80, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$nfs(&(0x7f0000000000)='\\(\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x1, 0x0) (fail_nth: 2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) 21m21.172103942s ago: executing program 33 (id=1083): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xfffffffffffffee6, 0x24, 0xd0f, 0x70bd2c, 0x80, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$nfs(&(0x7f0000000000)='\\(\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x1, 0x0) (fail_nth: 2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) 11m16.719389067s ago: executing program 4 (id=3154): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0xfffe, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 11m15.566150039s ago: executing program 4 (id=3157): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x200001000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendmmsg(r5, &(0x7f0000002880)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x11e0}}], 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xfffffffffffffee6, 0x24, 0xd0f, 0x70bd2c, 0x80, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 11m14.230217276s ago: executing program 4 (id=3160): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000002000040001000000", 0x24) 11m13.75040845s ago: executing program 4 (id=3163): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000030701040700"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x60140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x78, 0x300, 0xf0, 0x0, 0x17c, 0x4, 0x2, {}, {}, {0x5, 0x2}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x1, 0x11c573e1, 0x4, 0x80, 0x0, 0xffff7ffd, 0x6, 0x0, 0x1, 0x7}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108040604"], 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000000)={&(0x7f0000000240)=[{0xfff, 0x800, 0x0, 0x0}, {0xf, 0x8801, 0x0, 0x0}, {0x87, 0x1, 0x0, 0x0}], 0x3}) 11m13.6358143s ago: executing program 4 (id=3164): futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000500), 0xf0000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x86042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), 0x0, 0x0, 0x2) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r7, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_usb_connect(0x2, 0x239, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270010000904", @ANYRESHEX=r4], 0x0) 11m8.514752105s ago: executing program 4 (id=3174): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x3, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000000000000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x0, 0xe, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xa20929, 0x0, '\x00', @string=&(0x7f00000000c0)=0x1}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x7, &(0x7f0000000040)={0x17, "81054084c89ea7f77d040b0000000000000000000000000000f000"}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r12, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 10m53.424621458s ago: executing program 34 (id=3174): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x3, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000000000000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x0, 0xe, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xa20929, 0x0, '\x00', @string=&(0x7f00000000c0)=0x1}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x7, &(0x7f0000000040)={0x17, "81054084c89ea7f77d040b0000000000000000000000000000f000"}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r12, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 8m12.297602931s ago: executing program 0 (id=3771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x1, 0x1e5}, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xfbea, 0x400, 0x20002, 0x17d}, &(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r3, r0, r1, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0}) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "9d2dd5537da4d8ec88d4ecc583049cf4"}, 0x1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x58}}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000100)={0xa, {0x4, 0x3, 0x1, 0x401}, {0xfff, 0x2, 0xffffffff, 0x1000}, {0xa47, 0x5}}) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001140)='team0\x00', 0x10) connect$inet(r7, &(0x7f0000001200)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8m11.114695894s ago: executing program 0 (id=3775): io_uring_setup(0x7a58, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfe33) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x500}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 8m10.002365469s ago: executing program 0 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 8m9.344954629s ago: executing program 0 (id=3781): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r2, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000040)="94", 0xfffffffffffffe72}, {0x0}], 0x2) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x204442, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m5.731941718s ago: executing program 0 (id=3792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x3, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0xb6, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0xfffffffd, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4]}, 0x45c) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "3b4ab2c1144068b2", "f9b100", "9df00001", "b327c6e40e868fa2"}, 0x28) 8m4.850859968s ago: executing program 0 (id=3794): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000540)=""/102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0xa060400) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = creat(0x0, 0x4b) close(r3) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f00000005c0)={&(0x7f00000003c0)=[{0x2, 0x0, 0xffffffffffff1d6c, 0xff, 0x2, 0x7, 0x7fffffffffffffff, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x2, 0xab5f, 0x5, 0x7fffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffb, 0x6, 0xea, 0x539bf20c, 0x280, 0x8}, {0x2, 0x0, 0x7, 0x7, 0x401, 0xfffffffffffffff6, 0x7fffffff, 0xcc9e}, {0x3, 0x0, 0x7, 0xec, 0xe91, 0x56, 0x2, 0x4}, {0x7, 0x0, 0x7, 0x1, 0x7, 0x7, 0x0, 0x1}], 0x6, 0x38, 0x1, 0xde}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 8m2.473542727s ago: executing program 35 (id=3794): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000540)=""/102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0xa060400) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = creat(0x0, 0x4b) close(r3) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f00000005c0)={&(0x7f00000003c0)=[{0x2, 0x0, 0xffffffffffff1d6c, 0xff, 0x2, 0x7, 0x7fffffffffffffff, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x2, 0xab5f, 0x5, 0x7fffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffb, 0x6, 0xea, 0x539bf20c, 0x280, 0x8}, {0x2, 0x0, 0x7, 0x7, 0x401, 0xfffffffffffffff6, 0x7fffffff, 0xcc9e}, {0x3, 0x0, 0x7, 0xec, 0xe91, 0x56, 0x2, 0x4}, {0x7, 0x0, 0x7, 0x1, 0x7, 0x7, 0x0, 0x1}], 0x6, 0x38, 0x1, 0xde}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 6m57.629984281s ago: executing program 2 (id=4012): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0xc, 0x2, 0x18, 0x3, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0xffff, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xd, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0xffffffff, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0xfff, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x5, 0x0, 0x2, 0x0, 0xc, 0x3, 0xb, 0xd, 0x8000, 0x5, 0x7, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000002, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x2, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000009, 0x3, 0x83, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0xfffffffc, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x0, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x5, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2850, 0x100, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0x3, 0x4, 0xffffffff, 0x7fff, 0xffff8a32, 0xfffffff8, 0xf, 0x5, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x408, 0x178, 0x178, 0x408, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x1a0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00', 0x4}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x2}, {0xffffffffffffffff, 0x4}, {0x0, 0x6, 0x1}, 0xe, 0x3}}}, {{@uncond, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip_vti0\x00', {0x7ffffffe, 0x8000, 0x5, 0x6, 0x2, 0x6, 0xce, 0x10001, 0xe0}, {0x8}}}, @common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e22], 0x5, 0x20, 0x8, 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x0, 0x4}, {0x1, 0x4}, {0x4, 0x3, 0x3}, 0x2, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x500) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2, 0x3}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m56.577766548s ago: executing program 2 (id=4015): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x8000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc0004}]}) ioprio_set$pid(0x2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC=r0, @ANYBLOB="010023010000340289e01c0000000800", @ANYRESDEC=r1, @ANYBLOB="ddabd6ee7ed08ac5810d3b45585180c67aab15b1552740b7c4b609039c42755761832cadef65032d11aba05d42d101119ed87bc0141d8adadbfe11d8cbe15b5bef7e8ad2ac48c6b7eb61261c4845c775fe92ec77efa418e13363867486c5ef"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'sit0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x84920391, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x88100) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0xc8b5, 0x0, 0x2, 0x8, 0x8, 0x7ff, 0x7, 0xe, 0x9, 0xfffff140, 0x0, 0x10, 0x8000000, 0x19, 0x19, {0x0, 0xc0c}, 0x7, 0x6}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x6, 0x2, 0x9, 0x5, 0x0, 0xff, {0x40, 0xfffffffffffffffd, 0x800000000000000b, 0x8, 0x5, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r8, r9, 0x4fd, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x29, 0x0, 0x1086cce0, 0xc36b, 0x73, 0x0, 0xd, 0x0, 0x0, 0x100, 0x7fffffff}}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) open_by_handle_at(r11, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r10], 0x406501) 6m53.55672534s ago: executing program 2 (id=4024): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0xd0ff}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x20, 0x0, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 6m52.519926759s ago: executing program 2 (id=4026): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="45d73164c62e5bb3ff21dce709ff50a45190f4f9b30eb734c97e993723ff1213e8df0f63190e2317f78ce53febeb6de8c1c4878305145972c12ae345328e0b3b8eb579b13901fe29bb2560d67934ea2ded7836d88d7def61c6b183cefb1bddca2eab65d3346314058455b9d20e578e3bca06ab", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 6m51.982405957s ago: executing program 2 (id=4028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0xffffffff, 0x27e}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents64(r7, &(0x7f0000000280)=""/153, 0x99) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 6m51.81342321s ago: executing program 2 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000004ff00001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 6m51.356688405s ago: executing program 36 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000004ff00001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 6m14.690212367s ago: executing program 8 (id=4152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010101, @local}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab080905"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m10.856417316s ago: executing program 8 (id=4163): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a3100000000050004000000000014000780"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r6) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100), 0x0}) 6m9.865676175s ago: executing program 8 (id=4167): r0 = syz_ublk_setup_io_uring(0x39e7, &(0x7f0000000240)={0x0, 0x4434, 0x80, 0x1024002, 0x4d}, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x22, 0x3788ddd56ac63d1f}, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000000104010100000000000000000a0000000500010002000000060006"], 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(r5, 0xc0207510, &(0x7f00000004c0)={r4}) ioctl$UBLK_U_CMD_STOP_DEV(r5, 0xc0207507, &(0x7f0000000540)={r8}) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_tables_names\x00') read$FUSE(r9, &(0x7f0000003480)={0x2020}, 0x2020) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6m5.599655889s ago: executing program 8 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x2, 0x27e}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x120, 0x1, {0x2}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0xff600000}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 6m5.258324801s ago: executing program 8 (id=4181): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x1b8, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xc6, 0x1, {{'sha1\x00'}, 0x3f0, "c1fc1176d858b905a1db4ff6cb8fc1f08589966e6e99a74a5f55ad725a1fe0dac791824a72fb9792a0f47d88e0dea44b765bb9c761ab943014be9e1e175df8adf35ac57e0121ada0c1320d3ef5a6b590b9ba9fff4a2475f0fa2502ec8fe225a6745191fe376e10b191eeb65be657050dddd68d5e0ea4c83ac887a61b5606"}}]}, 0x1b8}, 0x1, 0x1000000}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x7000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) 6m2.053080648s ago: executing program 8 (id=4194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(0xfffffffffffffffc, 0xffffff81, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206012b000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001240"], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 5m46.490039461s ago: executing program 37 (id=4194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(0xfffffffffffffffc, 0xffffff81, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206012b000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001240"], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 14.811143101s ago: executing program 3 (id=5249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xdc, 0x0, 0xc}) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x24, r8, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r10}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 14.379786205s ago: executing program 5 (id=5253): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0, 0x0, 0x0, 0xfffb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.895988827s ago: executing program 5 (id=5255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf25c526499e04000b0005000800030000000400280004000b0004000b00040028000a000600080211000001000004000b00080037000100000009000700051f859f350000000a000600ffffffffffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 11.961261382s ago: executing program 6 (id=5258): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x14d}}}, &(0x7f0000000480)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {0x0, 0xc0107520, 0x2000}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 11.591565617s ago: executing program 3 (id=5259): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000680)="68041e34312027c291cd902880a64a991697faf2673322080b619bba57f4773b1a84e7db2f63c19dec3134c43313d0cfdb42", 0x32}], 0x1, 0x0, 0x8, 0x1) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x5002, &(0x7f0000000200)={0x0, 0x6c89, 0x40, 0x1, 0x25}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000840)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) openat$mice(0xffffff9c, &(0x7f0000000040), 0x1af281) 11.398150029s ago: executing program 6 (id=5260): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) 11.164761532s ago: executing program 6 (id=5261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x3b, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) 9.718092533s ago: executing program 5 (id=5264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771", @ANYBLOB="66025af587910e95b57c36f83c6b943eed2c6d2979ce82a86d8defa5875ca21ce42ef40b66e0856e0b31b8da0878c68e9f956263fbdedbee30ea8a3a0d6ace97cd9b3dcd2a4ec9fe98cc1d46ce45834b3ce6a37bf1ff2c5810bc238890045745426ab1a341fd8b0f31011941ce3a59038f0d5e8d671577c2c476708b82f7aedab914"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x10000, 0xfb9, 0x2010008, 0xffffffffffffff03, 0x20000ceb, 0x4, 0x9, 0x10, 0x7, 0x8000000000000000, 0x8, 0x1, 0xabb, 0x7, 0x2, 0x400], 0x1, 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x0, 0xf}, {0x8, 0x3}}, [{0x8, 0xb, 0xa4}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYRESOCT=r1], 0x0) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) 8.78985171s ago: executing program 9 (id=5266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 8.635568475s ago: executing program 9 (id=5267): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650001000000000000000000000200"/39], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 8.042690972s ago: executing program 6 (id=5269): socket$inet6(0xa, 0x1, 0x84) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a661", 0x3f}, {&(0x7f0000000500)="f02ec70a0e8900b151d826894f", 0xd}], 0x2}, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) munmap$IORING_OFF_SQES(0x0, 0xc5059c) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.9604354s ago: executing program 9 (id=5270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442bfffe8000000000f5ffffffffffffff00aaff020000000000000000000000000001"], 0xfdef) 7.320682105s ago: executing program 3 (id=5272): syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 6.229344951s ago: executing program 3 (id=5273): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000010c0)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x5, @local, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001040)) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000580)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0xf801}}, @unspec=@CLASSIFY={0x28}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0xa, {@empty, {[0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'wlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$kvm(0xffffffffffffff9c, 0x0, 0x82801, 0x0) 6.047779282s ago: executing program 5 (id=5274): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) open_by_handle_at(r1, &(0x7f0000000240)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x2, 0xfffffffffffffffb, 0x3, 0x7fffffff, 0xa, 0x5}}, 0x2) msgctl$IPC_RMID(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/198, 0xc6}, {0x0}], 0x2, 0x7, 0x9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x9}}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x5, 0xfffffffe, 0x4, 0x4, 0x8008, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x1, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x2, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x100080, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x15, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x7, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd8, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000012c0)={0x8, &(0x7f0000000280)=[{0xc, 0x2, 0x6, 0x564c000}, {0x9, 0xb7, 0x2, 0x3}, {0x1, 0x1, 0x6, 0xe5}, {0x9, 0x1, 0x2, 0x8}, {0x9, 0x4, 0x6, 0xffff}, {0xfffb, 0x8, 0x1, 0x26f}, {0x101, 0x1a, 0x7, 0x5}, {0x800, 0x6, 0x1, 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, 0x0, 0x0) 5.121742574s ago: executing program 7 (id=5275): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) preadv(r0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001700)=""/49, 0x31}], 0x2, 0x4, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x4a3c2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.874541766s ago: executing program 9 (id=5276): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) (async) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="e2080000008d"], 0x3c}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182) (async) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4.851101427s ago: executing program 6 (id=5277): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101891, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x54) 3.873872642s ago: executing program 9 (id=5278): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85"], 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x128, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x110, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c02db7fc8d899cc5ec2cfc8a94dbb7bea0cc0c559a89b723a6c8a0b2f4f72c179a6088340e0"]}]}, 0x128}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000, 0x0, 0x7}}) 3.573641264s ago: executing program 5 (id=5279): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000480)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a2401014e5f3437ead72ce310489d18fc3183b0d9c9fddef763b9402e6105c6c1e137d7455a7a3d964e0d04a475666427e7208eaa0b9a02252d9acc910ec9c5a082f5a02576121a9fcaa2e63c53ebf2811a45845d9e01f49018be363573917dadebdca2ac64bf7c232ddf6fc6a07d0023074e6b2d49d100a24e52a3638f8a768caf4194df2947f1c46496e3fb0140f7378c1c104491b5809c80"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x142, 0x142, 0x4, [@datasec={0x3, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x17, 0x476}, {0x3, 0x9, 0x159}, {0x3, 0x67, 0xacc6}], "0581"}, @ptr={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x4}}, @union={0x2, 0x5, 0x0, 0x5, 0x1, 0x349, [{0x9, 0x3, 0x7fffffff}, {0x10, 0x5, 0xa6bb}, {0x5, 0x4, 0x2}, {0xa, 0x0, 0x3}, {0x0, 0x5, 0x2fc47522}]}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @enum64={0x3, 0x7, 0x0, 0x13, 0x1, 0xc, [{0x7, 0x0, 0x80}, {0x6, 0xffffffff, 0x1}, {0x3, 0xfffff001, 0xad9}, {0xa, 0x10001, 0x800}, {0x10, 0x7}, {0x8, 0x7fff, 0x2}, {0x4, 0x0, 0x9}]}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x10000, [{0x3, 0x2, 0x4}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x9}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000540)=""/218, 0x160, 0xda, 0x1, 0x4188ec8b}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000001400791048000000000069000c170000000095000000", @ANYRES16=r0, @ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, r1}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/215, 0x11c}], 0x1, 0x94, 0x0) read$FUSE(r2, &(0x7f0000001740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r3, 0x3, &(0x7f0000003780)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000240)=[0x7, 0x80004, 0x4, 0x7ff, 0x80000001], &(0x7f0000003800), 0xfaa7474328006791) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="200e0100000036a5fb914beeb2ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = dup2(r4, r4) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, 0x0, 0x0) r7 = io_uring_setup(0x937, &(0x7f0000000280)={0x0, 0x32b9, 0x80, 0x1, 0x35d}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540020000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32=r7, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 3.23231579s ago: executing program 6 (id=5280): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0020bc3ec4c4d8346c9e9db84cd1f22df509b26e607f4591c4623e80022be55f7a8a97580f699739d3c758b66d5809e437e79d4c03fd48bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.588516611s ago: executing program 7 (id=5281): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x48800) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x4192, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000880) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r2, 0x0, 0x3000000}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) 2.3981388s ago: executing program 7 (id=5282): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0xfffffff0, 0x0, 0x4000002}, 0x4000080) 2.395461321s ago: executing program 9 (id=5283): syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0xfe, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x5, 0x37}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xd, 0x1, 0x1}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x40, 0x4c, 0x10, 0x3}, 0x149, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x4, [{0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1407}}, {0xc8, &(0x7f00000002c0)=ANY=[@ANYBLOB="c803d1b7a721cfcf6fb073264b5ed14a60754c9c39adc46b78cd153d2e5dc29556234c6e3763f5ca685c399e50e2deceb179c7a2a0e29c5e32d1df3c74b06d49669e9e05626d9722da431974d7066945b7d9d5866c97c91ca6ee4de3a590d8bd3ac1956c94e8e86cf523b74a5fd348dadb58d33bcb3b27d9afd76c6b9f2c7b050fed9bd7cf05991e00075ec98e90658dc0a43fdd7be6a482fdc01c460e1d83b94e3deb31f8af2a9c6ff039dddd3d448cca62bbdfdcb54d6d75ae3659651717759baab57aa9d28981"]}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f3", @ANYRESOCT=r5, @ANYRES64=r0, @ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70b924, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x20004804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18001c00000000000000008d7df2800095000000040000006b21cf0f903814108dceba29bef163b9f419dcef2e23acb9789e9ee8274fb7893648044089c11b03c4ad526def9032c2f528d96c2c80fa14b17550ff1413afe07de72a516dea2a720fe8c8e844e16c48941e67d1bfa8984d44107e91dc6d64d02d40030055d6760142f938ffb0eb365f5b17b1776b1180348e709b59b5e5485f623ac1198d4e46da88e2b8a4fe03a90585d1532f2a8d2df2f067b9047b0113f3a1a73fc3cb0a386cef430f275b99d7c1cad84adaa8814769a8242684463c20bc82b519d48d20d2f22507f3"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) 2.299990357s ago: executing program 3 (id=5284): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x208000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r3, &(0x7f0000000600)="566fbd", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x1f00, 0xe, 0x1, 'queue0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(r5, r5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) 1.761642149s ago: executing program 7 (id=5285): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}]) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @val={0xfffffffffffffff5, 0x3, r7}, @val={0xc, 0x99, {0xe, 0x67}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x51) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000300, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) 1.112588779s ago: executing program 7 (id=5286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000740)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @alu={0x4, 0x0, 0xd, 0x0, 0x2, 0x10, 0x1}, @tail_call], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe808dff00000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) 866.44025ms ago: executing program 7 (id=5287): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfcf0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0xd0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000079000/0x1000)=nil) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c", 0x3, 0x4000800, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecfb, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x2, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}, 0xffffffffffffffff}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x600, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x58, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62a1, 0x40, 0x1, 0x281, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8be0, 0x8, 0x1, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x1e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x3, 0x28b, 0x0, 0x0}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 777.651583ms ago: executing program 3 (id=5288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x40) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="18020000000000010000000000000000850000009b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xf000, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x31, 0x8, {0x8, 0x4, "e75bcf47a88a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) close_range(r2, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80) 0s ago: executing program 5 (id=5289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x13c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS_MASK={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0xdc, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) kernel console output (not intermixed with test programs): ˆè«‡á‹™é¬•ç€“í„‘ì¡î…Œã…«ä»§æ ¡â¯æ•¸ä²®ì¢¾á¯¾ìŒé§±é ºëŸ‡æˆ‰è³Žìª–ç»±îŒí±ì°µèœ ä¯¬ï³á‡é¶šëª«ä€¡ë†å¢ì¼—骆疿邘죄뿡誤ï­ê¢¡ã‚œâ›—Ŷୱ簓ꚴ푽䜨㘫῿ଵ᷾ᒫêºã˜¿ìƒ«Ââ«à¯³ì— [ 1507.805920][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4797'. [ 1508.151621][T18381] usbhid 10-1:1.0: can't add hid device: -71 [ 1508.199652][T18381] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1508.362114][T18381] usb 10-1: USB disconnect, device number 28 [ 1509.447545][T24210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.454838][T24210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.623404][T13482] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1509.801937][T13482] usb 10-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1509.828603][T13482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.844956][T13482] usb 10-1: Product: syz [ 1509.858916][T13482] usb 10-1: Manufacturer: syz [ 1509.869106][T13482] usb 10-1: SerialNumber: syz [ 1510.329959][T24224] overlayfs: missing 'lowerdir' [ 1510.772855][T24210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.811585][T24210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.761889][T24224] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1511.831145][ T7832] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.887059][T13482] usb 10-1: 1:1 : bogus bTerminalLink 5 [ 1511.910710][ T7832] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.924264][T13482] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1512.272583][ T7832] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.329186][ T7832] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.475899][T13482] usb 10-1: USB disconnect, device number 29 [ 1512.560788][T22952] udevd[22952]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.915514][T13482] usb 4-1: USB disconnect, device number 15 [ 1513.028126][T13482] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1513.151036][T24253] syzkaller0: entered promiscuous mode [ 1513.173454][T24253] syzkaller0: entered allmulticast mode [ 1513.218652][T24255] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1513.227724][T24255] overlayfs: missing 'lowerdir' [ 1513.383849][T13482] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1513.567423][T13482] usb 4-1: Using ep0 maxpacket: 16 [ 1513.585027][T13482] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1513.607939][T13482] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1513.632593][T13482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.674368][T13482] usb 4-1: config 0 descriptor?? [ 1513.829516][T24261] /dev/sg0: Can't lookup blockdev [ 1514.305004][T13482] usbhid 4-1:0.0: can't add hid device: -71 [ 1514.322334][T24258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.329105][T13482] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1514.359853][T13482] usb 4-1: USB disconnect, device number 16 [ 1514.368835][T24258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.439216][T24258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.493867][T16563] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1514.534193][T24265] netlink: 'syz.5.4812': attribute type 2 has an invalid length. [ 1514.553574][T24265] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1514.656662][T24258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.691617][T24258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.731995][T16563] usb 7-1: Using ep0 maxpacket: 16 [ 1514.750027][T24258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1514.771575][T16563] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1514.780677][T16563] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.795495][T16563] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 1514.806744][T16563] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.823476][T16563] usb 7-1: Product: syz [ 1514.827701][T16563] usb 7-1: Manufacturer: syz [ 1514.832358][T16563] usb 7-1: SerialNumber: syz [ 1514.837369][T24258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1515.052991][T24258] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1515.166100][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.173198][ T7832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.261760][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.268865][ T7832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.565886][T16563] usb 7-1: USB disconnect, device number 6 [ 1515.950745][ T30] audit: type=1400 audit(1784144663.904:2730): avc: denied { create } for pid=24285 comm="syz.7.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1516.090432][ T30] audit: type=1400 audit(1784144663.954:2731): avc: denied { ioctl } for pid=24285 comm="syz.7.4817" path="socket:[95038]" dev="sockfs" ino=95038 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1516.635630][T24305] overlayfs: missing 'lowerdir' [ 1517.050967][T24306] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1517.228724][T24282] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4814'. [ 1517.610870][T24326] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4828'. [ 1517.905273][T16563] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1518.239543][T16563] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1518.380727][T16563] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1518.393448][T16563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.403162][T16563] usb 4-1: config 0 descriptor?? [ 1518.413060][T16563] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1519.056673][T24334] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1520.012089][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4834'. [ 1520.021442][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4834'. [ 1520.920154][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4839'. [ 1521.159275][T24373] hub 8-0:1.0: USB hub found [ 1521.540752][T24377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24377 comm=syz.7.4839 [ 1521.574966][ T2171] usb 4-1: USB disconnect, device number 17 [ 1521.613676][T21400] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1521.634866][T24373] hub 8-0:1.0: 1 port detected [ 1521.706888][ T30] audit: type=1400 audit(1784144669.654:2732): avc: denied { connect } for pid=24379 comm="syz.3.4843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1521.779796][ T30] audit: type=1400 audit(1784144669.714:2733): avc: denied { ioctl } for pid=24379 comm="syz.3.4843" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1521.843747][T21400] usb 7-1: Using ep0 maxpacket: 16 [ 1521.850917][T21400] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1521.881644][T21400] usb 7-1: config 0 has no interface number 0 [ 1521.919391][T21400] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1521.978281][T21400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.052461][T21400] usb 7-1: Product: syz [ 1522.083748][T21400] usb 7-1: Manufacturer: syz [ 1522.122160][T21400] usb 7-1: SerialNumber: syz [ 1522.186546][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4844'. [ 1522.197505][T21400] usb 7-1: config 0 descriptor?? [ 1522.210343][T21400] hub 7-1:0.132: bad descriptor, ignoring hub [ 1523.318364][T21400] hub 7-1:0.132: probe with driver hub failed with error -5 [ 1523.489555][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1523.582376][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1523.691299][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1523.770212][T24395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.777822][T24395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.786871][T24395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.796408][T24230] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1523.805079][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1523.824749][T24395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.843487][T24395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.854915][T24395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1523.865274][T24395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1523.877396][T24395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1523.900629][T20219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.907744][T20219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.926657][T20219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.933828][T20219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.943115][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1523.951769][T13870] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.962179][T13870] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.039195][T13870] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.062575][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1524.074370][T16325] Bluetooth: hci0: unexpected event for opcode 0x080d [ 1524.088084][T13870] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.101801][T24230] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1524.110852][T24230] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1524.122652][T24230] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1524.132524][T24230] usb 10-1: config 1 has no interface number 1 [ 1524.139659][T24230] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1524.152999][T24230] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.180848][T24230] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1524.190937][T24230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.201457][T24230] usb 10-1: Product: syz [ 1524.206535][T24230] usb 10-1: Manufacturer: syz [ 1524.212256][T24230] usb 10-1: SerialNumber: syz [ 1524.220679][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1524.328385][T24398] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1524.339077][T24398] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 1524.428528][ T30] audit: type=1400 audit(1784144672.384:2734): avc: denied { setopt } for pid=24408 comm="syz.3.4850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1524.576020][ T30] audit: type=1400 audit(1784144672.384:2735): avc: denied { ioctl } for pid=24408 comm="syz.3.4850" path="socket:[96566]" dev="sockfs" ino=96566 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1524.850019][T24415] netlink: 'syz.5.4852': attribute type 4 has an invalid length. [ 1525.050843][T24418] x_tables: duplicate underflow at hook 1 [ 1525.195036][T18381] usb 7-1: USB disconnect, device number 7 [ 1526.143220][T24230] usb 10-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1526.226550][T24230] usb 10-1: MIDIStreaming interface descriptor not found [ 1526.503204][T24230] usb 10-1: USB disconnect, device number 30 [ 1527.151492][T21740] udevd[21740]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.345704][T24448] netlink: 'syz.7.4858': attribute type 2 has an invalid length. [ 1527.370068][T24448] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4858'. [ 1527.522019][ T30] audit: type=1400 audit(1784144675.474:2736): avc: denied { setopt } for pid=24450 comm="syz.6.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1528.034033][ T30] audit: type=1400 audit(1784144675.504:2737): avc: denied { accept } for pid=24450 comm="syz.6.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1528.167981][T24458] loop5: detected capacity change from 0 to 7 [ 1528.335661][T24458] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1528.472452][T24458] loop5: partition table partially beyond EOD, truncated [ 1528.502529][T24467] input: syz0 as /devices/virtual/input/input102 [ 1528.580057][T24468] overlayfs: missing 'lowerdir' [ 1528.684846][T24469] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1528.972198][T24458] loop5: p1 size 618033127 extends beyond EOD, truncated [ 1529.903147][ T30] audit: type=1400 audit(1784144677.854:2738): avc: denied { write } for pid=24480 comm="syz.5.4872" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1529.903826][T24481] random: crng reseeded on system resumption [ 1529.926426][ T30] audit: type=1400 audit(1784144677.864:2739): avc: denied { open } for pid=24480 comm="syz.5.4872" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1529.972888][T24482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1529.994878][T22952] udevd[22952]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1530.573395][T13482] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1530.783552][T13482] usb 10-1: Using ep0 maxpacket: 16 [ 1531.257325][T18381] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1531.272764][T13482] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1531.295510][T13482] usb 10-1: config 0 has no interface number 0 [ 1531.304272][T24514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 1531.335173][T13482] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1531.390024][T13482] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1531.502014][T13482] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1531.530906][T13482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.551774][T13482] usb 10-1: Product: syz [ 1531.563580][T13482] usb 10-1: Manufacturer: syz [ 1531.575249][T18381] usb 7-1: Using ep0 maxpacket: 8 [ 1531.603279][T18381] usb 7-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice= 0.40 [ 1531.638439][T13482] usb 10-1: SerialNumber: syz [ 1531.642025][T18381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.682498][T13482] usb 10-1: config 0 descriptor?? [ 1531.716489][T24499] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1531.729541][T18381] usb 7-1: Product: ߸ᯰ품㫚ꪊ黻ꂄ勿ዠ쟳哺뽱렶ﻥꤳꢧ륔᫒⧇놶嘔扵æŸîµ“쩕뗡畽Բ巫ç­è«‹â«¦ã”ˆë¾…⬶비劳ä…熴ⳣ䤄⢗Ç訶갓ꦛꌸ뺛ǯïŒî¥“옰ê³å¹„⃶͓ë½ìƒ¡ç–žé‘鋑鶮Ÿ髄⓵㓿ሡﮮᦶ闼ㅟ蕬锕㼷 [ 1531.790996][T24499] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1531.914099][T18381] usb 7-1: Manufacturer: ᧵黚篯îºâˆ‚â³æª¦ä»ˆê‚疳䜞澇簃æœë è¼¸êµ‘ﾂ⫋볃‡蘰ﮘ鴳涮˨綈料ꗈ퓿䄘蜊ﱅíêšà¶ªãºí‰œã¶î°â ² [ 1532.342757][T24499] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1532.355624][T18381] usb 7-1: SerialNumber: ÑŽ [ 1532.373087][T24499] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1532.596510][T18381] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1532.648507][T18381] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1532.654030][T13482] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1532.722154][T18381] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1532.812205][T18381] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1532.850809][T13482] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 39 [ 1532.996089][T18381] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1533.597036][T18381] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1534.056769][T18381] usb 7-1: USB disconnect, device number 8 [ 1534.087306][T24562] No such timeout policy "syz1" [ 1534.556327][T22952] udevd[22952]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.816873][T24573] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1535.096950][T24567] loop5: detected capacity change from 0 to 2640 [ 1535.103608][T24567] buffer_io_error: 341 callbacks suppressed [ 1535.103618][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.117405][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.125275][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.133423][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.141242][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.147658][T24574] netlink: 'syz.6.4894': attribute type 3 has an invalid length. [ 1535.149152][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.157071][T24574] netlink: 'syz.6.4894': attribute type 3 has an invalid length. [ 1535.164738][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.180286][T24567] Buffer I/O error on dev loop5, logical block 0, async page read [ 1535.188148][T24567] ldm_validate_partition_table(): Disk read failed. [ 1535.192118][T24574] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1535.194835][T24567] loop5: unable to read partition table [ 1535.195017][T24567] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1535.244423][T24574] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1535.571002][T24235] usb 10-1: USB disconnect, device number 31 [ 1535.693454][T13482] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1535.727866][T24586] netlink: 'syz.7.4900': attribute type 1 has an invalid length. [ 1535.736666][T24584] FAULT_INJECTION: forcing a failure. [ 1535.736666][T24584] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.760536][T24586] netlink: 'syz.7.4900': attribute type 2 has an invalid length. [ 1535.774152][T24584] CPU: 0 UID: 0 PID: 24584 Comm: syz.9.4899 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.774176][T24584] Tainted: [L]=SOFTLOCKUP [ 1535.774183][T24584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1535.774194][T24584] Call Trace: [ 1535.774200][T24584] [ 1535.774208][T24584] dump_stack_lvl+0x100/0x190 [ 1535.774235][T24584] should_fail_ex.cold+0x5/0xa [ 1535.774257][T24584] should_failslab+0xc2/0x120 [ 1535.774279][T24584] __kmalloc_cache_noprof+0x91/0x6c0 [ 1535.774299][T24584] ? assoc_array_walk+0x1e1/0x5b0 [ 1535.774319][T24584] ? assoc_array_insert+0x262/0x32c0 [ 1535.774342][T24584] assoc_array_insert+0x262/0x32c0 [ 1535.774361][T24584] ? find_held_lock+0x2b/0x80 [ 1535.774397][T24584] ? __pfx_assoc_array_insert+0x10/0x10 [ 1535.774420][T24584] ? down_write+0x146/0x1f0 [ 1535.774438][T24584] ? __pfx_down_write+0x10/0x10 [ 1535.774457][T24584] __key_link_begin+0xf5/0x260 [ 1535.774476][T24584] __key_create_or_update+0x4ee/0xe30 [ 1535.774505][T24584] ? __pfx___key_create_or_update+0x10/0x10 [ 1535.774531][T24584] ? lookup_user_key+0x3f3/0x1300 [ 1535.774564][T24584] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1535.774592][T24584] key_create_or_update+0x42/0x60 [ 1535.774620][T24584] __do_sys_add_key+0x2e8/0x460 [ 1535.774639][T24584] ? __pfx___do_sys_add_key+0x10/0x10 [ 1535.774654][T24584] ? ksys_write+0x1ac/0x250 [ 1535.774687][T24584] do_syscall_64+0x115/0x870 [ 1535.774710][T24584] ? clear_bhb_loop+0x40/0x90 [ 1535.774731][T24584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.774748][T24584] RIP: 0033:0x7f598cf9de59 [ 1535.774770][T24584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.774787][T24584] RSP: 002b:00007f598de70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1535.774803][T24584] RAX: ffffffffffffffda RBX: 00007f598d225fa0 RCX: 00007f598cf9de59 [ 1535.774814][T24584] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 1535.774824][T24584] RBP: 00007f598de70090 R08: fffffffffffffffe R09: 0000000000000000 [ 1535.774834][T24584] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000002 [ 1535.774844][T24584] R13: 00007f598d226038 R14: 00007f598d225fa0 R15: 00007ffd547614a8 [ 1535.774867][T24584] [ 1535.844763][T13482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.181563][ T4976] ldm_validate_partition_table(): Disk read failed. [ 1536.198574][T13482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1536.413468][T24228] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1536.793698][ T2171] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1536.978942][ T2171] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1537.002598][ T2171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.028904][ T2171] usb 6-1: Product: syz [ 1537.043356][ T2171] usb 6-1: Manufacturer: syz [ 1537.078784][ T2171] usb 6-1: SerialNumber: syz [ 1537.148896][ T4976] Dev loop5: unable to read RDB block 0 [ 1537.155786][ T4976] loop5: unable to read partition table [ 1537.174154][T13482] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1537.185307][T13482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.218822][T13482] usb 4-1: Product: syz [ 1537.233385][T13482] usb 4-1: Manufacturer: syz [ 1537.243913][T13482] usb 4-1: SerialNumber: syz [ 1537.263120][T13482] usb 4-1: config 0 descriptor?? [ 1537.293392][T24228] usb 10-1: Using ep0 maxpacket: 16 [ 1537.300219][T24228] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1537.319601][T24228] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1537.335132][T24228] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1537.347650][T24228] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.357200][T24228] usb 10-1: Product: syz [ 1537.358549][ T2171] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 1537.361527][T24228] usb 10-1: Manufacturer: syz [ 1537.388629][T24228] usb 10-1: SerialNumber: syz [ 1537.429383][ T2171] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1537.558425][T24228] usb 10-1: 0:2 : does not exist [ 1537.569262][T24579] tmpfs: Unknown parameter 'mpol<,1' [ 1538.466931][T18381] usb 4-1: USB disconnect, device number 18 [ 1538.514489][T13482] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1538.528115][T24228] usb 10-1: unit 9 not found! [ 1538.546295][ T2171] usb 6-1: USB disconnect, device number 13 [ 1538.567229][T24228] usb 10-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1538.600470][T24228] usb 10-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1538.627006][T24228] usb 10-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1538.648511][T24228] usb 10-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1538.688112][T24228] usb 10-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1538.698670][T13482] usb 8-1: Using ep0 maxpacket: 16 [ 1538.717931][T13482] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.734734][T24228] usb 10-1: 4:0: cannot get min/max values for control 10 (id 4) [ 1538.747267][T13482] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.774971][T13482] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1538.813944][T24228] usb 10-1: USB disconnect, device number 32 [ 1538.840381][T13482] usb 8-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1538.943098][T13482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.998680][T13482] usb 8-1: config 0 descriptor?? [ 1539.928647][ T30] audit: type=1400 audit(1784144687.884:2740): avc: denied { read } for pid=24622 comm="syz.6.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1540.038541][ T30] audit: type=1400 audit(1784144687.934:2741): avc: denied { map } for pid=24622 comm="syz.6.4912" path="/dev/video2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1540.684520][T24629] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4913'. [ 1540.757594][T13482] usbhid 8-1:0.0: can't add hid device: -71 [ 1540.778536][T13482] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1540.818731][T13482] usb 8-1: USB disconnect, device number 2 [ 1541.612798][ T30] audit: type=1400 audit(1784144689.564:2742): avc: denied { ioctl } for pid=24622 comm="syz.6.4912" path="socket:[97860]" dev="sockfs" ino=97860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1542.651197][ T30] audit: type=1400 audit(1784144690.604:2743): avc: denied { ioctl } for pid=24651 comm="syz.9.4918" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1542.775405][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4916'. [ 1542.827219][T24653] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1543.205061][T21601] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1543.671998][T21601] usb 6-1: Using ep0 maxpacket: 16 [ 1543.683952][T21601] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1543.695274][T21601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.705036][T21601] usb 6-1: Product: syz [ 1543.709289][T21601] usb 6-1: Manufacturer: syz [ 1543.715491][T21601] usb 6-1: SerialNumber: syz [ 1543.736103][ T30] audit: type=1400 audit(1784144691.684:2744): avc: denied { read write } for pid=24672 comm="syz.6.4923" dev="sockfs" ino=97107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1543.786126][T21601] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1543.795020][T21601] r8152-cfgselector 6-1: config 0 descriptor?? [ 1543.945775][T13482] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1544.128202][T13482] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.184348][T13482] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1544.219489][T13482] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1544.234383][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4927'. [ 1544.247555][T13482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.269234][T13482] usb 10-1: Product: syz [ 1544.276402][T13482] usb 10-1: Manufacturer: syz [ 1544.282849][T13482] usb 10-1: SerialNumber: syz [ 1544.323917][T13482] usb 10-1: config 0 descriptor?? [ 1544.355889][T16325] block nbd0: Receive control failed (result -107) [ 1544.433523][T21601] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1544.763559][T13482] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1544.763697][T21601] usb 4-1: Using ep0 maxpacket: 16 [ 1544.967704][T21601] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1545.043555][T21601] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.069466][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1545.100326][T21601] usb 4-1: config 1 interface 2 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1545.103624][T13482] usb 7-1: Using ep0 maxpacket: 16 [ 1545.152885][T21601] usb 4-1: config 1 interface 2 has no altsetting 1 [ 1545.170918][T13482] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.175736][T21601] usb 4-1: string descriptor 0 read error: -22 [ 1545.221197][T13482] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.259449][T13482] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1545.284992][T13482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.314821][T13482] usb 7-1: Product: syz [ 1545.314958][T21601] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 1545.352781][T13482] usb 7-1: Manufacturer: syz [ 1545.371892][T13482] usb 7-1: SerialNumber: syz [ 1545.397802][T13482] usb 7-1: 0:2 : does not exist [ 1545.411860][T13482] usb 7-1: unit 9 not found! [ 1545.441629][T21601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.446444][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.456409][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.547034][T21601] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1545.617872][ T30] audit: type=1400 audit(1784144693.574:2745): avc: denied { accept } for pid=24688 comm="syz.6.4928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1545.692062][T24230] usb 7-1: USB disconnect, device number 9 [ 1545.728609][T24697] FAULT_INJECTION: forcing a failure. [ 1545.728609][T24697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.742084][T24697] CPU: 1 UID: 0 PID: 24697 Comm: syz.9.4930 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.742112][T24697] Tainted: [L]=SOFTLOCKUP [ 1545.742118][T24697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1545.742127][T24697] Call Trace: [ 1545.742134][T24697] [ 1545.742142][T24697] dump_stack_lvl+0x100/0x190 [ 1545.742169][T24697] should_fail_ex.cold+0x5/0xa [ 1545.742200][T24697] _copy_from_user+0x2e/0xd0 [ 1545.742223][T24697] __sys_bpf+0x2f5/0x4e80 [ 1545.742257][T24697] ? __pfx___sys_bpf+0x10/0x10 [ 1545.742284][T24697] ? find_held_lock+0x2b/0x80 [ 1545.742310][T24697] ? get_pid_task+0xfc/0x250 [ 1545.742335][T24697] ? get_pid_task+0xfc/0x250 [ 1545.742370][T24697] ? find_held_lock+0x2b/0x80 [ 1545.742402][T24697] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1545.742429][T24697] ? find_held_lock+0x2b/0x80 [ 1545.742456][T24697] ? ksys_write+0x190/0x250 [ 1545.742481][T24697] ? ksys_write+0x190/0x250 [ 1545.742523][T24697] ? fput+0x79/0x100 [ 1545.742546][T24697] ? __x64_sys_bpf+0xce/0x140 [ 1545.742562][T24697] __x64_sys_bpf+0xce/0x140 [ 1545.742580][T24697] ? do_syscall_64+0x90/0x870 [ 1545.742607][T24697] do_syscall_64+0x115/0x870 [ 1545.742631][T24697] ? clear_bhb_loop+0x40/0x90 [ 1545.742653][T24697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.742672][T24697] RIP: 0033:0x7f598cf9de59 [ 1545.742687][T24697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.742704][T24697] RSP: 002b:00007f598de70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1545.742723][T24697] RAX: ffffffffffffffda RBX: 00007f598d225fa0 RCX: 00007f598cf9de59 [ 1545.742735][T24697] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000001c [ 1545.742746][T24697] RBP: 00007f598de70090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.742757][T24697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.742767][T24697] R13: 00007f598d226038 R14: 00007f598d225fa0 R15: 00007ffd547614a8 [ 1545.742792][T24697] [ 1545.959169][T13482] r8152-cfgselector 6-1: USB disconnect, device number 14 [ 1546.233889][T24699] Falling back ldisc for ttyS3. [ 1549.836597][T24718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.425546][T24718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.445996][T21601] usb 4-1: USB disconnect, device number 19 [ 1550.556748][ T30] audit: type=1400 audit(1784144698.514:2746): avc: denied { connect } for pid=24715 comm="syz.9.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1550.643786][ T30] audit: type=1400 audit(1784144698.534:2747): avc: denied { getopt } for pid=24715 comm="syz.9.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1550.668011][T24235] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1550.702323][T24718] vlan2: entered promiscuous mode [ 1550.834865][T24235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.841135][T24718] batadv0: entered promiscuous mode [ 1550.913398][T24230] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1550.975125][T24235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.985166][T24235] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1550.995247][T24235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.011281][T24235] usb 8-1: config 0 descriptor?? [ 1551.146310][T24230] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.530164][T24230] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1551.547134][T24230] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1551.557853][T24230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.566396][T24230] usb 7-1: Product: syz [ 1551.570878][T24230] usb 7-1: Manufacturer: syz [ 1551.575737][T24230] usb 7-1: SerialNumber: syz [ 1551.589472][T24230] usb 7-1: config 0 descriptor?? [ 1551.879473][T24724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.961401][T24724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.225792][T24745] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1553.255183][T13482] IPVS: starting estimator thread 0... [ 1553.337708][T24743] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4939'. [ 1553.383453][T24746] IPVS: using max 51 ests per chain, 122400 per kthread [ 1553.436068][T24743] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4939'. [ 1553.505460][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.528118][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.578771][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.607693][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.640814][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.657487][ T30] audit: type=1326 audit(1784144701.594:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1553.685434][T24750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.706889][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.716034][T24235] pyra 0003:1E7D:2CF6.004C: unknown main item tag 0x0 [ 1553.723703][T24750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.749480][T24235] pyra 0003:1E7D:2CF6.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 1553.769716][ T30] audit: type=1326 audit(1784144701.604:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1553.770268][T18381] usb 7-1: USB disconnect, device number 10 [ 1553.801672][ T30] audit: type=1326 audit(1784144701.604:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1553.972879][ T30] audit: type=1326 audit(1784144701.604:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1554.004244][T24228] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1554.082926][T24230] usb 10-1: USB disconnect, device number 33 [ 1554.150485][ T30] audit: type=1326 audit(1784144701.604:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1554.196374][T24228] usb 6-1: Using ep0 maxpacket: 16 [ 1554.206746][ T30] audit: type=1326 audit(1784144701.604:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1554.255449][T24235] pyra 0003:1E7D:2CF6.004C: couldn't init struct pyra_device [ 1554.263050][T24228] usb 6-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 1554.274808][ T2171] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1554.274870][T24235] pyra 0003:1E7D:2CF6.004C: couldn't install mouse [ 1554.297373][T24228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1554.306803][ T30] audit: type=1326 audit(1784144701.604:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1554.354183][T24235] pyra 0003:1E7D:2CF6.004C: probe with driver pyra failed with error -71 [ 1554.379116][T24235] usb 8-1: USB disconnect, device number 3 [ 1554.389783][ T30] audit: type=1326 audit(1784144701.604:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1554.423079][ T30] audit: type=1326 audit(1784144701.604:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24748 comm="syz.9.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598cf9de59 code=0x7ffc0000 [ 1554.473733][T24228] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1554.484064][T24228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.495788][T24228] usb 6-1: Product: syz [ 1554.500022][T24228] usb 6-1: Manufacturer: syz [ 1554.505452][ T2171] usb 4-1: Using ep0 maxpacket: 32 [ 1554.510630][T24228] usb 6-1: SerialNumber: syz [ 1554.545609][ T2171] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1554.577442][ T2171] usb 4-1: config 0 has no interface number 0 [ 1554.583653][T18381] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1554.608723][ T2171] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1554.642459][T24228] usb 6-1: 0:2 : does not exist [ 1554.656447][T24228] usb 6-1: unit 9 not found! [ 1554.741399][ T2171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.749586][T18381] usb 7-1: Using ep0 maxpacket: 8 [ 1554.817936][ T2171] usb 4-1: Product: syz [ 1554.825618][T18381] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1554.837483][ T2171] usb 4-1: Manufacturer: syz [ 1554.851619][T18381] usb 7-1: config 179 has no interface number 0 [ 1554.866099][ T2171] usb 4-1: SerialNumber: syz [ 1554.899852][T18381] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1554.928468][ T2171] usb 4-1: config 0 descriptor?? [ 1554.998455][T18381] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1555.076157][ T2171] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1555.095250][T18381] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1555.114655][ T2171] usb 4-1: selecting invalid altsetting 1 [ 1555.169475][T24230] usb 6-1: USB disconnect, device number 15 [ 1555.180412][ T2171] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1555.193818][T18381] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1555.213496][T24228] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1555.239002][T24754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4945'. [ 1555.254491][ T2171] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1555.280441][T18381] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1555.306358][ T2171] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1555.371198][ T2171] usb 4-1: media controller created [ 1555.376641][T18381] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1555.400897][T24228] usb 8-1: Using ep0 maxpacket: 8 [ 1555.404241][T18381] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1555.430737][ T2171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1555.453093][T18381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.486148][T24228] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1555.504122][T24228] usb 8-1: config 179 has no interface number 0 [ 1555.519533][T24228] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1555.572015][T24228] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1555.579260][T18381] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input103 [ 1555.663275][T24228] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1555.666173][ T2171] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1555.682560][ T4961] input input103: unable to receive magic message: -110 [ 1555.717392][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 1555.717403][ T30] audit: type=1326 audit(1784144703.674:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.4944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f911e35e68e code=0x7ffc0000 [ 1555.771708][T24228] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1555.803434][T24228] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1555.848737][ T4961] input input103: unable to receive magic message: -32 [ 1555.865378][ T2171] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1555.914261][ T30] audit: type=1326 audit(1784144703.774:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.4944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f911e39de59 code=0x7ffc0000 [ 1555.945847][T24228] usb 8-1: config 179 interface 65 has no altsetting 0 [ 1555.953412][ T2171] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1555.954856][T24228] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1556.027819][T24228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.375150][T24230] usb 7-1: USB disconnect, device number 11 [ 1556.375255][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1556.389663][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1556.417415][T24228] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input104 [ 1556.643838][ T4961] input input104: unable to receive magic message: -110 [ 1556.675698][ T2171] usb 4-1: USB disconnect, device number 20 [ 1556.758200][ T4961] input input104: unable to receive magic message: -32 [ 1556.853762][T21750] input input104: unable to receive magic message: -32 [ 1557.101754][ T4961] input input104: unable to receive magic message: -32 [ 1557.336496][ T4961] input input104: unable to receive magic message: -32 [ 1557.396884][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.419670][ T4961] input input104: unable to receive magic message: -32 [ 1557.435033][T24761] syz_tun: entered allmulticast mode [ 1557.444831][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.465089][T24230] usb 8-1: USB disconnect, device number 4 [ 1557.470965][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1557.471010][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1557.623467][T24226] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1557.783431][T24226] usb 7-1: Using ep0 maxpacket: 16 [ 1557.815258][T24226] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1557.836616][T24226] usb 7-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 1557.858422][T24226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.962247][T24226] usb 7-1: Product: syz [ 1558.025277][T24226] usb 7-1: Manufacturer: syz [ 1558.040650][T24226] usb 7-1: SerialNumber: syz [ 1558.563679][T24230] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1558.714971][T24230] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.740347][T24230] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1558.797157][T24230] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1558.815643][T24230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.825349][T24230] usb 8-1: Product: syz [ 1558.830396][T24230] usb 8-1: Manufacturer: syz [ 1558.836267][T24235] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1558.845788][T24230] usb 8-1: SerialNumber: syz [ 1558.882272][T24230] usb 8-1: config 0 descriptor?? [ 1559.025362][T24235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.054404][T24235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.085220][T24235] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1559.111562][T24235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.140761][T24235] usb 4-1: config 0 descriptor?? [ 1559.408033][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4960'. [ 1559.561318][T24235] cm6533_jd 0003:0D8C:0022.004D: unbalanced delimiter at end of report description [ 1559.596541][T24235] cm6533_jd 0003:0D8C:0022.004D: parse failed [ 1559.612166][T24235] cm6533_jd 0003:0D8C:0022.004D: probe with driver cm6533_jd failed with error -22 [ 1559.621564][T24230] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1559.630087][T24805] No such timeout policy "syz1" [ 1560.572722][T18381] usb 8-1: USB disconnect, device number 5 [ 1560.619815][T24235] usb 4-1: USB disconnect, device number 21 [ 1560.629599][T24226] usb 7-1: Invalid firmware size=18. [ 1560.653513][T24230] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1560.677880][T24226] usb 7-1: USB disconnect, device number 12 [ 1560.687870][T24230] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1560.720810][T24230] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1560.733748][T24230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.761760][T24230] usb 10-1: Product: syz [ 1560.769380][T24230] usb 10-1: Manufacturer: syz [ 1560.779112][T24230] usb 10-1: SerialNumber: syz [ 1561.073453][T24235] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1561.761173][T24230] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1562.171900][T24230] usb 10-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1562.202455][T24230] usb 10-1: found format II with max.bitrate = 4, frame size=7372 [ 1562.304681][T24230] usb 10-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1562.313266][T24230] usb 10-1: found format II with max.bitrate = 4, frame size=7372 [ 1562.323707][T24235] usb 6-1: Using ep0 maxpacket: 8 [ 1562.421114][T24235] usb 6-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 1562.451670][T24235] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1562.496676][T24235] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1562.538116][T24235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.607532][T24830] netlink: 'syz.3.4969': attribute type 1 has an invalid length. [ 1562.615758][T24830] netlink: 'syz.3.4969': attribute type 2 has an invalid length. [ 1562.786573][T24230] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1563.256087][ T2171] usb 6-1: USB disconnect, device number 16 [ 1563.546661][T24230] usb 10-1: USB disconnect, device number 34 [ 1563.804733][T22952] udevd[22952]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.916596][ T30] audit: type=1400 audit(1784144711.874:2854): avc: denied { listen } for pid=24837 comm="syz.5.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1563.991503][ T30] audit: type=1400 audit(1784144711.874:2855): avc: denied { accept } for pid=24837 comm="syz.5.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1564.032728][T16325] Bluetooth: hci3: unexpected event for opcode 0x0004 [ 1564.761073][T24844] x_tables: unsorted underflow at hook 3 [ 1564.849182][T24851] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4965'. [ 1564.918646][T24851] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4965'. [ 1564.998988][T24855] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1565.268976][T24858] trusted_key: encrypted_key: insufficient parameters specified [ 1565.468378][T24862] netlink: 'syz.6.4974': attribute type 10 has an invalid length. [ 1565.476368][T24862] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4974'. [ 1565.823386][T18381] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1565.893855][ T2171] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1565.981487][T18381] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1566.018361][T18381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.063988][T18381] usb 7-1: Product: syz [ 1566.070249][ T2171] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.083689][T18381] usb 7-1: Manufacturer: syz [ 1566.091265][ T2171] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1566.101888][T18381] usb 7-1: SerialNumber: syz [ 1566.114212][T18381] usb 7-1: config 0 descriptor?? [ 1566.123085][ T2171] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1566.138144][T18381] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1566.152181][ T2171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.183490][ T2171] usb 8-1: Product: syz [ 1566.190567][T18381] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1566.203341][ T2171] usb 8-1: Manufacturer: syz [ 1566.211233][ T2171] usb 8-1: SerialNumber: syz [ 1566.219979][T18381] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1566.240432][T18381] usb 7-1: media controller created [ 1566.251151][ T2171] usb 8-1: config 0 descriptor?? [ 1566.352202][T18381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.083030][ T30] audit: type=1400 audit(1784144714.694:2856): avc: denied { ioctl } for pid=24863 comm="syz.3.4976" path="socket:[99566]" dev="sockfs" ino=99566 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1567.305737][T18381] DVB: Unable to find symbol mt352_attach() [ 1567.383053][T18381] DVB: Unable to find symbol nxt6000_attach() [ 1567.439464][T18381] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1568.088589][T16325] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1568.101097][T16325] Bluetooth: hci3: Injecting HCI hardware error event [ 1568.119754][T16325] Bluetooth: hci3: hardware error 0x00 [ 1568.572252][T18381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input105 [ 1568.989040][T18381] dvb-usb: schedule remote query interval to 1000 msecs. [ 1569.016797][T16563] usb 8-1: USB disconnect, device number 6 [ 1569.884739][T18381] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1569.895367][T18381] dvb-usb: bulk message failed: -22 (7/0) [ 1569.901116][T18381] dvb-usb: bulk message failed: -22 (7/0) [ 1569.909738][T18381] usb 7-1: USB disconnect, device number 13 [ 1570.093021][T18381] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1570.132607][T24887] loop5: detected capacity change from 0 to 7 [ 1570.163184][T24887] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1570.201461][T24887] loop5: partition table partially beyond EOD, truncated [ 1570.526056][T24887] loop5: p1 size 618033127 extends beyond EOD, truncated [ 1570.643727][T16325] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1570.693948][T22952] udevd[22952]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1571.004319][T24905] tunl0: entered promiscuous mode [ 1571.048987][T24905] netlink: 'syz.6.4989': attribute type 4 has an invalid length. [ 1571.065208][T24235] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1571.091058][T24905] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4989'. [ 1571.205908][T24915] netlink: 'syz.3.4991': attribute type 8 has an invalid length. [ 1571.418666][T24235] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 1571.429837][T24235] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 1571.620815][T24920] input: syz0 as /devices/virtual/input/input106 [ 1571.863495][T18381] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1571.904577][T24924] xfrm0 speed is unknown, defaulting to 1000 [ 1572.053380][T18381] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.201032][T18381] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1572.214396][T18381] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1572.251918][T18381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.634542][T18381] usb 4-1: Product: syz [ 1572.708643][T18381] usb 4-1: Manufacturer: syz [ 1572.713361][T18381] usb 4-1: SerialNumber: syz [ 1572.728186][T18381] usb 4-1: config 0 descriptor?? [ 1573.753999][T13482] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1573.793465][T24230] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1573.891507][T24235] usb 6-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 1573.911174][T13482] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1573.923742][T24235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.946439][T13482] usb 7-1: not running at top speed; connect to a high speed hub [ 1573.964852][T24943] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4999'. [ 1573.973393][T24230] usb 8-1: Using ep0 maxpacket: 16 [ 1573.990313][T24235] usb 6-1: can't set config #1, error -71 [ 1574.001673][T13482] usb 7-1: config 0 has an invalid interface number: 175 but max is 0 [ 1574.013561][T24230] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1574.028324][T13482] usb 7-1: config 0 has no interface number 0 [ 1574.036310][T24230] usb 8-1: config 0 has no interface number 0 [ 1574.046350][T24235] usb 6-1: USB disconnect, device number 17 [ 1574.055762][T13482] usb 7-1: config 0 interface 175 has no altsetting 0 [ 1574.072472][T24230] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1574.091071][T13482] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1574.104002][T24230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.122591][T13482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.139122][T24230] usb 8-1: Product: syz [ 1574.263982][T24230] usb 8-1: Manufacturer: syz [ 1574.332347][T13482] usb 7-1: Product: syz [ 1574.344888][T24230] usb 8-1: SerialNumber: syz [ 1574.349743][T13482] usb 7-1: Manufacturer: syz [ 1574.362642][T13482] usb 7-1: SerialNumber: syz [ 1574.376428][T24230] usb 8-1: config 0 descriptor?? [ 1574.379214][T24230] hub 8-1:0.132: bad descriptor, ignoring hub [ 1574.413727][T24948] netlink: 'syz.5.5000': attribute type 1 has an invalid length. [ 1574.421647][T24948] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.5000'. [ 1574.431632][T24948] netlink: 2060 bytes leftover after parsing attributes in process `syz.5.5000'. [ 1574.607850][T24230] hub 8-1:0.132: probe with driver hub failed with error -5 [ 1574.714399][T13482] usb 7-1: config 0 descriptor?? [ 1575.076318][T24952] vlan1: left allmulticast mode [ 1575.081275][T24952] veth0_vlan: left allmulticast mode [ 1575.129671][T24952] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1575.437761][T24954] netlink: 'syz.9.5003': attribute type 1 has an invalid length. [ 1575.464089][T13482] ums-alauda 7-1:0.175: USB Mass Storage device detected [ 1575.474970][T24945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1575.491453][T16563] usb 4-1: USB disconnect, device number 22 [ 1575.499693][T24945] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1575.591400][T24954] bond2: entered promiscuous mode [ 1575.609801][T13482] ums-alauda 7-1:0.175: This device (07b4,010a,0102 S 06 P 01) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1575.609801][T13482] Please send a copy of this message to and [ 1575.646134][T24954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1575.682878][T24956] bond2: (slave bridge2): making interface the new active one [ 1575.714130][T24956] bridge2: entered promiscuous mode [ 1575.751973][T13482] usb 7-1: USB disconnect, device number 14 [ 1575.763983][T24956] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1575.795033][T24945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1575.830744][T24945] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1575.956304][T24945] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1575.978082][T24945] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1576.010050][T24945] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1576.025747][T24945] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1576.160700][T24973] FAULT_INJECTION: forcing a failure. [ 1576.160700][T24973] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.426728][T24973] CPU: 1 UID: 0 PID: 24973 Comm: syz.5.5007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.426758][T24973] Tainted: [L]=SOFTLOCKUP [ 1576.426767][T24973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1576.426778][T24973] Call Trace: [ 1576.426785][T24973] [ 1576.426792][T24973] dump_stack_lvl+0x100/0x190 [ 1576.426820][T24973] should_fail_ex.cold+0x5/0xa [ 1576.426844][T24973] should_failslab+0xc2/0x120 [ 1576.426865][T24973] __kmalloc_noprof+0xfc/0x820 [ 1576.426885][T24973] ? lsm_blob_alloc+0x68/0x90 [ 1576.426909][T24973] lsm_blob_alloc+0x68/0x90 [ 1576.426927][T24973] security_key_alloc+0x34/0x310 [ 1576.426951][T24973] key_alloc+0x876/0x1310 [ 1576.426985][T24973] ? __pfx_key_alloc+0x10/0x10 [ 1576.427016][T24973] __key_create_or_update+0x720/0xe30 [ 1576.427046][T24973] ? __pfx___key_create_or_update+0x10/0x10 [ 1576.427074][T24973] ? lookup_user_key+0x3f3/0x1300 [ 1576.427109][T24973] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1576.427139][T24973] key_create_or_update+0x42/0x60 [ 1576.427168][T24973] __do_sys_add_key+0x2e8/0x460 [ 1576.427189][T24973] ? __pfx___do_sys_add_key+0x10/0x10 [ 1576.427206][T24973] ? ksys_write+0x1ac/0x250 [ 1576.427240][T24973] do_syscall_64+0x115/0x870 [ 1576.427265][T24973] ? clear_bhb_loop+0x40/0x90 [ 1576.427288][T24973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.427306][T24973] RIP: 0033:0x7f911e39de59 [ 1576.427323][T24973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.427340][T24973] RSP: 002b:00007f911f235028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1576.427358][T24973] RAX: ffffffffffffffda RBX: 00007f911e625fa0 RCX: 00007f911e39de59 [ 1576.427369][T24973] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 1576.427380][T24973] RBP: 00007f911f235090 R08: fffffffffffffffe R09: 0000000000000000 [ 1576.427391][T24973] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000002 [ 1576.427402][T24973] R13: 00007f911e626038 R14: 00007f911e625fa0 R15: 00007ffccdf98a78 [ 1576.427427][T24973] [ 1577.243816][T13482] usb 8-1: USB disconnect, device number 7 [ 1577.653680][T13482] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1578.104217][T13482] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.215384][T13482] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1578.322757][T13482] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1578.425867][T13482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.478454][T13482] usb 6-1: Product: syz [ 1578.511913][T13482] usb 6-1: Manufacturer: syz [ 1578.543813][T13482] usb 6-1: SerialNumber: syz [ 1578.577190][T13482] usb 6-1: config 0 descriptor?? [ 1579.693807][T16563] usb 6-1: USB disconnect, device number 18 [ 1579.767367][ T30] audit: type=1400 audit(1784144727.724:2857): avc: denied { read } for pid=25005 comm="syz.3.5018" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1580.292257][T25024] netlink: 'syz.7.5020': attribute type 4 has an invalid length. [ 1580.896081][T25027] loop5: detected capacity change from 0 to 7 [ 1580.926064][T25027] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1580.957502][T25027] loop5: partition table partially beyond EOD, truncated [ 1581.013696][T25027] loop5: p1 size 618033127 extends beyond EOD, truncated [ 1581.172216][T22952] udevd[22952]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1581.183013][T13482] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1581.267362][T25033] syzkaller0: entered promiscuous mode [ 1581.302214][T25033] syzkaller0: entered allmulticast mode [ 1581.347065][T13482] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1581.375236][T13482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.418900][T13482] usb 8-1: config 0 descriptor?? [ 1581.646688][T25029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5024'. [ 1581.983030][T25042] xt_nfacct: accounting object `syz1' does not exist [ 1582.079051][T25044] netlink: 'syz.3.5028': attribute type 8 has an invalid length. [ 1583.078833][T25042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25042 comm=syz.7.5024 [ 1583.449225][ T30] audit: type=1326 audit(1784144731.404:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1583.534710][T25057] netlink: 'syz.3.5029': attribute type 12 has an invalid length. [ 1583.547497][T25057] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1584.044440][ T30] audit: type=1326 audit(1784144731.404:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1584.072741][T13482] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1584.117048][T13482] [drm:udl_init] *ERROR* Selecting channel failed [ 1584.214245][ T30] audit: type=1326 audit(1784144731.404:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1584.275825][T13482] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1584.317053][T13482] [drm] Initialized udl on minor 2 [ 1584.628649][ T30] audit: type=1326 audit(1784144731.404:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1584.733869][T13482] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1584.817671][T13482] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1585.740841][ T30] audit: type=1326 audit(1784144731.404:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1585.807567][T13482] usb 8-1: USB disconnect, device number 8 [ 1585.829802][T24230] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1585.870013][ T30] audit: type=1326 audit(1784144731.434:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1585.923714][T24228] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1585.970144][T24230] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1586.027999][ T30] audit: type=1326 audit(1784144731.434:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1586.236489][T24228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.489995][T24228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1586.506521][ T30] audit: type=1326 audit(1784144731.434:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1586.559530][T24228] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1586.570654][T24228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.579071][ T30] audit: type=1326 audit(1784144731.404:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1586.607360][T24228] usb 4-1: Product: syz [ 1586.612507][T24228] usb 4-1: Manufacturer: syz [ 1586.617450][T24228] usb 4-1: SerialNumber: syz [ 1586.628978][T24228] usb 4-1: config 0 descriptor?? [ 1586.675387][ T30] audit: type=1326 audit(1784144731.434:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1586.726659][T25079] dlm: non-version read from control device 0 [ 1587.690868][ T2171] usb 4-1: USB disconnect, device number 23 [ 1588.012164][ T30] audit: type=1326 audit(1784144731.434:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1588.051210][ T30] audit: type=1326 audit(1784144731.434:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1588.209704][ T30] audit: type=1326 audit(1784144731.434:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1588.307373][T25083] dvmrp8: entered allmulticast mode [ 1588.710970][ T30] audit: type=1326 audit(1784144731.434:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25050 comm="syz.6.5030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa2b359de59 code=0x7ffc0000 [ 1589.433745][T13482] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1589.764091][T13482] usb 10-1: Using ep0 maxpacket: 16 [ 1589.782057][T13482] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1589.811617][T13482] usb 10-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1589.942352][T25102] loop5: detected capacity change from 0 to 2640 [ 1589.961902][T25102] buffer_io_error: 344 callbacks suppressed [ 1589.961972][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1589.970387][T13482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.033152][T13482] usb 10-1: config 0 descriptor?? [ 1590.185813][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.199282][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.210402][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.219228][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.227607][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.325579][T25107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25107 comm=syz.7.5046 [ 1590.685364][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.693448][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.701370][T25102] ldm_validate_partition_table(): Disk read failed. [ 1590.709185][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.717925][T25102] Buffer I/O error on dev loop5, logical block 0, async page read [ 1590.729373][T25102] Dev loop5: unable to read RDB block 0 [ 1590.737659][T25102] loop5: unable to read partition table [ 1590.744734][T25102] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1590.883364][T25102] netlink: 'syz.6.5045': attribute type 3 has an invalid length. [ 1590.893237][T25102] netlink: 'syz.6.5045': attribute type 3 has an invalid length. [ 1591.155916][T13482] usbhid 10-1:0.0: can't add hid device: -71 [ 1591.162016][T13482] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1591.186384][T13482] usb 10-1: USB disconnect, device number 35 [ 1592.571146][T13482] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1592.743417][T13482] usb 8-1: Using ep0 maxpacket: 16 [ 1592.756817][T13482] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1592.837082][T16563] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1592.866416][T13482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.890983][T13482] usb 8-1: Product: syz [ 1592.963967][T25129] overlayfs: missing 'lowerdir' [ 1593.068982][T25130] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1593.306956][T13482] usb 8-1: Manufacturer: syz [ 1593.314869][T13482] usb 8-1: SerialNumber: syz [ 1593.327644][T16563] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.361325][T13482] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1593.395230][T16563] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1593.454353][T16563] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1593.493177][T16563] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.700152][T16563] usb 7-1: Product: syz [ 1593.735796][T16563] usb 7-1: Manufacturer: syz [ 1593.760055][T16563] usb 7-1: SerialNumber: syz [ 1593.806560][T25115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.845298][T16563] usb 7-1: config 0 descriptor?? [ 1593.870056][T25115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.975930][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1593.975946][ T30] audit: type=1400 audit(1784144741.934:2883): avc: denied { write } for pid=25114 comm="syz.7.5048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1594.037187][T25115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.056081][T25115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.119357][T18381] usb 7-1: USB disconnect, device number 15 [ 1596.778883][T13482] snd-usb-audio 8-1:222.0: probe with driver snd-usb-audio failed with error -110 [ 1597.069598][T18381] usb 8-1: USB disconnect, device number 9 [ 1597.081911][T22952] udevd[22952]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1598.192798][T25161] ip6erspan0: entered allmulticast mode [ 1598.683607][T24230] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1598.854292][T24230] usb 10-1: Using ep0 maxpacket: 32 [ 1598.875104][T24230] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1598.908317][ T30] audit: type=1400 audit(1784144746.864:2884): avc: denied { listen } for pid=25165 comm="syz.6.5056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1598.914154][T24230] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1599.013658][T24230] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1599.038390][T24230] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1599.070581][T24230] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1599.085466][T24230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.313161][T25171] netlink: 'syz.6.5062': attribute type 1 has an invalid length. [ 1599.314226][T24230] usb 10-1: Product: syz [ 1599.321011][T25171] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.5062'. [ 1599.343568][T25171] netlink: 2060 bytes leftover after parsing attributes in process `syz.6.5062'. [ 1599.501380][T24230] usb 10-1: Manufacturer: syz [ 1599.522302][T24230] usb 10-1: SerialNumber: syz [ 1599.562781][T24230] usb 10-1: config 0 descriptor?? [ 1599.849525][T16563] usb 10-1: USB disconnect, device number 36 [ 1600.002965][T25177] syzkaller0: entered promiscuous mode [ 1600.008536][T25177] syzkaller0: entered allmulticast mode [ 1602.323459][T16563] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1602.842352][T16563] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.090754][T16563] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1603.979478][T16563] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1603.989634][T16563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.052667][T16563] usb 6-1: Product: syz [ 1604.123412][T16563] usb 6-1: Manufacturer: syz [ 1604.205794][T16563] usb 6-1: config 0 descriptor?? [ 1604.262989][T16563] usb 6-1: can't set config #0, error -71 [ 1604.353765][T16563] usb 6-1: USB disconnect, device number 19 [ 1604.513911][T13482] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1604.555719][T25195] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1604.694460][T13482] usb 4-1: Using ep0 maxpacket: 8 [ 1604.718562][T13482] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1604.753518][T13482] usb 4-1: config 179 has no interface number 0 [ 1604.778476][T13482] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1604.805533][T13482] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1604.827866][T13482] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1605.079227][T13482] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1605.149135][T13482] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1605.252318][T13482] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1605.459271][T13482] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1605.543736][T13482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.588590][T25226] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5074'. [ 1605.638094][T13482] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input107 [ 1605.754145][ T4961] input input107: unable to receive magic message: -110 [ 1605.841919][ T4961] input input107: unable to receive magic message: -32 [ 1605.909173][ T4961] input input107: unable to receive magic message: -32 [ 1605.945629][ T4961] input input107: unable to receive magic message: -32 [ 1605.969869][ T4961] input input107: unable to receive magic message: -32 [ 1606.014555][ T4961] input input107: unable to receive magic message: -32 [ 1606.064207][T13482] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1606.277664][T25230] lo: entered allmulticast mode [ 1606.462307][T13482] usb 6-1: Using ep0 maxpacket: 16 [ 1606.524336][T13482] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1606.549290][T13482] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 1606.606002][T13482] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1606.638899][T13482] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1606.686385][T13482] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1606.707313][T13482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.735894][T13482] usb 6-1: Product: syz [ 1606.771522][T13482] usb 6-1: Manufacturer: syz [ 1606.810544][T13482] usb 6-1: SerialNumber: syz [ 1606.848908][T13482] usb 6-1: config 0 descriptor?? [ 1606.886131][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.892472][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.925659][ T2171] usb 4-1: USB disconnect, device number 24 [ 1606.925701][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1607.567205][T13482] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input108 [ 1608.920382][T25248] FAULT_INJECTION: forcing a failure. [ 1608.920382][T25248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.023649][T25248] CPU: 1 UID: 0 PID: 25248 Comm: syz.7.5082 Tainted: G L syzkaller #0 PREEMPT(full) [ 1609.023676][T25248] Tainted: [L]=SOFTLOCKUP [ 1609.023682][T25248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1609.023692][T25248] Call Trace: [ 1609.023698][T25248] [ 1609.023705][T25248] dump_stack_lvl+0x100/0x190 [ 1609.023731][T25248] should_fail_ex.cold+0x5/0xa [ 1609.023757][T25248] _copy_from_user+0x2e/0xd0 [ 1609.023779][T25248] ____sys_sendmsg+0x1d1/0xbe0 [ 1609.023806][T25248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1609.023832][T25248] ? __pfx__kstrtoull+0x10/0x10 [ 1609.023863][T25248] ___sys_sendmsg+0x190/0x1e0 [ 1609.023888][T25248] ? __pfx____sys_sendmsg+0x10/0x10 [ 1609.023922][T25248] ? find_held_lock+0x2b/0x80 [ 1609.023964][T25248] __sys_sendmmsg+0x20c/0x440 [ 1609.023986][T25248] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1609.024003][T25248] ? ksys_write+0x190/0x250 [ 1609.024046][T25248] ? fput+0x79/0x100 [ 1609.024064][T25248] ? ksys_write+0x1ac/0x250 [ 1609.024088][T25248] ? __pfx_ksys_write+0x10/0x10 [ 1609.024117][T25248] __x64_sys_sendmmsg+0x9c/0x100 [ 1609.024136][T25248] ? lockdep_hardirqs_on+0x78/0x100 [ 1609.024162][T25248] do_syscall_64+0x115/0x870 [ 1609.024187][T25248] ? clear_bhb_loop+0x40/0x90 [ 1609.024209][T25248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.024228][T25248] RIP: 0033:0x7fc8ba19de59 [ 1609.024243][T25248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.024260][T25248] RSP: 002b:00007fc8bb104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1609.024278][T25248] RAX: ffffffffffffffda RBX: 00007fc8ba426180 RCX: 00007fc8ba19de59 [ 1609.024290][T25248] RDX: 0000000000000001 RSI: 0000200000002880 RDI: 0000000000000008 [ 1609.024301][T25248] RBP: 00007fc8bb104090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.024312][T25248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.024323][T25248] R13: 00007fc8ba426218 R14: 00007fc8ba426180 R15: 00007ffec8983c18 [ 1609.024353][T25248] [ 1609.366665][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5078'. [ 1609.567284][T16563] usb 6-1: USB disconnect, device number 20 [ 1609.753587][T24229] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1609.913560][T24229] usb 10-1: Using ep0 maxpacket: 16 [ 1609.927125][T24229] usb 10-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 1610.150397][T24229] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1610.174125][T24229] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1610.196856][T24229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.222819][T24229] usb 10-1: Product: syz [ 1610.234417][T24229] usb 10-1: Manufacturer: syz [ 1610.245982][T24229] usb 10-1: SerialNumber: syz [ 1610.252166][T25256] trusted_key: encrypted_key: master key parameter 'ߢží¬sãõ¦nø£Ì°²ÁFBjÓ¢ãÙ¯rŸ-èË’H' is invalid [ 1610.270152][T24229] usb 10-1: 0:2 : does not exist [ 1610.283601][ T2171] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1610.285272][T24229] usb 10-1: unit 9 not found! [ 1610.399044][T25257] netlink: 'syz.7.5085': attribute type 10 has an invalid length. [ 1610.407370][T25257] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5085'. [ 1610.598537][ T2171] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.714636][ T2171] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1610.771449][T24229] usb 10-1: USB disconnect, device number 37 [ 1611.128946][ T2171] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1611.163085][ T30] audit: type=1326 audit(1784144759.114:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.6.5088" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b359de59 code=0x0 [ 1611.202713][T22952] udevd[22952]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1611.245322][ T2171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.317725][ T2171] usb 4-1: Product: syz [ 1611.394159][ T2171] usb 4-1: Manufacturer: syz [ 1611.465026][ T2171] usb 4-1: SerialNumber: syz [ 1612.336929][ T2171] usb 4-1: config 0 descriptor?? [ 1612.438630][T25274] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5092'. [ 1612.525136][T16563] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1612.542143][T21601] libceph: connect (1)[c::]:6789 error -101 [ 1612.548865][T21601] libceph: mon0 (1)[c::]:6789 connect error [ 1612.565419][ T30] audit: type=1400 audit(1784144760.514:2886): avc: denied { setopt } for pid=25277 comm="syz.9.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1612.672113][T25281] binder: 25280:25281 ioctl 4018620d 0 returned -22 [ 1612.717580][T16563] usb 6-1: Using ep0 maxpacket: 16 [ 1612.727058][T25271] xfrm0 speed is unknown, defaulting to 1000 [ 1612.734890][T25264] ceph: No mds server is up or the cluster is laggy [ 1612.745684][ T2171] usb 4-1: can't set config #0, error -71 [ 1612.767869][ T2171] usb 4-1: USB disconnect, device number 25 [ 1612.820798][T25285] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5094'. [ 1613.406595][T25296] netlink: 'syz.9.5097': attribute type 1 has an invalid length. [ 1613.414743][T25296] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.5097'. [ 1613.424517][T25296] netlink: 2060 bytes leftover after parsing attributes in process `syz.9.5097'. [ 1614.663208][T25310] loop5: detected capacity change from 0 to 7 [ 1614.749064][T16563] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1614.763062][T25310] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1614.789459][T16563] usb 6-1: no configurations [ 1614.790737][T25319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1614.795834][T25310] loop5: partition table partially beyond EOD, [ 1614.828892][T16563] usb 6-1: can't read configurations, error -22 [ 1614.857928][T25310] truncated [ 1614.877816][T25310] loop5: p1 size 618033127 extends beyond EOD, truncated [ 1615.171489][T22952] udevd[22952]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1616.351401][T25344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5111'. [ 1616.484216][T16563] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1616.887435][T16563] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1616.969051][T16563] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1617.065463][T16563] usb 6-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1617.104611][T16563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.157568][T16563] usb 6-1: config 0 descriptor?? [ 1617.350755][T25350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1617.632510][ T30] audit: type=1400 audit(1784144765.584:2887): avc: denied { read } for pid=25351 comm="syz.9.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1617.672093][T25353] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1617.678627][T25353] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1617.687017][T25353] vhci_hcd vhci_hcd.0: Device attached [ 1617.728717][ T30] audit: type=1400 audit(1784144765.654:2888): avc: denied { setopt } for pid=25351 comm="syz.9.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1618.358206][T25354] vhci_hcd: connection closed [ 1618.554331][T20219] vhci_hcd vhci_hcd.9: stop threads [ 1618.613658][T20219] vhci_hcd vhci_hcd.9: release socket [ 1618.645528][T20219] vhci_hcd vhci_hcd.9: disconnect device [ 1619.407941][ T30] audit: type=1400 audit(1784144766.674:2889): avc: denied { write } for pid=25338 comm="syz.5.5109" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1619.934554][ T2171] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1620.306048][ T2171] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1620.343615][ T2171] usb 8-1: not running at top speed; connect to a high speed hub [ 1620.420262][ T2171] usb 8-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 1620.487323][ T2171] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1620.628845][ T2171] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1620.639169][ T2171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.648154][ T2171] usb 8-1: Product: syz [ 1620.653335][ T2171] usb 8-1: Manufacturer: syz [ 1620.658288][ T2171] usb 8-1: SerialNumber: syz [ 1620.683421][T18381] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1620.843943][T18381] usb 4-1: Using ep0 maxpacket: 16 [ 1620.852689][T18381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.864982][T18381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.880793][T18381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.897087][T24228] usb usb52-port1: attempt power cycle [ 1621.106060][T18381] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1621.284338][T18381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.296023][ T2171] usb 8-1: invalid UAC_HEADER (v1) [ 1621.301900][T16563] usbhid 6-1:0.0: can't add hid device: -71 [ 1621.310321][T16563] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1621.329987][T16563] usb 6-1: USB disconnect, device number 23 [ 1621.355589][T18381] usb 4-1: config 0 descriptor?? [ 1621.442309][T18381] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input109 [ 1621.475410][ T4961] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1621.514031][T24228] usb usb52-port1: unable to enumerate USB device [ 1621.535232][ T4961] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1621.609096][ T2171] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1621.640317][ T30] audit: type=1400 audit(1784144769.594:2890): avc: denied { checkpoint_restore } for pid=25373 comm="syz.3.5120" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1621.706883][ T4961] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1621.738222][T21755] udevd[21755]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1621.756584][ T2171] usb 8-1: USB disconnect, device number 10 [ 1621.774345][T24228] usb 4-1: USB disconnect, device number 26 [ 1622.295297][T25397] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1622.404260][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5122'. [ 1622.956456][T25414] trusted_key: encrypted_key: insufficient parameters specified [ 1623.053552][T25420] netlink: 'syz.7.5131': attribute type 10 has an invalid length. [ 1623.061438][T25420] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5131'. [ 1623.083908][T24228] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1623.333364][ T2171] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1623.444777][T24228] usb 7-1: Using ep0 maxpacket: 8 [ 1623.455554][T24228] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1623.577809][ T2171] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1623.619314][ T2171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.656058][ T2171] usb 8-1: Product: syz [ 1623.676323][ T2171] usb 8-1: Manufacturer: syz [ 1623.699882][ T2171] usb 8-1: SerialNumber: syz [ 1623.785230][ T2171] usb 8-1: config 0 descriptor?? [ 1623.826966][T24228] usb 7-1: config 179 has no interface number 0 [ 1623.841860][T24228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1623.850663][ T2171] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1623.853616][T24228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1623.873958][T24228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1623.885433][T24228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1623.898843][T24228] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1623.917175][T24228] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1623.924243][T24228] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1623.933392][T24228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.937330][ T2171] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1624.024115][ T2171] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1624.131677][ T2171] usb 8-1: media controller created [ 1624.515410][T25428] lo: entered allmulticast mode [ 1624.928700][ T2171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1625.907982][T24228] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input110 [ 1625.928886][ T4961] input input110: unable to receive magic message: -71 [ 1625.950473][T24228] usb 7-1: USB disconnect, device number 16 [ 1625.956767][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1625.956811][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1626.030979][ T2171] DVB: Unable to find symbol mt352_attach() [ 1626.037382][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5133'. [ 1626.268487][ T2171] DVB: Unable to find symbol nxt6000_attach() [ 1626.305703][ T2171] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1626.624773][ T2171] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input111 [ 1626.689688][T25459] vlan1: entered allmulticast mode [ 1626.708394][ T2171] dvb-usb: schedule remote query interval to 1000 msecs. [ 1626.737815][T25459] veth0_vlan: entered allmulticast mode [ 1626.764939][ T2171] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1626.819089][T25465] tunl0: left promiscuous mode [ 1626.840284][ T2171] dvb-usb: bulk message failed: -22 (7/0) [ 1627.138097][ T2171] dvb-usb: bulk message failed: -22 (7/0) [ 1627.140079][T25472] loop5: detected capacity change from 0 to 7 [ 1627.188326][T25472] Dev loop5: unable to read RDB block 7 [ 1627.213582][T25472] loop5: unable to read partition table [ 1627.217848][ T2171] usb 8-1: USB disconnect, device number 11 [ 1627.244358][T25472] loop5: partition table beyond EOD, truncated [ 1627.374756][T25479] netlink: 'syz.5.5145': attribute type 8 has an invalid length. [ 1627.406595][T25472] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1627.695282][ T2171] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1628.053699][T24228] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1628.213584][T24228] usb 7-1: Using ep0 maxpacket: 8 [ 1628.223211][T25504] No such timeout policy "syz1" [ 1628.242006][T24228] usb 7-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 1628.281641][T24228] usb 7-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1628.318987][T24228] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1628.348538][T24228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.363877][T25508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5155'. [ 1628.448423][T25510] sctp: [Deprecated]: syz.7.5156 (pid 25510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1628.448423][T25510] Use struct sctp_sack_info instead [ 1628.541610][T25517] sctp: [Deprecated]: syz.7.5156 (pid 25517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1628.541610][T25517] Use struct sctp_sack_info instead [ 1628.574026][ T30] audit: type=1400 audit(1784144784.523:2891): avc: denied { ioctl } for pid=25509 comm="syz.7.5156" path="socket:[102587]" dev="sockfs" ino=102587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1629.143244][T13482] usb 7-1: USB disconnect, device number 17 [ 1630.587555][T25519] netlink: 'syz.9.5160': attribute type 1 has an invalid length. [ 1630.596722][T25519] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.5160'. [ 1630.607946][T25519] netlink: 2060 bytes leftover after parsing attributes in process `syz.9.5160'. [ 1632.030764][T24228] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1633.284409][T24228] usb 7-1: Using ep0 maxpacket: 16 [ 1633.296287][T24228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.323431][T24228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.348164][T24228] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1633.388141][T24228] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1633.417018][T24228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.462632][T24228] usb 7-1: config 0 descriptor?? [ 1634.697210][T24228] usbhid 7-1:0.0: can't add hid device: -71 [ 1634.703238][T24228] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1634.718107][T24228] usb 7-1: USB disconnect, device number 18 [ 1634.798608][ T30] audit: type=1400 audit(1784144790.753:2892): avc: denied { read } for pid=25559 comm="syz.6.5172" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1634.854827][ T30] audit: type=1400 audit(1784144790.783:2893): avc: denied { ioctl } for pid=25559 comm="syz.6.5172" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1636.134058][T25576] dlm: non-version read from control device 0 [ 1637.644528][T25579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.783578][T25593] netlink: 'syz.5.5169': attribute type 23 has an invalid length. [ 1639.453692][T21601] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1639.604790][T21601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1639.616399][T21601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1640.513339][T21601] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1640.522418][T21601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.543198][T21601] usb 7-1: config 0 descriptor?? [ 1641.643700][ T30] audit: type=1400 audit(1784144797.543:2894): avc: denied { watch } for pid=25606 comm="syz.5.5185" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1643.548896][T25625] trusted_key: encrypted_key: insufficient parameters specified [ 1643.694526][T21601] usbhid 7-1:0.0: can't add hid device: -71 [ 1643.738066][ T30] audit: type=1400 audit(1784144799.683:2895): avc: denied { create } for pid=25624 comm="syz.7.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1643.764758][T21601] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1643.866104][T21601] usb 7-1: USB disconnect, device number 19 [ 1644.064606][T25637] netlink: 'syz.5.5194': attribute type 1 has an invalid length. [ 1644.072415][T25637] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.5194'. [ 1644.081922][T25637] netlink: 2060 bytes leftover after parsing attributes in process `syz.5.5194'. [ 1644.181451][ T30] audit: type=1400 audit(1784144799.693:2896): avc: denied { connect } for pid=25624 comm="syz.7.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1644.325332][ T30] audit: type=1400 audit(1784144799.693:2897): avc: denied { bind } for pid=25624 comm="syz.7.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1644.508859][T25641] netlink: 'syz.6.5195': attribute type 1 has an invalid length. [ 1644.561447][T25641] netlink: 'syz.6.5195': attribute type 2 has an invalid length. [ 1644.828003][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5198'. [ 1645.067799][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1645.623625][T13482] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1645.753311][T25675] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 1645.761190][T25675] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5204'. [ 1645.770613][T25675] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.5204'. [ 1646.193365][T13482] usb 6-1: Using ep0 maxpacket: 16 [ 1646.214017][T13482] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1646.370206][T25685] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1646.687305][T13482] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1646.715428][T13482] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1646.750187][T13482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.812094][T13482] usb 6-1: config 0 descriptor?? [ 1647.233058][T25659] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1647.250964][ T30] audit: type=1400 audit(1784144803.203:2898): avc: denied { write } for pid=25660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1647.426998][T25704] netlink: 'syz.3.5211': attribute type 8 has an invalid length. [ 1647.577197][T24228] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1647.681060][ T30] audit: type=1400 audit(1784144803.633:2899): avc: denied { write } for pid=25709 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1647.772488][T24228] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1647.804966][T24228] usb 7-1: config 1 has no interface number 0 [ 1647.820066][T25715] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5214'. [ 1647.830788][T24228] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1647.851968][T24228] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1647.875684][T25717] loop5: detected capacity change from 0 to 7 [ 1647.898619][T24228] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1647.935069][T24228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.943490][T25717] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1647.960230][T25717] loop5: partition table partially beyond EOD, truncated [ 1647.971022][T24228] usb 7-1: Product: syz [ 1647.981365][T24228] usb 7-1: Manufacturer: syz [ 1648.114120][T24228] usb 7-1: SerialNumber: syz [ 1648.123415][T18381] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1648.132721][T25717] loop5: p1 size 618033127 extends beyond EOD, truncated [ 1648.137903][T25700] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1648.148135][T25700] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1648.161472][ T5271] veth1_vlan: left promiscuous mode [ 1648.306209][T18381] usb 4-1: Using ep0 maxpacket: 8 [ 1648.655018][T24228] usb 7-1: Error in usbnet_get_endpoints (-22) [ 1648.701124][T18381] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1648.711541][T18381] usb 4-1: config 179 has no interface number 0 [ 1648.719999][T18381] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1648.735288][T18381] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1648.747051][T18381] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1648.781295][T18381] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1648.885247][T13482] usbhid 6-1:0.0: can't add hid device: -71 [ 1648.927300][T13482] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1648.958086][T18381] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1648.995258][T13482] usb 6-1: USB disconnect, device number 24 [ 1649.007259][T22952] udevd[22952]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1649.022816][T25725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5217'. [ 1649.052710][T21601] usb 7-1: USB disconnect, device number 20 [ 1649.160914][T18381] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1649.223523][ T30] audit: type=1400 audit(1784144805.173:2900): avc: denied { read } for pid=25728 comm="syz.7.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1649.255411][T18381] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1649.294720][T18381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.431676][T18381] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input112 [ 1649.563649][ T5806] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1649.673511][ T4961] input input112: unable to receive magic message: -110 [ 1649.712982][ T4961] input input112: unable to receive magic message: -32 [ 1649.741092][T25748] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1649.769337][T21755] input input112: unable to receive magic message: -32 [ 1649.806350][ T5806] usb 10-1: Using ep0 maxpacket: 16 [ 1649.823488][T13482] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1650.123843][ T5806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.208829][T24228] usb 4-1: USB disconnect, device number 27 [ 1650.208930][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1650.237603][ T30] audit: type=1400 audit(1784144806.163:2901): avc: denied { write } for pid=25726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1650.263321][ T5806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.316775][T13482] usb 7-1: Using ep0 maxpacket: 16 [ 1650.350291][T25754] fuse: Unknown parameter 'group_id00000000000000000000' [ 1650.392548][T13482] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1650.536332][T13482] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1650.703816][T13482] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1650.822726][T13482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.955619][T13482] usb 7-1: Product: syz [ 1651.016549][T13482] usb 7-1: Manufacturer: syz [ 1651.083457][T13482] usb 7-1: SerialNumber: syz [ 1651.194567][ T5806] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.208290][ T5806] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1651.217741][ T5806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.224693][T13482] usb 7-1: 0:2 : does not exist [ 1651.235611][ T5806] usb 10-1: config 0 descriptor?? [ 1651.264458][T13482] usb 7-1: unit 9 not found! [ 1651.348323][ T30] audit: type=1400 audit(1784144807.303:2902): avc: denied { write } for pid=25759 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1651.358410][ T5806] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input113 [ 1651.428701][T13482] usb 7-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1651.440290][T13482] usb 7-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1651.466258][T13482] usb 7-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1651.493009][T13482] usb 7-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1651.522269][T13482] usb 7-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1651.531680][ T4961] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1651.555639][T13482] usb 7-1: 4:0: cannot get min/max values for control 10 (id 4) [ 1651.587806][ T4961] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1651.678872][T21755] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1651.720112][T13482] usb 7-1: USB disconnect, device number 21 [ 1651.758855][ T4961] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1651.884055][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5229'. [ 1651.894269][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5229'. [ 1651.951924][T22952] udevd[22952]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1652.704452][ T4961] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1652.859688][ T4961] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1652.934182][ T4961] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1653.906828][T24229] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1654.153429][T24229] usb 8-1: Using ep0 maxpacket: 8 [ 1654.220378][T21601] usb 10-1: USB disconnect, device number 38 [ 1654.272386][T24229] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1654.285463][T24229] usb 8-1: config 179 has no interface number 0 [ 1654.303594][T24229] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1654.471524][T25802] netlink: 84 bytes leftover after parsing attributes in process `syz.9.5236'. [ 1654.480909][T24229] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1654.512926][T25803] binder: BINDER_SET_CONTEXT_MGR already set [ 1654.520757][T24229] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1654.565681][T24229] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1654.579048][T25803] binder: 25800:25803 ioctl 4018620d 200000000040 returned -16 [ 1654.599930][T24229] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1654.618826][T24229] usb 8-1: config 179 interface 65 has no altsetting 0 [ 1654.648090][T24229] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1654.720272][T25807] fuse: Bad value for 'user_id' [ 1654.725346][T25807] fuse: Bad value for 'user_id' [ 1654.788960][T24229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.702684][T24229] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input114 [ 1655.904678][ T4961] input input114: unable to receive magic message: -71 [ 1655.949514][T24229] usb 8-1: USB disconnect, device number 12 [ 1655.955813][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1655.955860][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1656.197405][T25828] netlink: 'syz.5.5242': attribute type 1 has an invalid length. [ 1656.259516][T25828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1656.272728][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5242'. [ 1656.311699][T25828] bond1: entered promiscuous mode [ 1656.317535][T25828] bond1: entered allmulticast mode [ 1656.711177][T25835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25835 comm=syz.5.5244 [ 1658.782212][T25853] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5250'. [ 1658.828854][T25851] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1658.904602][T25851] CIFS: Unable to determine destination address [ 1659.017448][T25858] netlink: 'syz.6.5252': attribute type 8 has an invalid length. [ 1659.130989][T25859] fuse: Bad value for 'user_id' [ 1659.136030][T25859] fuse: Bad value for 'user_id' [ 1661.055140][T24229] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1661.213565][T24229] usb 8-1: Using ep0 maxpacket: 16 [ 1661.220505][T24229] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1661.245951][T24229] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1661.279537][T24229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.317480][T24229] usb 8-1: config 0 descriptor?? [ 1661.333387][T24228] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1661.483556][T24228] usb 10-1: Using ep0 maxpacket: 32 [ 1661.501932][T24228] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1661.516996][T24228] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1661.528555][T24228] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1661.573544][T24228] usb 10-1: Product: syz [ 1661.591867][T24228] usb 10-1: Manufacturer: syz [ 1661.618711][T24228] usb 10-1: SerialNumber: syz [ 1661.641383][T24228] usb 10-1: config 0 descriptor?? [ 1661.659936][T25876] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1661.679701][T24228] hub 10-1:0.0: bad descriptor, ignoring hub [ 1661.723757][T24228] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1661.922279][T25879] binder_alloc: binder_alloc_mmap_handler: 25878 7fa2b4404000-7fa2b441a000 already mapped failed -16 [ 1662.018809][T24229] usbhid 8-1:0.0: can't add hid device: -71 [ 1662.039136][T24229] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1662.082237][T24229] usb 8-1: USB disconnect, device number 13 [ 1662.135733][T25888] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1662.213802][T24228] usb 10-1: USB disconnect, device number 39 [ 1662.303393][T16563] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1662.903341][T16563] usb 4-1: Using ep0 maxpacket: 16 [ 1662.927349][T16563] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1662.989120][T16563] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 1663.169449][T16563] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1663.213787][T16563] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1663.228529][T16563] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1663.238177][T16563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.599068][T16563] usb 4-1: Product: syz [ 1663.624250][T16563] usb 4-1: Manufacturer: syz [ 1663.640072][T16563] usb 4-1: SerialNumber: syz [ 1663.643365][T24229] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1663.678437][T16563] usb 4-1: config 0 descriptor?? [ 1663.815340][T24229] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1663.827574][T24229] usb 8-1: not running at top speed; connect to a high speed hub [ 1663.839267][T24229] usb 8-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 1663.852247][T24229] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1663.944154][T24229] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1663.958595][T24229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.970151][T24229] usb 8-1: Product: syz [ 1663.980768][T24229] usb 8-1: Manufacturer: syz [ 1664.000496][T16563] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input115 [ 1664.001268][T24229] usb 8-1: SerialNumber: syz [ 1664.638463][T24229] usb 8-1: invalid UAC_HEADER (v1) [ 1664.765919][T13482] usb 4-1: USB disconnect, device number 28 [ 1664.774099][ T4961] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1664.804328][T24229] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1664.859968][T24229] usb 8-1: USB disconnect, device number 14 [ 1664.908922][T21755] udevd[21755]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1665.111924][T25923] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5267'. [ 1665.121036][T25923] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5267'. [ 1665.438228][ T30] audit: type=1400 audit(1784144829.377:2903): avc: denied { write } for pid=25905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1666.210409][ T30] audit: type=1400 audit(1784144830.117:2904): avc: denied { write } for pid=25938 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.309099][T25944] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5271'. [ 1667.673493][ T30] audit: type=1400 audit(1784144831.587:2905): avc: denied { mount } for pid=25955 comm="syz.5.5274" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1667.893327][ T30] audit: type=1400 audit(1784144831.667:2906): avc: denied { mounton } for pid=25955 comm="syz.5.5274" path="/487/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1668.327590][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.410359][T25934] syz.6.5269 (25934): drop_caches: 2 [ 1668.511434][ T30] audit: type=1400 audit(1784144832.467:2907): avc: denied { read } for pid=25961 comm="syz.7.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1668.538171][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.618380][T25965] netlink: 'syz.9.5276': attribute type 4 has an invalid length. [ 1668.642227][T25965] netlink: 17 bytes leftover after parsing attributes in process `syz.9.5276'. [ 1668.903384][T25963] pim6reg: entered allmulticast mode [ 1668.929923][T25963] pim6reg: left allmulticast mode [ 1669.962741][T25969] overlayfs: failed to resolve './file1': -2 [ 1670.097285][T25972] netlink: zone id is out of range [ 1670.128885][T25972] netlink: zone id is out of range [ 1670.147709][T25972] netlink: zone id is out of range [ 1670.168737][ T30] audit: type=1400 audit(1784144834.117:2908): avc: denied { unmount } for pid=17143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1670.265670][T25972] netlink: zone id is out of range [ 1670.355993][T25972] netlink: zone id is out of range [ 1670.361189][T25972] netlink: zone id is out of range [ 1670.366724][T25972] netlink: zone id is out of range [ 1670.411330][T25972] netlink: zone id is out of range [ 1670.854562][T25972] netlink: zone id is out of range [ 1670.872135][T25972] netlink: zone id is out of range [ 1670.963626][T13482] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1671.115785][T13482] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1671.183534][T24229] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1671.210768][T13482] usb 6-1: not running at top speed; connect to a high speed hub [ 1671.468468][T13482] usb 6-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 1671.530533][T24229] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1671.540659][T13482] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1671.551301][T24229] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1671.563436][T13482] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1671.573560][T13482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.603452][T24229] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1671.614330][T13482] usb 6-1: Product: syz [ 1671.618539][T13482] usb 6-1: Manufacturer: syz [ 1671.623240][T24229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.632329][T13482] usb 6-1: SerialNumber: syz [ 1671.638562][T24229] usb 7-1: Product: syz [ 1671.652219][T24229] usb 7-1: Manufacturer: syz [ 1671.658786][T24229] usb 7-1: SerialNumber: syz [ 1671.733390][T21601] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1671.935598][T21601] usb 10-1: Using ep0 maxpacket: 16 [ 1671.939467][T24229] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1672.147389][T24229] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1672.163443][T21601] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1672.192505][T21601] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.217417][T21601] usb 10-1: Product: syz [ 1672.228786][T24229] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1672.230397][T21601] usb 10-1: Manufacturer: syz [ 1672.267307][T24229] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1672.291117][T24229] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1672.299726][T21601] usb 10-1: SerialNumber: syz [ 1672.364462][T24229] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1672.384516][T24229] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1672.486869][T25992] uprobe: syz.3.5284:25992 failed to unregister, leaking uprobe [ 1672.517514][T25994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.571594][T25994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.467900][T21714] ------------[ cut here ]------------ [ 1673.473664][T21714] time_after(jiffies, warn_timeout) [ 1673.473678][T21714] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x36c/0x9d0, CPU#0: syz.8.4194/21714 [ 1673.489111][T21714] Modules linked in: [ 1673.492995][T21714] CPU: 0 UID: 0 PID: 21714 Comm: syz.8.4194 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.504101][T21714] Tainted: [L]=SOFTLOCKUP [ 1673.508426][T21714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1673.518496][T21714] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 1673.524445][T21714] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 9f e9 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 4f ce f1 fc 4d 85 ff 79 aa e8 a5 d3 f1 fc 90 <0f> 0b 90 eb 9f e8 9a d3 f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 1673.544108][T21714] RSP: 0018:ffffc90003c778c0 EFLAGS: 00010293 [ 1673.550162][T21714] RAX: 0000000000000000 RBX: ffff8880272d4000 RCX: ffffffff851808f1 [ 1673.558294][T21714] RDX: ffff88807500ca80 RSI: ffffffff851808fb RDI: ffff88807500ca80 [ 1673.566280][T21714] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 1673.574265][T21714] R10: ffffffffffffe845 R11: 0000000000000000 R12: 0000000100020047 [ 1673.582226][T21714] R13: 0000000000001b58 R14: ffff8880272d4018 R15: ffffffffffffe845 [ 1673.590306][T21714] FS: 00007ffb0b58d6c0(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 1673.599278][T21714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1673.605970][T21714] CR2: 0000001b35115ff8 CR3: 000000006ec14000 CR4: 00000000003526f0 [ 1673.613978][T21714] Call Trace: [ 1673.617239][T21714] [ 1673.620166][T21714] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1673.625733][T21714] ? __pfx___might_resched+0x10/0x10 [ 1673.631011][T21714] ? io_wq_set_exit_on_idle+0x156/0x290 [ 1673.636570][T21714] io_uring_clean_tctx+0x114/0x180 [ 1673.641667][T21714] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1673.647305][T21714] ? percpu_counter_add_batch+0xb9/0x230 [ 1673.652923][T21714] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 1673.659461][T21714] io_uring_cancel_generic+0x798/0x7f0 [ 1673.665051][T21714] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1673.671017][T21714] ? __pfx___file_ref_put+0x10/0x10 [ 1673.676251][T21714] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1673.682308][T21714] ? fput+0xd9/0x100 [ 1673.686355][T21714] ? io_uring_unreg_ringfd+0xca/0x140 [ 1673.691732][T21714] do_exit+0x344/0x2ae0 [ 1673.696222][T21714] ? __pfx_do_exit+0x10/0x10 [ 1673.701007][T21714] ? do_raw_spin_lock+0x128/0x260 [ 1673.706080][T21714] ? find_held_lock+0x2b/0x80 [ 1673.710792][T21714] ? get_signal+0x7e0/0x21e0 [ 1673.715450][T21714] do_group_exit+0xd5/0x2a0 [ 1673.719970][T21714] get_signal+0x1ec7/0x21e0 [ 1673.724534][T21714] ? __pfx_get_signal+0x10/0x10 [ 1673.729384][T21714] ? do_futex+0x190/0x440 [ 1673.733750][T21714] arch_do_signal_or_restart+0x91/0x7e0 [ 1673.739287][T21714] ? lockdep_hardirqs_on+0x78/0x100 [ 1673.744500][T21714] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1673.750659][T21714] exit_to_user_mode_loop+0x139/0x6f0 [ 1673.756048][T21714] ? rcu_is_watching+0x12/0xc0 [ 1673.760811][T21714] do_syscall_64+0x666/0x870 [ 1673.765744][T21714] ? clear_bhb_loop+0x40/0x90 [ 1673.770416][T21714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.776371][T21714] RIP: 0033:0x7ffb0a79de59 [ 1673.780777][T21714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.800490][T21714] RSP: 002b:00007ffb0b58d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1673.808958][T21714] RAX: fffffffffffffe00 RBX: 00007ffb0aa26098 RCX: 00007ffb0a79de59 [ 1673.816959][T21714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb0aa26098 [ 1673.824956][T21714] RBP: 00007ffb0aa26090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.832918][T21714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.840896][T21714] R13: 00007ffb0aa26128 R14: 00007ffd4a855c10 R15: 00007ffd4a855cf8 [ 1673.848913][T21714] [ 1673.851925][T21714] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1673.859192][T21714] CPU: 0 UID: 0 PID: 21714 Comm: syz.8.4194 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.870114][T21714] Tainted: [L]=SOFTLOCKUP [ 1673.874412][T21714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1673.884445][T21714] Call Trace: [ 1673.887704][T21714] [ 1673.890614][T21714] dump_stack_lvl+0x100/0x190 [ 1673.895288][T21714] vpanic+0x552/0x970 [ 1673.899255][T21714] ? __pfx_vpanic+0x10/0x10 [ 1673.903753][T21714] panic+0xd1/0xe0 [ 1673.907463][T21714] ? __pfx_panic+0x10/0x10 [ 1673.911858][T21714] ? check_panic_on_warn+0x1f/0x90 [ 1673.916956][T21714] check_panic_on_warn.cold+0x19/0x34 [ 1673.922320][T21714] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1673.927499][T21714] __warn.cold+0x191/0x318 [ 1673.931893][T21714] __report_bug+0x30f/0x440 [ 1673.936378][T21714] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1673.941569][T21714] ? __pfx___report_bug+0x10/0x10 [ 1673.946573][T21714] ? do_raw_spin_lock+0x128/0x260 [ 1673.951585][T21714] ? find_held_lock+0x2b/0x80 [ 1673.956256][T21714] ? __wait_for_common+0x1f3/0x4c0 [ 1673.961356][T21714] ? rcu_is_watching+0x12/0xc0 [ 1673.966107][T21714] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1673.971286][T21714] report_bug+0xb2/0x220 [ 1673.975523][T21714] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1673.980702][T21714] handle_bug+0x16a/0x2a0 [ 1673.985018][T21714] exc_invalid_op+0x17/0x50 [ 1673.989501][T21714] asm_exc_invalid_op+0x1a/0x20 [ 1673.994339][T21714] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 1674.000149][T21714] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 9f e9 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 4f ce f1 fc 4d 85 ff 79 aa e8 a5 d3 f1 fc 90 <0f> 0b 90 eb 9f e8 9a d3 f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 1674.019744][T21714] RSP: 0018:ffffc90003c778c0 EFLAGS: 00010293 [ 1674.025798][T21714] RAX: 0000000000000000 RBX: ffff8880272d4000 RCX: ffffffff851808f1 [ 1674.033779][T21714] RDX: ffff88807500ca80 RSI: ffffffff851808fb RDI: ffff88807500ca80 [ 1674.041741][T21714] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 1674.049705][T21714] R10: ffffffffffffe845 R11: 0000000000000000 R12: 0000000100020047 [ 1674.057668][T21714] R13: 0000000000001b58 R14: ffff8880272d4018 R15: ffffffffffffe845 [ 1674.065626][T21714] ? io_wq_put_and_exit+0x361/0x9d0 [ 1674.070823][T21714] ? io_wq_put_and_exit+0x36b/0x9d0 [ 1674.076023][T21714] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1674.081562][T21714] ? __pfx___might_resched+0x10/0x10 [ 1674.086832][T21714] ? io_wq_set_exit_on_idle+0x156/0x290 [ 1674.092376][T21714] io_uring_clean_tctx+0x114/0x180 [ 1674.097477][T21714] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1674.103108][T21714] ? percpu_counter_add_batch+0xb9/0x230 [ 1674.108731][T21714] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 1674.115232][T21714] io_uring_cancel_generic+0x798/0x7f0 [ 1674.120680][T21714] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1674.126644][T21714] ? __pfx___file_ref_put+0x10/0x10 [ 1674.131840][T21714] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1674.137913][T21714] ? fput+0xd9/0x100 [ 1674.141801][T21714] ? io_uring_unreg_ringfd+0xca/0x140 [ 1674.147168][T21714] do_exit+0x344/0x2ae0 [ 1674.151319][T21714] ? __pfx_do_exit+0x10/0x10 [ 1674.155902][T21714] ? do_raw_spin_lock+0x128/0x260 [ 1674.160912][T21714] ? find_held_lock+0x2b/0x80 [ 1674.165576][T21714] ? get_signal+0x7e0/0x21e0 [ 1674.170160][T21714] do_group_exit+0xd5/0x2a0 [ 1674.174660][T21714] get_signal+0x1ec7/0x21e0 [ 1674.179168][T21714] ? __pfx_get_signal+0x10/0x10 [ 1674.184000][T21714] ? do_futex+0x190/0x440 [ 1674.188315][T21714] arch_do_signal_or_restart+0x91/0x7e0 [ 1674.193846][T21714] ? lockdep_hardirqs_on+0x78/0x100 [ 1674.199034][T21714] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1674.205190][T21714] exit_to_user_mode_loop+0x139/0x6f0 [ 1674.210556][T21714] ? rcu_is_watching+0x12/0xc0 [ 1674.215313][T21714] do_syscall_64+0x666/0x870 [ 1674.219909][T21714] ? clear_bhb_loop+0x40/0x90 [ 1674.224578][T21714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.230467][T21714] RIP: 0033:0x7ffb0a79de59 [ 1674.234867][T21714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.254449][T21714] RSP: 002b:00007ffb0b58d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1674.262851][T21714] RAX: fffffffffffffe00 RBX: 00007ffb0aa26098 RCX: 00007ffb0a79de59 [ 1674.270882][T21714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb0aa26098 [ 1674.278831][T21714] RBP: 00007ffb0aa26090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.286778][T21714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.294727][T21714] R13: 00007ffb0aa26128 R14: 00007ffd4a855c10 R15: 00007ffd4a855cf8 [ 1674.302683][T21714] [ 1674.305895][T21714] Kernel Offset: disabled [ 1674.310200][T21714] Rebooting in 86400 seconds..