last executing test programs: 3m20.400779749s ago: executing program 0 (id=2392): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x50000, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x541042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX=r6, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) 3m18.106327916s ago: executing program 0 (id=2397): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100af0562195c90fb6ee085753618000000000000002c0d00000013040000"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB="00007df2407b75903f7e25f3000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"/28], 0x48) socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x8, 0xc, 0xf1, 0x4, 0xfffffffffffffd7e, 0x5, 0x8000000, 0x3b9, 0xfffffffffffffffa, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x51c, &(0x7f0000000180)=[{0x682, 0x9, 0x1, 0x5}, {0xf7fd, 0x1, 0x7, 0x7fff}, {0xffff, 0x8, 0xff, 0x9b}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xf0ff, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) 3m17.39081504s ago: executing program 3 (id=2401): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f375b8e486dd6317010000053a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611968000000000095000000000000009040dd0d2eb3649e288a87fd74d64b4147232c1d870b8203"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) 3m17.281661516s ago: executing program 0 (id=2402): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x4001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x81, 0x0, 0x3, 0x1, "bb172b2eb29ce6f978da4db400973b9d520f1eca0359f3725cdab5e306681781d33c542d1328c3833108721cc125d7cdfb51b63e4374e7004ba2adcef866164f", "71087d8d1704823aa2f84d1f8d136b0f1e814604e500188eb334a1ae71779564", [0x7, 0x4]}) (fail_nth: 1) 3m16.730188126s ago: executing program 0 (id=2404): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x11, 0x67, &(0x7f00000000c0)=ANY=[@ANYBLOB="680000000000f46440a2bb58197984d0e575ba5004800000"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0xfd16) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f00000010c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000001000)="c1ddbfff521235b4d5b0e1", 0xb, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) close(0x3) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) close_range(r6, 0xffffffffffffffff, 0x0) 3m16.354545736s ago: executing program 3 (id=2406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) syz_open_dev$video(0x0, 0x3ff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=@newtfilter={0x2008, 0x2c, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0x3}, {0x6, 0xfff0}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x1fc0, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x15}, @TCA_ROUTE4_ACT={0x1530, 0x6, [@m_sample={0x12c, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2d7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x152}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffff0000, 0x6, 0x1, 0x7, 0xcc}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0xbd, 0x6, "4de2ca3c99c7eb287b3da026e8454eead49986ff42dba6c2b7a9ef29459b041f814e52eb4669f1d3a4f9d1e23efbcc4114e420117f29d1de46d8e7a001fb8a2d8396e9ac5657584a6a95da701050a375a5ea5558b53b6fb69884cb5c5d83defb4ad05e5ccaf16619806e5dda6d9a62da5c19aed05f508f31d14785af5af5dc838ae910786702f460f4f6535e16aa02800c6ffc9e36dd458bf68e26ce1b33e3a365643710840d3311da1fa6ae5cd6d1696ab584373181f8f504"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x19c, 0x0, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xcfc, 0x2, 0x8001, 0x8}, 0xbd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0xffffffffffffffff, 0x102, 0x27b1}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x2, 0x6, 0xfffffffc, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x284, 0x5, 0x8, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7ff, 0x2, 0x2000, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2f, 0x7, 0x10000000, 0x0, 0x9}, 0xf1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x0, 0x1, 0xe, 0xb}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3ff, 0x5, 0x0, 0xfffffe01}, 0x400}}]}, {0x8a, 0x6, "fb71e25f751e6955ae131f90610ea911fb3cf4d56bd8637f163c970054e0605cc31087a2e71922c78a401c08f1afe7845e6434869b02847e87b2c438768b7374f677d50742985ac673295521aa0e4f9972849f950e2c7805408a0e0afd1561308f741108eec19937dcdabc24b231dcd4793be18bf0f075a44aa2718dc67dc87a85e3802083ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x1058, 0xa, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xaa1c, 0x1dad, 0x20000009, 0xffff, 0x8}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="73a5ae8c8a20"}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x4, 0x0, 0x2, 0x4}, 0x1}}]}, {0xf84, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x128, 0x19, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf5, 0x6, "af16fb7906ce4242d648a921aca1c945c59789bfaca726300a4f48282871c6fef28a819a2658e5f2c484927a65a53a66278a5a888c0653120342bfeb409c2fd34145ceca98cdc9d5b11fb8d6e1e8661fb5ba1293d8d351c241018db138174d1ef5e1f6d3d6c782e90055a535d1d9eeafa14ee5dc1a47024d382d64ba2ca4701083791993fe2710b99c11e507201d208e3550cc81b0e9dee504c84571a49d7924704d940d194ea712597b402ddb002761a1745cc0ecfe9ec94ced3232610c95f106a253a892fe42e6085707c44da3a4d8b8d5e37516e71f1a87b289e665b370031e987c7505fd4b0216c90cdb2e773759d2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe4, 0xf, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xa0, 0x1, 0xc00000, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x8e, 0x6, "1c1370864f3a7a1f5e75fdc417d21f6464fd68cceffeb6e05ef092f5015fc0c145a29a6d85cd157181bb710012672c46aa7b8261a6059cf89aba7cc572590b34e26941eb255581f82cc4fe7c7c824fe05a62bf31033603dcbe94325b33f303e509dd8ee945f5cf6af0b56ee23636d611964b8a2703fdc749a693fdb13254d26f649dc4a928caacc4730f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xfff3}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x11}, @TCA_ROUTE4_ACT={0xa74, 0x6, [@m_bpf={0x154, 0xe, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xc, 0x1, 0x38, 0x101}, {0xdd, 0x7f, 0x7d, 0xc659}, {0xee, 0x2, 0xab, 0x2}, {0x5, 0x7, 0x4, 0x21}, {0x8, 0x9, 0x40, 0xfffffff9}, {0x4, 0x4, 0xb8, 0x4dc}, {0x8000, 0x5, 0x8, 0x2}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x6e, 0x40, 0x7, 0x6}, {0x100, 0x6, 0x1}, {0x0, 0x7, 0x7, 0x10000}, {0x4, 0xca, 0x9, 0x1}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x0, 0x6, 0x2, 0x7}, {0xffff, 0x1, 0x40, 0x6}, {0x7, 0xe1, 0x3, 0x7}, {0x5, 0xb, 0x1b, 0x720b}, {0x8001, 0x40, 0xe8, 0x3}, {0x3ff, 0x40, 0x46}, {0x7, 0x0, 0x6, 0x2}, {0x8, 0xc, 0x4}, {0xe99, 0x7, 0x1, 0x8}]}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x60, 0x6, "ed20869161ad35f4baf7bc87300f077405aad35f554596960e0e1ea20ae02865c480933087b6489717647bc00e9f4634ecbd7b481e99f08b0b0f43c90ed14d78c43fdcdae8024abe31413f5428d99007ba9f7152edf04be0e1862d91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x9361ed221feb2e27, 0x2}}}}, @m_ife={0x8c8, 0x1b, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x0, 0x0, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @random="cdc4730685ce"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xe}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2b6}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x20000000, 0x40, 0x3}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7fffffff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf65, 0x4, 0x10000000, 0xf3, 0x71589b6d}, 0x1}}]}, {0x7c4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x54, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3ff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xffff}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x2008}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m15.197580371s ago: executing program 0 (id=2407): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xa) timerfd_create(0x8, 0x81800) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r2 = syz_open_dev$dri(0x0, 0x1, 0x2100) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 3m14.250940736s ago: executing program 3 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m14.01208781s ago: executing program 3 (id=2411): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x640441) read$usbmon(r0, &(0x7f0000000040)=""/145, 0x91) r1 = syz_usbip_server_init(0x0) write$usbip_server(r1, &(0x7f0000000100)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1}, {0x8}}, 0x30) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r3, 0x0, r4}) 3m11.947317176s ago: executing program 3 (id=2416): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3m10.548844079s ago: executing program 0 (id=2419): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, &(0x7f0000000280)=0xa, 0x7, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000034) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x44000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r8, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/178, 0xb2}], 0x1, 0x182, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002c00128009000100766c616e000000001c000280100003800c0001000100008006000000060001000300000008000500", @ANYRES32=r3, @ANYBLOB="970bbf854ba3804383f4c682489082a3a8070f79f124684b694ecc39208ebfddca743908f9c49a851f7a647c76b6f4fb7c031cc1df2f381143c10f8b5b1708274f1b060032acf38aa94174c7285d84182dd143d8b9f867f7006aa6e9efdb75095a5ff397677b169d776e5b13d60dd4b98dd34f64583f00704e2c4c554c6b5a717b11c058b358fda69b24b1c11413eac6"], 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) r9 = syz_open_procfs(0x0, 0x0) mount(&(0x7f0000003d00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000140)='binder\x00', 0x3200896, 0x0) pread64(r9, &(0x7f0000002380)=""/253, 0xfdef, 0x4eb) 3m7.31198049s ago: executing program 3 (id=2425): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x3ac00, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x9, 0x2, 0x6517, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)={r1}) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x3, 'sed\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e1f, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendto(r6, &(0x7f00000000c0)="ec2eb69eb14000a1317d76c0", 0xc, 0x4000080, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[], 0x50) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x20) 2m53.112776449s ago: executing program 32 (id=2419): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, &(0x7f0000000280)=0xa, 0x7, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000034) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x44000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r8, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/178, 0xb2}], 0x1, 0x182, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002c00128009000100766c616e000000001c000280100003800c0001000100008006000000060001000300000008000500", @ANYRES32=r3, @ANYBLOB="970bbf854ba3804383f4c682489082a3a8070f79f124684b694ecc39208ebfddca743908f9c49a851f7a647c76b6f4fb7c031cc1df2f381143c10f8b5b1708274f1b060032acf38aa94174c7285d84182dd143d8b9f867f7006aa6e9efdb75095a5ff397677b169d776e5b13d60dd4b98dd34f64583f00704e2c4c554c6b5a717b11c058b358fda69b24b1c11413eac6"], 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) r9 = syz_open_procfs(0x0, 0x0) mount(&(0x7f0000003d00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000140)='binder\x00', 0x3200896, 0x0) pread64(r9, &(0x7f0000002380)=""/253, 0xfdef, 0x4eb) 2m52.146577917s ago: executing program 33 (id=2425): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x3ac00, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x9, 0x2, 0x6517, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)={r1}) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x3, 'sed\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e1f, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendto(r6, &(0x7f00000000c0)="ec2eb69eb14000a1317d76c0", 0xc, 0x4000080, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[], 0x50) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x20) 12.087870312s ago: executing program 1 (id=2787): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) read$FUSE(r2, &(0x7f0000002cc0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.878320849s ago: executing program 4 (id=2788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x78}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYBLOB="0b1600000000000000f6490000000c00b8"], 0x3c}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x5, 0x36, 0x0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$packet(0x11, 0x2, 0x300) dup(r6) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, 0x0, 0x0) 10.1938469s ago: executing program 6 (id=2794): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e", 0x3d}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd", 0x59}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03", 0xa8}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}], 0x6}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324", 0x60}], 0x2}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10dbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.474658268s ago: executing program 5 (id=2795): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) 9.37793707s ago: executing program 5 (id=2797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8.607412465s ago: executing program 1 (id=2798): setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000400007012bbd70ba7e1d00fadbdf25047c00000400c28004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_open_procfs(0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x14, 0x4, "8e87ec70"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x4, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0x7, 0x0, 0x1, 0x7, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0xac5, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x2, 0x5, 0x2, 0x0, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x4, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x80000001, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x108, 0x5, 0x1f9, 0x1ff, 0xffffffff]}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000600)={0x14, &(0x7f00000000c0)={0x20, 0x6, 0x14, {0x14, 0x23, "99c37b277555f062b24815df4e3c1b9f5bcd"}}, &(0x7f0000000580)={0x0, 0x3, 0x78, @string={0x78, 0x3, "ea9e1dbd592a8de983f47d48648195367074c7de0d04425b6c70c804d39eac264c0893d1063b90e8f1fb8de62c88dde5219859a02aee3d629d950689e8b1b9698a6418e6121d3bc65c2406e4e37af9ae08ada09c1690fae15b16109ce09c00ce4d4ffd46476d843e8bff2ca22cb821024f85ca1f95a9"}}}, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)={0x20, 0x30, 0x24, "e612a6c64668992706847e70f4d6eba06faba43db7330cf7210032c28fecf0869bee1965"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x81, 0x1, "e8"}, &(0x7f00000007c0)={0x20, 0x82, 0x1, 's'}, &(0x7f0000000800)={0x20, 0x83, 0x3, "024010"}, &(0x7f0000000840)={0x20, 0x84, 0x1, "c0"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "8fa1ca"}}) syz_emit_ethernet(0x26, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, "91102e0f"}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, 0x0) 8.603584686s ago: executing program 6 (id=2799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) r3 = syz_usb_connect$lan78xx(0x7, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x40, 0x7, 0xa3, {0xa3, 0x10, "df754b05507a230876baee2731bdfd2ede0a5fe66cb22b98d5f68481375cc542bc23f6f24a582f0435fe6dfe139f1b37def48f45baea648a43bc59e3aad16a20c50b264535012ed09fdfdf65ed88162e9f103c78c2f4816582b522c703e9c781ed7630ad8205895c61177a460a8cdb4e4e71c70c147475520c1df0dba0c4a95e51ff370fda7240ece00858af7ba1f5e7dc1989159440a4972c64e3fcf1c7a5f3d2"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x20, 0xf, 0x1e, "05eae2cb811a0b6888c0b223172ce832a754306729b52d73fbb0974064c6"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0xf8b6}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "f534e75f815e97dac3e4e9c7375a14f4dac367b356de64652d0453dad56c0472ffa088e57a3e3ad0d45d359bd23f55"}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625c", 0xffe3}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001d00)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xad}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 7.925618395s ago: executing program 5 (id=2801): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x125) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) 7.706034893s ago: executing program 5 (id=2802): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) unshare(0x20000400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaa783fa9aaaaaa23014dfd0dec3ee72b90bc8844670c80c20000000800450000b0000000000011907800000011ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14e01a049fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881e51852e4451b57de579d3c045942824251d7d17b5191584acd4fbe40a23424dbcfd56f1374361caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa35080045000062000000000011907864010101ac141421fffd4e20004e9078fc69fe7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2da7ec0e0ccb8c86b00"/112], 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.583551497s ago: executing program 6 (id=2804): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) unshare(0x20000400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaa783fa9aaaaaa23014dfd0dec3ee72b90bc8844670c80c20000000800450000b0000000000011907800000011ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14e01a049fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881e51852e4451b57de579d3c045942824251d7d17b5191584acd4fbe40a23424dbcfd56f1374361caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa35080045000062000000000011907864010101ac141421fffd4e20004e9078fc69fe7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2da7ec0e0ccb8c86b00"/112], 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.899648167s ago: executing program 2 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) syz_open_dev$ptys(0xc, 0x3, 0x1) 4.773811266s ago: executing program 2 (id=2806): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xa091, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000780)={{r3, &(0x7f0000000100)='%\x00', 0x44000, &(0x7f0000000180)={@_ha_fsid={[0x400, 0x5]}, {0x9, 0x1a4, 0x2, 0x5}}, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x3d763990}, 0x3, &(0x7f0000000700)=[{0x3, 0x6, &(0x7f00000004c0)='@\xd1\xf0g\n\xf2t\x12Ou\xe1\x00', &(0x7f0000000340)="c314ec0a11366a43a1aa618e596fbf00c9418ffdf2daf4c46860deea06718e5b4c118807457f2f9d38513eb74dffacd62c2e9947a59f332039ec0b52173bfda9c5c0a9c5", 0x44, 0x10}, {0x2, 0x3, &(0x7f0000000400)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000440)}, {0x3, 0x1, &(0x7f00000005c0)='EJ\xb1\xcdr\x9e2&1\x1b5b \xa9\xb91\xcbOg\xa4.\xa8\xcb\x1a\xb8<\xf3c^\x88\n\xa9\x14g\x98\x93\xfe\x82\xf2\xd3\xb7\xf04\xaa\xf0N\xfbf\xb4\xea\xfa\x86\x11\x98\xcel\xae\xa6\xa1\xe9w\xee\xa4\xad\xa5\x80T\x06\x85_\xecT\xf4I\x8f\x02J\x00\x00', &(0x7f0000000540)="79b52929e00545afaa031b4060295920612312c75a0019c884f51e11e71346d59731c7636ce1bb14f74511c04585273944d41a4ab04cbcf66757d7160d31b606d8bc446b49483dc5239e97fa344404232f1267faa78f17db35aa20", 0x5b, 0x10}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r3, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x100, "9a9c01d78e8a02e5ebf73d3a7cf26c7ed280337eedc1e26eff5b96f8a8a5db4d", 0xffff, 0x8, 0xfffffffffffff840, 0x0, 0x4, 0x8, 0xa6, 0x7ff, [0xd2e4, 0x1, 0x4, 0x4]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(0x0, 0x44) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) ioctl$SIOCSIFHWADDR(r2, 0x8947, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, 0x0) 4.385190816s ago: executing program 4 (id=2807): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 3.712804775s ago: executing program 4 (id=2808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000}}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2000000}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x8, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x8}, 0x77) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab6208000700", @ANYRES32=r9, @ANYBLOB="95551ba86f7007e253a3ef44a5005af974dc958f04c9"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 3.618537554s ago: executing program 1 (id=2809): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002cc0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.578360184s ago: executing program 2 (id=2810): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26}, 0x28) socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x51c, &(0x7f0000000180)=[{0x682, 0x9, 0x1, 0x5}, {0xf7fd, 0x1, 0x7, 0x7fff}, {0xffff, 0x8, 0xff, 0x9b}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004880)={&(0x7f0000003b40)={0x50, 0x0, 0x7, {0x7, 0x2d, 0xfffff438, 0x0, 0x3, 0xbcf1, 0x2c6, 0x6, 0x0, 0x0, 0x100, 0x1c7}}, &(0x7f0000003bc0)={0x18, 0xfffffffffffffffe, 0x7, {0x6}}, &(0x7f0000003c00)={0x18, 0xfffffffffffffff5, 0xe, {0x6}}, &(0x7f0000003c40)={0x18, 0x0, 0x40, {0x1}}, &(0x7f0000003c80)={0x18, 0xfffffffffffffff5, 0x4, {0x5}}, &(0x7f0000003cc0)={0x28, 0x0, 0xc49, {{0x5, 0x101}}}, &(0x7f0000003d00)={0x60, 0x0, 0x9, {{0x5, 0x5, 0x7, 0xfffffffffffffffd, 0x4, 0xe, 0x9, 0x3}}}, &(0x7f0000003d80)={0x18, 0xfffffffffffffffe, 0x6, {0x800}}, 0x0, &(0x7f0000003e00)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x10}}, &(0x7f0000003f40)={0x78, 0xfffffffffffffffe, 0xd, {0x8620, 0xffffc9ee, 0x0, {0x2, 0x3, 0xd0fd, 0x3, 0x776fe945, 0x100, 0x269, 0xa, 0x4, 0xc000, 0x8, 0x0, 0x0, 0xff, 0x724}}}, &(0x7f0000004000)={0x90, 0x0, 0x4, {0x2, 0x2, 0x8, 0x9, 0x2983, 0xc00000, {0x5, 0x1000, 0xc, 0x81, 0x5, 0x8, 0x7ff, 0x5, 0x7b3, 0x2000, 0x8000, 0xffffffffffffffff, 0x0, 0x2, 0x8}}}, &(0x7f0000000300)=ANY=[], &(0x7f0000004300)=ANY=[@ANYBLOB="6001000000000000fefffffffffffffffdfa0000000000000400000000000000b600000007000000060000000000000001000000000000007f00000000000000a0840200000000000000000006000000000000000000000081000000000000007f000000004000000900"/124, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="05000000ff00000000000000050000000000000007000000000000000f000000000000802f6465762f6370752f232f6d73720000020000000000000001000000000000000e0000000000000005000000000000000500000004000000030000000000000000000000000000000400000000000000010001000000000010000000000000000100000000000000390c00000c000000050000000080000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000090000000000000003000000000000003e000000000000000f000000a70000002f6465762f6370752f232f6d73"], &(0x7f0000004480)={0xa0, 0x0, 0x81, {{0x3, 0x0, 0x5, 0xe15, 0x6, 0xff, {0x3, 0x0, 0x8, 0x7, 0x6, 0x4, 0x8, 0x1, 0x7, 0x2000, 0x9, 0x0, 0xee01, 0x1, 0x4}}, {0x0, 0x12}}}, &(0x7f0000004540)={0x20, 0x24f266fea04a6b9, 0x0, {0x5, 0x0, 0xffff0000, 0x6}}, &(0x7f0000004740)={0x130, 0xfffffffffffffffe, 0x7fff0000000002, {0x2f1d, 0x500, 0x0, '\x00', {0x4, 0x2, 0x9a8, 0x6, 0x0, 0x0, 0x4000, '\x00', 0x5, 0x5, 0x401, 0xf74, {0x4, 0x8}, {0x4, 0x5940618a}, {0x5, 0x3}, {0x7, 0x7}, 0x81, 0xffff, 0x8001, 0x1f5d}}}}) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xf0ff, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) 2.922291707s ago: executing program 2 (id=2811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.68070452s ago: executing program 4 (id=2812): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.529477264s ago: executing program 5 (id=2813): syz_extract_tcp_res(&(0x7f0000000300)={0x41424344, 0x41424344}, 0xfff, 0x8) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3432d50049a01b5156c2f44c038e91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x1f3, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x2, 0x3, 0x1e5, 0x64, 0x0, 0x7f, 0x6, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x3a, 0x3, 0x9, [{@remote, 0x9}, {@private=0xa010100, 0x6}, {@multicast2}, {@empty, 0xbb57}]}, @ssrr={0x89, 0xb, 0xb6, [@rand_addr=0x64010101, @multicast1]}]}}, {{0x4e21, 0x4e1f, r0, r1, 0x0, 0x0, 0x31, 0x10, 0x3ff, 0x0, 0x7, {[@window={0x3, 0x3, 0x6}, @mptcp=@remove_addr={0x1e, 0xa7, 0x0, 0x0, "a37de44399d8d4ace9500be7669143a2c7f9a3a95935274aab8a460294387c8f7db5731bb48d6bc001bda5e9b43fc31804fdf3dbceebf959dec13583a2caa1a13ee722dcb87b845acc35395fa4273f7baa085c0a7b151d244e9371f0faa3be06c9fe8e22e6dbf5dde36ea5a396272cbed797f5d52d0a725c0bfffeeedf97553e662fec8942ab0cd19f9e0e5512b814a4bd25e1ea4e391451da98f2e2f548ce0688e486b0"}, @mss={0x2, 0x4, 0xc}]}}, {"a111c6c71cb1e98aef5992aebc134e615373cb320f047424e2ad1231f9d867981101136e3c5b1d94f0924408410cfb435688ab7a1300d7900b049f15777dfcbf216541d9a207c14763d5e9d7e36d45adbe44db8f4defd1e74f3dc3ced75292b2b8a529cfbd808c9cbdd1ebf11b6374ef9e05ab474236682dda54b9c0765a18783022aff51aa53e48bba98d7b9d44bc63cb48da6dad7d4a35c791e32b12b18678ba6a3b56803795aa8c9be6b03f0ec670c36637418888fcc55dd5604cbfadc2349401b2f1dec7f518ec039030efbde906a50458353b35c223d119e96232"}}}}}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x2, 0x0, [{0x50000, 0xa2, &(0x7f00000000c0)=""/162}, {0x58000, 0xd4, &(0x7f0000000180)=""/212}]}) 2.293233756s ago: executing program 6 (id=2814): ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) 1.990104121s ago: executing program 6 (id=2815): timer_create(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="007d0020c73d3ccd", @ANYRESOCT=r0, @ANYRESHEX=r1], 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x20008800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) socket$inet(0x2, 0x800, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', '', [], 0xa, "6ba56a0663cc4d9dac62964d41c4c3b83c05d1a0237f035d1ea0c1325cc5bc6248ab67c274f6f9c8fd2b4f3f6087a962b9c008e97a01873c5797ac849f163540cda213b3d531ae1dcd1ca93701d1f7e887eb15f6d2804de7611a653afc65effe8ed79d1fd619f7ba19544512059bbae4bffc321313c1a2a27ef8c057cec177071977d316794eb490425e7b8c4b7d837eb8b339d2456cdf927af313834b00aff3b2d1764253bfcd088e8502fe2ab2cf781481d8187d1c951c65080e71e040cdd08caccca0cf3feec77e7a79d38f7882d3277df727a5d8c29ceed742b8dc6f04486462ae86aca9edbb8251c1a4ada5df9ee8d3a0a5c9d1000000460e8e6a34103b305ae1ee4f9a90c2d71b33755aa573ee93442169246d1b93a26e097d4e19eae8cb75013a3c23ae699ce4deed161209f2f3b523f81f02ea9b4b546d9e66482aa899a5896b1e07438bd2a4696e6e59508a864d267c6ac8e0e5667f2304c220d2b11b9de4439d84fd2c5b2b15ec8bbb6970fe0526e180370771db4110c01c6ffa1157810000000000"}, 0x18b) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) landlock_create_ruleset(&(0x7f0000000300)={0x7f6e, 0x0, 0x2}, 0x18, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 763.471337ms ago: executing program 2 (id=2816): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r3, 0x0, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r3, 0x0, &(0x7f0000000180)="b1", 0x1, 0xb3b}) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x515d9b01, 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x7}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3, 0x6}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x60) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r11 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x7, 0x54800) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r11, 0x800a6f2f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 636.681343ms ago: executing program 4 (id=2817): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) r2 = open(&(0x7f00000000c0)='.\x00', 0x2160c0, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="100000353e3602fbfe000300"/24], 0x513300) 391.103163ms ago: executing program 1 (id=2818): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 389.488538ms ago: executing program 2 (id=2819): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "fa441c9b"}]}}, 0x0}, 0x0) memfd_create(0x0, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x3142, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x4) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r2 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001540)={0x1, 0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x0}, 0x20) eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002f80)={0x1, 0x0, 0x0, &(0x7f0000002f00)=[{0x0}], 0x0}, 0x20) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x62, 0x5, 0x440, 0x188, 0xe0, 0xffffffff, 0x2b0, 0x0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x400, 0x0, 0x7fff}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @port=0x4e23, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @empty, @gre_key, @port=0x4e21}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x84}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x1f3a], 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0xffffffff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @gre_key=0x6}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x16, @empty, @multicast2, @icmp_id=0x66, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x2, 0x1000002}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_usb_connect$cdc_ecm(0x0, 0x87, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x2, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "97"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x7fff}, [@mbim={0xc, 0x24, 0x1b, 0x40, 0xe2a, 0xb, 0x9, 0x9, 0x81}, @obex={0x5, 0x24, 0x15, 0x1}, @mdlm={0xc, 0x24, 0x12, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x11}, @acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x1, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xb, 0x2, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x4, 0x43}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1, 0x0, 0x7f, 0x40, 0x4}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x12, 0x2, 0x4, 0xf000, 0x0, [0x0, 0xff0030]}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, &(0x7f0000000500)={0x40, 0x31, 0x61, {0x61, 0x24, "129114baa461f66cb260f509adb4c05e47b32a3c838ac428d39068a2d34f14827193adcb721952b7e1345dc3adec6d6ac1e8deda7d257a20af30a35885d961e6de11c3fb9ac496876dd171d6f29f74777ecf6c9a170697db8d7395d28f60d6"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000600)={0x20, 0x30, 0x37, "a1bc44ec913e2553a164cc832d40e6ddd9315ff6f799219279e69188a896b804366ca28eaffa8c1b3eb283dc419a4acfbb7b1147750e19"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "bd8ea2e0"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xe, 0x1, {0x22, 0x51b}}}}, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 360.021346ms ago: executing program 6 (id=2820): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r2, &(0x7f0000002cc0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 299.804891ms ago: executing program 1 (id=2821): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e", 0x3d}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd", 0x59}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb91", 0xbf}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041e", 0x8b}], 0x6}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324", 0x60}], 0x2}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10dbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 190.385969ms ago: executing program 4 (id=2822): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r3}) syz_open_procfs$userns(r3, &(0x7f0000000200)) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4004080}, 0x24008010) fcntl$setsig(r1, 0xa, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r5, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) r6 = dup2(r1, r2) fcntl$setown(r2, 0x8, r0) ioctl$SNDCTL_TMR_METRONOME(r6, 0x40045407) tkill(r0, 0x13) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) file_getattr(r7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x18, 0x400) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000280)=0x4) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="280004001800290200000000000000000200000008000000000000000c00098008000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x84054) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000001c0)={0x52, 0xc4, 0x726, {0x2, 0xb}, {0x6, 0x5}, @const={0x8, {0x2, 0x6, 0x2, 0x5}}}) r9 = socket(0x10, 0x3, 0x0) ioctl$int_in(r9, 0x5421, 0xfffffffffffffffd) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x6048800) 60.284827ms ago: executing program 1 (id=2823): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) unshare(0x20000400) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaa783fa9aaaaaa23014dfd0dec3ee72b90bc8844670c80c20000000800450000b0000000000011907800000011ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14e01a049fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881e51852e4451b57de579d3c045942824251d7d17b5191584acd4fbe40a23424dbcfd56f1374361caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa35080045000062000000000011907864010101ac141421fffd4e20004e9078fc69fe7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2da7ec0e0ccb8c86b00"/112], 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 5 (id=2824): syz_usb_connect$uac2(0x1, 0x95, &(0x7f0000005200)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x5, 0x0, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4b16, 0x3, 0x23, 0x80}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x400, 0xff, 0x3, 0x4, 0xf75f, 0x5}, @effect_unit={0x9, 0x24, 0x7, 0x4, 0x1, 0x2, [0x0]}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x17, 0xb, 0x5, {0x8, 0x25, 0x1, 0x3, 0xf, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xfd, 0x82, 0x0, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0xf800}}}}}}}}]}}, &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = socket$packet(0x11, 0x318df0d0cee64c77, 0x300) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0xe, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xd, 0xac}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x8, 0x1, 0xff}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "bf7f8d03889a74b6977db03281b4aa50"}]}, 0x8, [{0x3c, &(0x7f00000001c0)=@string={0x3c, 0x3, "c17d41e32aa9185c4b6ba17bd0e760c04548475423cd742392708ea4b8b624947cf6b25262a6dd7980c00d60fbdfb07c9313fcb9ddca4aa04dbf"}}, {0x102, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, {0x24, &(0x7f0000000440)=@string={0x24, 0x3, "4d828c9583c286369ef562828c1055da9174c6c9cd434c06ee128167b8022fb27255"}}, {0xa9, &(0x7f0000000580)=@string={0xa9, 0x3, "24ffcef48084aad011356ebf1dee4fd3c6af00565380e67858bc4e63face40182d4902073e865f7320a6a03e12666da2373a80c3dd264b8757c7a430d3f9a8e848fbcfa7457bbef829475e084f70e058d9c4fdf0bfaca0027c3a4507bda83e87177c6b0e2fd150c10bffe90b3edd68d85ff4b048c6845b5d8fced5550c21a40d76c6a516bedba3188e5dcef42072f61248e26d75da98337991c98a4d7ba92fc4c6baf1dbebb7d1"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x421}}, {0x65, &(0x7f00000006c0)=@string={0x65, 0x3, "dd2be0907064a1dc6d9ba26b7fd7684e08728404c4eb34a5c9aad8c6e04c5be328f28594fd2b5c8fd8858b67e595563eb2d5c54fe23a6fd6eeff8f152922562074696d60a58ffbf59c8340c4ea4b45f49d4680ab8c48cbc31cd15567f42898367fa0b0"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x340a}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x56, 0x0, 0x8001, {0x0, 0x1}, {0x64, 0x2}, @const={0x8, {0x6, 0x0, 0xe, 0x401}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x1], 0x2) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) sendto$packet(r0, 0x0, 0x0, 0xb01, &(0x7f0000000200)={0x11, 0xf5, r1}, 0x14) kernel console output (not intermixed with test programs): 853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.215350][T15853] RIP: 0033:0x7f419a99cdd9 [ 1050.215364][T15853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.215377][T15853] RSP: 002b:00007f419b7e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.215393][T15853] RAX: ffffffffffffffda RBX: 00007f419ac16180 RCX: 00007f419a99cdd9 [ 1050.215402][T15853] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1050.215412][T15853] RBP: 00007f419b7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.215421][T15853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.215432][T15853] R13: 00007f419ac16218 R14: 00007f419ac16180 R15: 00007ffd23b3d4e8 [ 1050.215451][T15853] [ 1050.220076][T15853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1050.481131][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.493360][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.514839][ T5779] bond0 (unregistering): Released all slaves [ 1050.552111][ T5779] bond1 (unregistering): Released all slaves [ 1050.598869][ T5779] bond2 (unregistering): Released all slaves [ 1050.654776][ T5779] bond3 (unregistering): Released all slaves [ 1050.738196][ T5779] bond4 (unregistering): Released all slaves [ 1050.828816][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.835969][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.849871][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1050.898116][ T5779] tipc: Disabling bearer [ 1050.997440][ T5779] tipc: Left network mode [ 1051.170715][T15868] FAULT_INJECTION: forcing a failure. [ 1051.170715][T15868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.198941][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.4.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.198973][T15868] Tainted: [L]=SOFTLOCKUP [ 1051.198979][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1051.198990][T15868] Call Trace: [ 1051.198996][T15868] [ 1051.199003][T15868] dump_stack_lvl+0x100/0x190 [ 1051.199029][T15868] should_fail_ex.cold+0x5/0xa [ 1051.199053][T15868] _copy_from_user+0x2e/0xd0 [ 1051.199079][T15868] sctp_setsockopt+0x8cc/0xb370 [ 1051.199107][T15868] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1051.199126][T15868] ? __fget_files+0x215/0x3d0 [ 1051.199150][T15868] ? selinux_socket_setsockopt+0x6a/0x80 [ 1051.199170][T15868] ? sock_common_setsockopt+0x2e/0xf0 [ 1051.199190][T15868] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1051.199213][T15868] do_sock_setsockopt+0xf3/0x1d0 [ 1051.199235][T15868] __sys_setsockopt+0x195/0x220 [ 1051.199265][T15868] __x64_sys_setsockopt+0xbd/0x160 [ 1051.199289][T15868] ? do_syscall_64+0x90/0xf80 [ 1051.199312][T15868] ? lockdep_hardirqs_on+0x78/0x100 [ 1051.199334][T15868] do_syscall_64+0x10b/0xf80 [ 1051.199357][T15868] ? clear_bhb_loop+0x40/0x90 [ 1051.199376][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.199393][T15868] RIP: 0033:0x7f419a99cdd9 [ 1051.199408][T15868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.199425][T15868] RSP: 002b:00007f419b825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1051.199441][T15868] RAX: ffffffffffffffda RBX: 00007f419ac15fa0 RCX: 00007f419a99cdd9 [ 1051.199452][T15868] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 1051.199462][T15868] RBP: 00007f419b825090 R08: 000000000000009c R09: 0000000000000000 [ 1051.199471][T15868] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1051.199479][T15868] R13: 00007f419ac16038 R14: 00007f419ac15fa0 R15: 00007ffd23b3d4e8 [ 1051.199501][T15868] [ 1051.623117][T15498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.643407][T15516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.906404][ T8512] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1052.620330][ T30] audit: type=1400 audit(1778512687.802:1482): avc: denied { write } for pid=15874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.675794][T15903] FAULT_INJECTION: forcing a failure. [ 1052.675794][T15903] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.720217][T15498] veth0_vlan: entered promiscuous mode [ 1052.762598][T15903] CPU: 1 UID: 0 PID: 15903 Comm: syz.1.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.762627][T15903] Tainted: [L]=SOFTLOCKUP [ 1052.762633][T15903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.762641][T15903] Call Trace: [ 1052.762647][T15903] [ 1052.762654][T15903] dump_stack_lvl+0x100/0x190 [ 1052.762680][T15903] should_fail_ex.cold+0x5/0xa [ 1052.762703][T15903] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1052.762728][T15903] should_failslab+0xc2/0x120 [ 1052.762748][T15903] __kmalloc_noprof+0xe0/0x850 [ 1052.762772][T15903] ? kfree+0x1dd/0x6c0 [ 1052.762798][T15903] tomoyo_realpath_from_path+0xb6/0x690 [ 1052.762828][T15903] tomoyo_path_number_perm+0x23c/0x580 [ 1052.762848][T15903] ? tomoyo_path_number_perm+0x22e/0x580 [ 1052.762869][T15903] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1052.762910][T15903] ? find_held_lock+0x2b/0x80 [ 1052.762928][T15903] ? __fget_files+0x215/0x3d0 [ 1052.762948][T15903] ? hook_file_ioctl_common+0x149/0x410 [ 1052.762973][T15903] ? __fget_files+0x215/0x3d0 [ 1052.763000][T15903] ? __fget_files+0x21f/0x3d0 [ 1052.763024][T15903] security_file_ioctl+0xd3/0x230 [ 1052.763047][T15903] __x64_sys_ioctl+0xb7/0x210 [ 1052.763069][T15903] do_syscall_64+0x10b/0xf80 [ 1052.763092][T15903] ? clear_bhb_loop+0x40/0x90 [ 1052.763113][T15903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.763131][T15903] RIP: 0033:0x7fc889d9cdd9 [ 1052.763145][T15903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.763162][T15903] RSP: 002b:00007fc88abcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.763178][T15903] RAX: ffffffffffffffda RBX: 00007fc88a016090 RCX: 00007fc889d9cdd9 [ 1052.763189][T15903] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1052.763200][T15903] RBP: 00007fc88abcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.763209][T15903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.763219][T15903] R13: 00007fc88a016128 R14: 00007fc88a016090 R15: 00007ffd93702ab8 [ 1052.763242][T15903] [ 1052.763250][T15903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.085560][T15516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.100411][ T30] audit: type=1400 audit(1778512688.282:1483): avc: denied { write } for pid=15907 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.125047][T15498] veth1_vlan: entered promiscuous mode [ 1053.281269][T15914] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.288056][T15914] binder: 15911:15914 ioctl 4018620d 2000000002c0 returned -16 [ 1054.311578][T15498] veth0_macvtap: entered promiscuous mode [ 1054.321102][T15498] veth1_macvtap: entered promiscuous mode [ 1054.354242][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1054.383442][T15498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.397521][T15498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.450403][ T8517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.460259][ T8517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.562203][ T8517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.580717][ T8517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.615462][ T30] audit: type=1400 audit(1778512689.802:1484): avc: denied { write } for pid=15918 comm="syz.1.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1054.868108][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.925046][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.246939][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1055.302912][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 1055.468380][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.500589][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1055.508449][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1055.520550][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.524132][ T9] usb 2-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 1055.569472][T15516] veth0_vlan: entered promiscuous mode [ 1055.600269][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1055.640222][T15516] veth1_vlan: entered promiscuous mode [ 1055.641850][ T30] audit: type=1400 audit(1778512690.822:1485): avc: denied { write } for pid=15921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.738458][ T30] audit: type=1400 audit(1778512690.882:1486): avc: denied { mounton } for pid=15498 comm="syz-executor" path="/root/syzkaller.hKUKan/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1055.751374][T15516] veth0_macvtap: entered promiscuous mode [ 1055.769163][ T30] audit: type=1400 audit(1778512690.912:1487): avc: denied { mounton } for pid=15498 comm="syz-executor" path="/root/syzkaller.hKUKan/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1055.802651][T15516] veth1_macvtap: entered promiscuous mode [ 1055.820159][T15516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.930940][ T30] audit: type=1400 audit(1778512690.952:1488): avc: denied { mounton } for pid=15498 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1055.963832][ T30] audit: type=1400 audit(1778512691.152:1489): avc: denied { mounton } for pid=15498 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1055.993095][ T9] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1056.004678][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.013489][ T9] usb 2-1: Product: syz [ 1056.018030][ T9] usb 2-1: Manufacturer: syz [ 1056.023535][ T9] usb 2-1: SerialNumber: syz [ 1056.078157][T15516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.119497][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 1056.157913][ T5779] hsr_slave_0: left promiscuous mode [ 1056.996710][ T5779] hsr_slave_1: left promiscuous mode [ 1057.002494][ T30] audit: type=1400 audit(1778512692.182:1490): avc: denied { write } for pid=15951 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.003216][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.086420][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.448016][ T9] usb 2-1: unit 0 not found! [ 1057.695100][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1057.724061][ T9] usb 2-1: unit 0 not found! [ 1057.850989][ T5779] team_slave_1 (unregistering): left allmulticast mode [ 1057.863114][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 1057.889355][ T5779] team_slave_0 (unregistering): left allmulticast mode [ 1057.899012][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 1057.953660][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1057.973528][ T9] usb 2-1: USB disconnect, device number 80 [ 1058.017153][T13911] udevd[13911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.228971][T15949] lo speed is unknown, defaulting to 1000 [ 1058.237281][T15949] xfrm0 speed is unknown, defaulting to 1000 [ 1058.503403][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1059.812268][ T8517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.117661][ T30] audit: type=1326 audit(1778512695.252:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1060.330639][ T30] audit: type=1326 audit(1778512695.252:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1060.426331][ T8517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.453317][ T8517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.489055][ T30] audit: type=1326 audit(1778512695.382:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1060.575416][ T8517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.592503][ T30] audit: type=1326 audit(1778512695.382:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1060.811271][ T30] audit: type=1326 audit(1778512695.382:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1060.901958][ T30] audit: type=1326 audit(1778512695.422:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1061.030350][ T30] audit: type=1326 audit(1778512695.612:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1061.169018][ T30] audit: type=1326 audit(1778512695.612:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1061.202039][T15986] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.209689][T15986] binder: 15983:15986 ioctl 4018620d 2000000002c0 returned -16 [ 1061.510338][ T30] audit: type=1326 audit(1778512695.712:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1061.884121][ T30] audit: type=1326 audit(1778512695.712:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.5.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3839cdd9 code=0x7ffc0000 [ 1062.000551][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.053468][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.280908][T15336] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1062.301264][ T5779] IPVS: stop unused estimator thread 0... [ 1062.353565][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 1062.448748][T15336] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 1062.477082][T15336] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.623948][ T8512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.658158][ T8512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.954382][T15336] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1063.016700][T15336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1063.050361][T15336] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1063.083200][T15336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.126012][T15336] usb 2-1: config 0 descriptor?? [ 1063.546214][T15995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.566112][T15995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.673528][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1063.687112][T15336] usbhid 2-1:0.0: can't add hid device: -71 [ 1063.707118][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1063.807722][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2432'. [ 1063.980796][ T9] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1063.984429][T15336] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1064.169770][T15336] usb 2-1: USB disconnect, device number 81 [ 1064.272412][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 1064.301977][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1064.335266][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 1064.379761][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 1064.414016][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1064.431545][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1064.472629][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.582474][ T9] usb 3-1: low speed audio streaming not supported [ 1064.591062][ T9] usb 3-1: low speed audio streaming not supported [ 1064.598468][ T9] usb 3-1: unit 3 not found! [ 1065.705159][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.774876][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.930528][T15336] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 1065.955066][ T5608] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1066.037190][ T5699] usb 3-1: USB disconnect, device number 89 [ 1066.096806][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1066.096828][ T30] audit: type=1400 audit(1778512701.282:1510): avc: denied { nlmsg_read } for pid=16043 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1066.138104][T15336] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1066.151703][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1066.157969][ T5608] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1066.163371][T15336] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.206729][ T5608] usb 7-1: config 0 has no interface number 0 [ 1066.211915][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1066.234979][ T5608] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1066.237207][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1066.260843][ T5608] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1066.317224][T15336] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1066.327572][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1066.338671][ T30] audit: type=1400 audit(1778512701.522:1511): avc: denied { write } for pid=16026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.390117][T15336] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.414345][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1066.430804][ T30] audit: type=1400 audit(1778512701.602:1512): avc: denied { write } for pid=16053 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.461716][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1066.487047][T15336] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1066.497555][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1066.516969][T15336] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.529228][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1066.540821][T15336] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1066.561977][T15336] usb 2-1: string descriptor 0 read error: -22 [ 1066.568735][T15336] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1066.580302][T15336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.656824][T15336] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1066.744875][ T5608] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1066.759774][ T5608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.794737][ T5608] usb 7-1: Product: syz [ 1066.806180][ T5608] usb 7-1: Manufacturer: syz [ 1066.821322][ T5608] usb 7-1: SerialNumber: syz [ 1066.830129][ T5608] usb 7-1: config 0 descriptor?? [ 1066.840902][ T5608] cypress_m8 7-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1066.994226][T16036] futex_wake_op: syz.1.2515 tries to shift op by -1; fix this program [ 1067.020531][T15336] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1067.194422][T15336] usb 3-1: Using ep0 maxpacket: 32 [ 1067.214874][T15336] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1067.244924][ T30] audit: type=1400 audit(1778512702.432:1513): avc: denied { write } for pid=16057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1067.272284][T15336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.395912][T15336] usb 3-1: Product: syz [ 1067.409497][T15336] usb 3-1: Manufacturer: syz [ 1067.421168][T16074] syzkaller0: entered promiscuous mode [ 1068.221457][ T5608] usb 7-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1068.237521][ T5608] usb 7-1: USB disconnect, device number 2 [ 1068.245780][T16074] syzkaller0: entered allmulticast mode [ 1068.274755][ T5608] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1068.290606][ T5608] cypress_m8 7-1:0.35: device disconnected [ 1068.296952][T15336] usb 3-1: SerialNumber: syz [ 1068.340710][T15336] usb 3-1: config 0 descriptor?? [ 1068.410259][ T24] usb 2-1: USB disconnect, device number 82 [ 1068.669726][ T30] audit: type=1400 audit(1778512703.842:1514): avc: denied { write } for pid=16086 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.694013][T15336] usb 3-1: selecting invalid altsetting 3 [ 1068.714522][T15336] comedi comedi5: could not set alternate setting 3 in high speed [ 1068.748998][T15336] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1068.812090][T15336] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 1068.829157][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1068.870367][T15336] usb 3-1: USB disconnect, device number 90 [ 1069.023162][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1073.300294][ T30] audit: type=1400 audit(1778512708.482:1515): avc: denied { write } for pid=16098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.618908][ T30] audit: type=1400 audit(1778512708.802:1516): avc: denied { write } for pid=16140 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.511693][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 1074.650266][ T30] audit: type=1400 audit(1778512709.832:1517): avc: denied { write } for pid=16150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.737692][ T30] audit: type=1400 audit(1778512709.882:1518): avc: denied { write } for pid=16169 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.253602][T15943] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 1075.412792][T15943] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1075.421910][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1075.433930][T15943] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1075.447033][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1075.469382][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1075.485804][T15943] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1075.494735][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1075.506766][T15943] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1075.520864][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1075.533738][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1075.548423][T15943] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1075.557344][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1075.570112][T15943] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1075.587278][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1075.600843][T15943] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1075.654696][T15943] usb 3-1: string descriptor 0 read error: -22 [ 1075.663732][T15943] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1075.673784][T15943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.715144][T15943] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1076.073732][T16176] futex_wake_op: syz.2.2532 tries to shift op by -1; fix this program [ 1077.913775][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2533'. [ 1079.156137][ T24] usb 3-1: USB disconnect, device number 91 [ 1079.259159][T16191] FAULT_INJECTION: forcing a failure. [ 1079.259159][T16191] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.319287][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.5.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.319317][T16191] Tainted: [L]=SOFTLOCKUP [ 1079.319322][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1079.319333][T16191] Call Trace: [ 1079.319338][T16191] [ 1079.319344][T16191] dump_stack_lvl+0x100/0x190 [ 1079.319369][T16191] should_fail_ex.cold+0x5/0xa [ 1079.319393][T16191] ? tomoyo_encode2+0xfb/0x3c0 [ 1079.319415][T16191] should_failslab+0xc2/0x120 [ 1079.319434][T16191] __kmalloc_noprof+0xe0/0x850 [ 1079.319463][T16191] tomoyo_encode2+0xfb/0x3c0 [ 1079.319493][T16191] tomoyo_encode+0x29/0x50 [ 1079.319515][T16191] tomoyo_realpath_from_path+0x18c/0x690 [ 1079.319545][T16191] tomoyo_path_number_perm+0x23c/0x580 [ 1079.319565][T16191] ? tomoyo_path_number_perm+0x22e/0x580 [ 1079.319586][T16191] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1079.319635][T16191] ? find_held_lock+0x2b/0x80 [ 1079.319652][T16191] ? __fget_files+0x215/0x3d0 [ 1079.319673][T16191] ? hook_file_ioctl_common+0x149/0x410 [ 1079.319697][T16191] ? __fget_files+0x215/0x3d0 [ 1079.319722][T16191] ? __fget_files+0x21f/0x3d0 [ 1079.319747][T16191] security_file_ioctl+0xd3/0x230 [ 1079.319770][T16191] __x64_sys_ioctl+0xb7/0x210 [ 1079.319790][T16191] do_syscall_64+0x10b/0xf80 [ 1079.319811][T16191] ? clear_bhb_loop+0x40/0x90 [ 1079.319834][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.319851][T16191] RIP: 0033:0x7f9b3839cdd9 [ 1079.319866][T16191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.319882][T16191] RSP: 002b:00007f9b39251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.319900][T16191] RAX: ffffffffffffffda RBX: 00007f9b38615fa0 RCX: 00007f9b3839cdd9 [ 1079.319911][T16191] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000003 [ 1079.319921][T16191] RBP: 00007f9b39251090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.319932][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.319942][T16191] R13: 00007f9b38616038 R14: 00007f9b38615fa0 R15: 00007ffeec248558 [ 1079.319965][T16191] [ 1079.541046][T16191] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1079.745019][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2539'. [ 1080.770508][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1081.570316][T15943] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1081.613239][ T30] audit: type=1400 audit(1778512716.612:1519): avc: denied { write } for pid=16189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.140754][T15943] usb 2-1: Using ep0 maxpacket: 32 [ 1082.144191][ T30] audit: type=1400 audit(1778512717.202:1520): avc: denied { write } for pid=16229 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.173322][T15943] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1082.182495][T15943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.193777][T15943] usb 2-1: config 0 has no interface number 0 [ 1082.435808][T15943] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1082.521082][T15943] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.664353][T15943] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1082.854117][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1083.084917][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1083.093103][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.095661][ T8512] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1083.103416][ T24] usb 3-1: config 0 has no interface number 0 [ 1083.119626][ T24] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1083.134198][ T24] usb 3-1: config 0 interface 8 has no altsetting 0 [ 1083.144288][ T24] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1083.153533][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.161619][ T24] usb 3-1: Product: syz [ 1083.165870][ T24] usb 3-1: Manufacturer: syz [ 1083.170572][ T24] usb 3-1: SerialNumber: syz [ 1083.175660][T16239] FAULT_INJECTION: forcing a failure. [ 1083.175660][T16239] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.191050][ T24] usb 3-1: config 0 descriptor?? [ 1083.257264][T16239] CPU: 1 UID: 0 PID: 16239 Comm: syz.6.2546 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.257293][T16239] Tainted: [L]=SOFTLOCKUP [ 1083.257297][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1083.257304][T16239] Call Trace: [ 1083.257308][T16239] [ 1083.257312][T16239] dump_stack_lvl+0x100/0x190 [ 1083.257329][T16239] should_fail_ex.cold+0x5/0xa [ 1083.257345][T16239] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1083.257363][T16239] should_failslab+0xc2/0x120 [ 1083.257375][T16239] __kmalloc_noprof+0xe0/0x850 [ 1083.257390][T16239] ? kfree+0x1dd/0x6c0 [ 1083.257406][T16239] tomoyo_realpath_from_path+0xb6/0x690 [ 1083.257425][T16239] tomoyo_path_number_perm+0x23c/0x580 [ 1083.257437][T16239] ? tomoyo_path_number_perm+0x22e/0x580 [ 1083.257451][T16239] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1083.257477][T16239] ? find_held_lock+0x2b/0x80 [ 1083.257488][T16239] ? __fget_files+0x215/0x3d0 [ 1083.257501][T16239] ? hook_file_ioctl_common+0x149/0x410 [ 1083.257517][T16239] ? __fget_files+0x215/0x3d0 [ 1083.257536][T16239] ? __fget_files+0x21f/0x3d0 [ 1083.257552][T16239] security_file_ioctl+0xd3/0x230 [ 1083.257567][T16239] __x64_sys_ioctl+0xb7/0x210 [ 1083.257580][T16239] do_syscall_64+0x10b/0xf80 [ 1083.257594][T16239] ? clear_bhb_loop+0x40/0x90 [ 1083.257607][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.257619][T16239] RIP: 0033:0x7f051839cdd9 [ 1083.257628][T16239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.257639][T16239] RSP: 002b:00007f05165d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.257650][T16239] RAX: ffffffffffffffda RBX: 00007f0518616090 RCX: 00007f051839cdd9 [ 1083.257657][T16239] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1083.257664][T16239] RBP: 00007f05165d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.257670][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.257676][T16239] R13: 00007f0518616128 R14: 00007f0518616090 R15: 00007ffcb3c492a8 [ 1083.257690][T16239] [ 1083.257707][T16239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1083.580688][ T24] ath6kl: Failed to submit usb control message: -71 [ 1083.589825][T16244] XFS (nullb0): Invalid superblock magic number [ 1083.630341][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 1083.681767][ T24] ath6kl: Unable to send get target info: -71 [ 1083.738512][ T24] ath6kl: Failed to init ath6kl core: -71 [ 1083.788695][ T24] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1083.853368][ T24] usb 3-1: USB disconnect, device number 92 [ 1083.952166][T16255] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2548'. [ 1084.822180][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 1085.518552][T15943] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1085.529007][T15943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.537009][T15943] usb 2-1: Product: syz [ 1085.561023][T15943] usb 2-1: Manufacturer: syz [ 1085.600100][T15943] usb 2-1: config 0 descriptor?? [ 1085.624947][ T30] audit: type=1400 audit(1778512720.812:1521): avc: denied { write } for pid=16253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.637692][T15943] usb 2-1: can't set config #0, error -71 [ 1085.648846][T15336] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1085.656276][T15943] usb 2-1: USB disconnect, device number 83 [ 1085.677016][T16243] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1085.707351][T16279] XFS (nullb0): Invalid superblock magic number [ 1085.808239][ T30] audit: type=1400 audit(1778512720.992:1522): avc: denied { write } for pid=16292 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.842740][T16243] CIFS mount error: No usable UNC path provided in device string! [ 1085.842740][T16243] [ 1085.901405][T15336] usb 6-1: Using ep0 maxpacket: 16 [ 1085.930644][T15336] usb 6-1: config index 0 descriptor too short (expected 804, got 36) [ 1085.940877][T16243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1085.968313][T15336] usb 6-1: config 0 has an invalid interface number: 181 but max is 0 [ 1085.976015][T16244] lo speed is unknown, defaulting to 1000 [ 1085.983529][T16244] xfrm0 speed is unknown, defaulting to 1000 [ 1085.987446][T15336] usb 6-1: config 0 has no interface number 0 [ 1086.027191][T15336] usb 6-1: config 0 interface 181 altsetting 36 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.112856][T15336] usb 6-1: config 0 interface 181 altsetting 36 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.138571][T15336] usb 6-1: config 0 interface 181 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.185049][T15336] usb 6-1: config 0 interface 181 has no altsetting 0 [ 1086.196988][T15336] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1086.239461][T15336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.297671][T15336] usb 6-1: config 0 descriptor?? [ 1086.354754][T16279] lo speed is unknown, defaulting to 1000 [ 1086.380544][T15943] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1086.526284][ T30] audit: type=1400 audit(1778512721.712:1523): avc: denied { write } for pid=16298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.554600][T15943] usb 2-1: Using ep0 maxpacket: 32 [ 1086.569585][ T5706] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1086.588988][T15943] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1086.607367][T15943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.637998][T15943] usb 2-1: Product: syz [ 1086.656544][T15943] usb 2-1: Manufacturer: syz [ 1086.675462][T15943] usb 2-1: SerialNumber: syz [ 1086.696499][T15943] usb 2-1: config 0 descriptor?? [ 1086.733919][T15943] usb 2-1: selecting invalid altsetting 3 [ 1086.748260][T15943] comedi comedi5: could not set alternate setting 3 in high speed [ 1086.767829][T15943] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1086.771900][T15336] hid_parser_main: 20 callbacks suppressed [ 1086.771918][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1086.784208][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 1086.809177][ T30] audit: type=1400 audit(1778512721.982:1524): avc: denied { write } for pid=16311 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.822297][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1086.853213][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1086.862178][T15943] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1086.887704][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1086.902184][ T5706] usb 3-1: config 9 has an invalid interface number: 7 but max is 0 [ 1086.929551][ T5706] usb 3-1: config 9 has no interface number 0 [ 1086.966144][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1086.967194][T15943] usb 2-1: USB disconnect, device number 84 [ 1086.986607][ T5706] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1087.016486][ T5706] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0xC has an invalid bInterval 116, changing to 7 [ 1087.049421][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1087.079892][ T5706] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0xC has invalid maxpacket 8456, setting to 1024 [ 1087.092496][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1087.092524][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1087.092551][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1087.092573][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1087.092592][T15336] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 1087.105278][T15336] uclogic 0003:5543:0522.0019: hidraw0: USB HID vea.f1 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input181 [ 1087.245772][ T5706] usb 3-1: config 9 interface 7 has no altsetting 0 [ 1087.268838][ T5706] usb 3-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 1087.314440][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.338068][ T5706] usb 3-1: Product: syz [ 1087.342264][ T5706] usb 3-1: Manufacturer: syz [ 1087.346193][T15336] usb 6-1: USB disconnect, device number 2 [ 1087.365301][ T5706] usb 3-1: SerialNumber: syz [ 1087.454175][T16279] xfrm0 speed is unknown, defaulting to 1000 [ 1087.463965][T16317] fido_id[16317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1088.679671][T16336] FAULT_INJECTION: forcing a failure. [ 1088.679671][T16336] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.151315][T16336] CPU: 0 UID: 0 PID: 16336 Comm: syz.5.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.151338][T16336] Tainted: [L]=SOFTLOCKUP [ 1089.151342][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1089.151349][T16336] Call Trace: [ 1089.151353][T16336] [ 1089.151358][T16336] dump_stack_lvl+0x100/0x190 [ 1089.151375][T16336] should_fail_ex.cold+0x5/0xa [ 1089.151391][T16336] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1089.151407][T16336] should_failslab+0xc2/0x120 [ 1089.151419][T16336] __kmalloc_noprof+0xe0/0x850 [ 1089.151434][T16336] ? kfree+0x1dd/0x6c0 [ 1089.151451][T16336] tomoyo_realpath_from_path+0xb6/0x690 [ 1089.151469][T16336] tomoyo_path_number_perm+0x23c/0x580 [ 1089.151482][T16336] ? tomoyo_path_number_perm+0x22e/0x580 [ 1089.151495][T16336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1089.151524][T16336] ? find_held_lock+0x2b/0x80 [ 1089.151535][T16336] ? __fget_files+0x215/0x3d0 [ 1089.151547][T16336] ? hook_file_ioctl_common+0x149/0x410 [ 1089.151563][T16336] ? __fget_files+0x215/0x3d0 [ 1089.151578][T16336] ? __fget_files+0x21f/0x3d0 [ 1089.151594][T16336] security_file_ioctl+0xd3/0x230 [ 1089.151609][T16336] __x64_sys_ioctl+0xb7/0x210 [ 1089.151622][T16336] do_syscall_64+0x10b/0xf80 [ 1089.151636][T16336] ? clear_bhb_loop+0x40/0x90 [ 1089.151649][T16336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.151660][T16336] RIP: 0033:0x7f9b3839cdd9 [ 1089.151670][T16336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.151681][T16336] RSP: 002b:00007f9b39251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.151692][T16336] RAX: ffffffffffffffda RBX: 00007f9b38615fa0 RCX: 00007f9b3839cdd9 [ 1089.151699][T16336] RDX: 0000200000002c80 RSI: 0000000000003b80 RDI: 0000000000000003 [ 1089.151705][T16336] RBP: 00007f9b39251090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.151712][T16336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.151718][T16336] R13: 00007f9b38616038 R14: 00007f9b38615fa0 R15: 00007ffeec248558 [ 1089.151731][T16336] [ 1089.151769][T16336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1089.458683][ T30] audit: type=1400 audit(1778512724.632:1525): avc: denied { write } for pid=16316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.762123][ T30] audit: type=1400 audit(1778512724.942:1526): avc: denied { bind } for pid=16341 comm="syz.5.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.903987][ T30] audit: type=1400 audit(1778512724.992:1527): avc: denied { write } for pid=16341 comm="syz.5.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.966795][ T30] audit: type=1400 audit(1778512725.022:1528): avc: denied { write } for pid=16345 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.275830][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1090.364613][T16363] netlink: 'syz.6.2565': attribute type 1 has an invalid length. [ 1092.258333][T15336] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1093.162699][ T5706] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1093.260486][T15336] usb 2-1: Using ep0 maxpacket: 16 [ 1093.267131][T15336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.281672][T15336] usb 2-1: config 0 has no interfaces? [ 1093.298136][T15336] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1093.337987][T15336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.365310][T15336] usb 2-1: Product: syz [ 1093.383436][T15336] usb 2-1: Manufacturer: syz [ 1093.388871][ T24] usb 3-1: USB disconnect, device number 93 [ 1093.418603][T15336] usb 2-1: SerialNumber: syz [ 1093.467904][T15336] usb 2-1: config 0 descriptor?? [ 1094.237536][T16390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2572'. [ 1094.536335][T16390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2572'. [ 1094.693743][T16400] befs: (nullb0): invalid magic header [ 1094.809112][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 1095.320862][ T30] audit: type=1400 audit(1778512730.502:1529): avc: denied { bind } for pid=16371 comm="syz.1.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1095.388666][T16410] netlink: 'syz.2.2577': attribute type 1 has an invalid length. [ 1095.454464][T15943] usb 2-1: USB disconnect, device number 85 [ 1095.990993][ T30] audit: type=1400 audit(1778512731.172:1530): avc: denied { load_policy } for pid=16426 comm="syz.5.2579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1095.992275][T16427] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 1096.022264][T16427] SELinux: failed to load policy [ 1096.043565][T16427] dummy0: entered allmulticast mode [ 1096.057880][T16426] dummy0: left allmulticast mode [ 1096.117408][T16429] FAULT_INJECTION: forcing a failure. [ 1096.117408][T16429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.136541][T16429] CPU: 0 UID: 0 PID: 16429 Comm: syz.2.2580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.136571][T16429] Tainted: [L]=SOFTLOCKUP [ 1096.136578][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1096.136588][T16429] Call Trace: [ 1096.136595][T16429] [ 1096.136602][T16429] dump_stack_lvl+0x100/0x190 [ 1096.136629][T16429] should_fail_ex.cold+0x5/0xa [ 1096.136654][T16429] _copy_from_user+0x2e/0xd0 [ 1096.136682][T16429] copy_msghdr_from_user+0x9f/0x4f0 [ 1096.136707][T16429] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1096.136736][T16429] ? ___sys_sendmsg+0xe6/0x1e0 [ 1096.136763][T16429] ___sys_sendmsg+0x106/0x1e0 [ 1096.136786][T16429] ? __pfx____sys_sendmsg+0x10/0x10 [ 1096.136832][T16429] __sys_sendmsg+0x170/0x220 [ 1096.136849][T16429] ? __pfx___sys_sendmsg+0x10/0x10 [ 1096.136874][T16429] ? rcu_is_watching+0x12/0xc0 [ 1096.136901][T16429] do_syscall_64+0x10b/0xf80 [ 1096.136924][T16429] ? clear_bhb_loop+0x40/0x90 [ 1096.136946][T16429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.136962][T16429] RIP: 0033:0x7f8b1c59cdd9 [ 1096.136976][T16429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.136993][T16429] RSP: 002b:00007f8b1d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.137008][T16429] RAX: ffffffffffffffda RBX: 00007f8b1c815fa0 RCX: 00007f8b1c59cdd9 [ 1096.137020][T16429] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1096.137029][T16429] RBP: 00007f8b1d486090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.137039][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.137049][T16429] R13: 00007f8b1c816038 R14: 00007f8b1c815fa0 R15: 00007ffed1fb5538 [ 1096.137070][T16429] [ 1096.382089][ T30] audit: type=1400 audit(1778512731.512:1531): avc: denied { write } for pid=16413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.405245][ T30] audit: type=1400 audit(1778512731.562:1532): avc: denied { write } for pid=16433 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.656424][T16434] XFS (nullb0): Invalid superblock magic number [ 1097.764272][T16457] FAULT_INJECTION: forcing a failure. [ 1097.764272][T16457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.777434][T16457] CPU: 1 UID: 0 PID: 16457 Comm: syz.1.2585 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.777461][T16457] Tainted: [L]=SOFTLOCKUP [ 1097.777468][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.777478][T16457] Call Trace: [ 1097.777486][T16457] [ 1097.777494][T16457] dump_stack_lvl+0x100/0x190 [ 1097.777520][T16457] should_fail_ex.cold+0x5/0xa [ 1097.777545][T16457] _copy_to_user+0x32/0xd0 [ 1097.777573][T16457] simple_read_from_buffer+0xcb/0x170 [ 1097.777600][T16457] proc_fail_nth_read+0x1af/0x230 [ 1097.777620][T16457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.777641][T16457] ? rw_verify_area+0xce/0x6d0 [ 1097.777659][T16457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.777677][T16457] vfs_read+0x1e4/0xb30 [ 1097.777699][T16457] ? __pfx_vfs_read+0x10/0x10 [ 1097.777724][T16457] ? __fget_files+0x21f/0x3d0 [ 1097.777754][T16457] ksys_read+0x12a/0x250 [ 1097.777772][T16457] ? __pfx_ksys_read+0x10/0x10 [ 1097.777791][T16457] ? __do_sys_getpriority+0x17d/0xbe0 [ 1097.777817][T16457] ? rcu_is_watching+0x12/0xc0 [ 1097.777847][T16457] do_syscall_64+0x10b/0xf80 [ 1097.777871][T16457] ? clear_bhb_loop+0x40/0x90 [ 1097.777893][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.777911][T16457] RIP: 0033:0x7fc889d5d60e [ 1097.777927][T16457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1097.777943][T16457] RSP: 002b:00007fc88ababfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1097.777961][T16457] RAX: ffffffffffffffda RBX: 00007fc88abac6c0 RCX: 00007fc889d5d60e [ 1097.777972][T16457] RDX: 000000000000000f RSI: 00007fc88abac0a0 RDI: 0000000000000006 [ 1097.777984][T16457] RBP: 00007fc88abac090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.777994][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.778004][T16457] R13: 00007fc88a016218 R14: 00007fc88a016180 R15: 00007ffd93702ab8 [ 1097.778028][T16457] [ 1098.092981][T16434] lo speed is unknown, defaulting to 1000 [ 1098.099960][T16434] xfrm0 speed is unknown, defaulting to 1000 [ 1098.480508][ T5699] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1098.582954][T16466] bond1: option mode: unable to set because the bond device has slaves [ 1098.614093][T16466] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1098.650512][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 1098.689642][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1098.714029][ T5699] usb 6-1: config 9 has an invalid interface number: 7 but max is 0 [ 1098.738508][ T5699] usb 6-1: config 9 has no interface number 0 [ 1098.754183][ T5699] usb 6-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1098.770024][ T5699] usb 6-1: config 9 interface 7 altsetting 6 endpoint 0xC has an invalid bInterval 116, changing to 7 [ 1098.815069][ T5699] usb 6-1: config 9 interface 7 altsetting 6 endpoint 0xC has invalid maxpacket 8456, setting to 1024 [ 1098.853324][ T5699] usb 6-1: config 9 interface 7 has no altsetting 0 [ 1098.882844][ T5699] usb 6-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 1098.914450][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.933047][ T5699] usb 6-1: Product: syz [ 1098.941851][ T5699] usb 6-1: Manufacturer: syz [ 1098.976691][ T5699] usb 6-1: SerialNumber: syz [ 1099.035682][ T30] audit: type=1400 audit(1778512734.222:1533): avc: denied { read } for pid=16473 comm="syz.4.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1099.201528][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2591'. [ 1099.668977][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1100.162160][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 1101.370868][T16503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2596'. [ 1102.059036][T16506] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2597'. [ 1103.608028][T16516] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2599'. [ 1103.666902][T16516] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2599'. [ 1103.752387][ T5699] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1103.818628][ T30] audit: type=1400 audit(1778512739.002:1534): avc: denied { write } for pid=16493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.988140][ T5699] usb 6-1: USB disconnect, device number 3 [ 1104.448463][T16526] syz.5.2601 (16526): drop_caches: 2 [ 1104.461925][ T30] audit: type=1400 audit(1778512739.652:1535): avc: denied { write } for pid=16527 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1104.532082][T16514] syz.1.2598 (16514): drop_caches: 2 [ 1104.953079][T16535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.030327][T16535] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1105.072958][T16535] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1105.670708][ T5699] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1106.200504][ T5699] usb 7-1: Using ep0 maxpacket: 16 [ 1106.210016][ T5699] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1106.220494][ T5699] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.225415][ T30] audit: type=1326 audit(1778512741.402:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.368229][ T5699] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.386882][ T5699] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1106.399895][ T5699] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1106.474983][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.500721][ T30] audit: type=1326 audit(1778512741.402:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.544130][ T30] audit: type=1326 audit(1778512741.402:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.549158][ T5699] usb 7-1: config 0 descriptor?? [ 1106.572476][ T30] audit: type=1326 audit(1778512741.402:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.689654][ T30] audit: type=1326 audit(1778512741.402:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.716385][ T30] audit: type=1326 audit(1778512741.402:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.830804][ T30] audit: type=1326 audit(1778512741.582:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.930554][ T30] audit: type=1326 audit(1778512741.582:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.4.2606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1106.980538][T15336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1106.989900][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.018852][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.117193][T16558] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2609'. [ 1107.295435][ T5699] hid_parser_main: 28 callbacks suppressed [ 1107.295454][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1107.310739][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1107.321208][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1107.331401][T15336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.342537][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1107.349942][T15336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.359987][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1108.318527][T15336] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1108.336429][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1108.367290][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1108.390216][T15336] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1108.444381][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1108.469373][T15336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.493417][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1108.527000][T15336] usb 6-1: config 0 descriptor?? [ 1108.538538][ T5699] pantherlord 0003:0810:0001.001A: unknown main item tag 0x0 [ 1108.556823][T16569] XFS (nullb0): Invalid superblock magic number [ 1108.584374][ T5699] pantherlord 0003:0810:0001.001A: hidraw0: USB HID v0.04 Device [HID 0810:0001] on usb-dummy_hcd.6-1/input0 [ 1108.622111][ T5699] pantherlord 0003:0810:0001.001A: no output reports found [ 1108.637428][ T5699] usb 7-1: USB disconnect, device number 3 [ 1108.734632][T15943] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1109.254860][T15943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.295519][T16578] fido_id[16578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1109.320534][T15943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.348511][T15943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1109.411704][T15943] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1109.471007][T15943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.512295][T15943] usb 2-1: config 0 descriptor?? [ 1109.590905][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1109.590941][ T30] audit: type=1400 audit(1778512744.782:1553): avc: denied { write } for pid=16555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.060567][ T30] audit: type=1400 audit(1778512745.242:1554): avc: denied { write } for pid=16594 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.123924][T16569] lo speed is unknown, defaulting to 1000 [ 1110.193092][T16607] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1110.331347][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.337795][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.550480][T16569] xfrm0 speed is unknown, defaulting to 1000 [ 1110.856544][T11981] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1110.965035][T11981] dvb_usb_az6027 5-1:64.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1111.096869][T11981] usb 5-1: USB disconnect, device number 79 [ 1111.347016][T16613] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1111.367607][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'. [ 1111.433763][T15336] usbhid 6-1:0.0: can't add hid device: -71 [ 1111.450621][T15336] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1111.496396][T15336] usb 6-1: USB disconnect, device number 4 [ 1111.870819][T11981] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1112.586684][T15943] usbhid 2-1:0.0: can't add hid device: -71 [ 1112.735216][T15943] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1112.750961][T15943] usb 2-1: USB disconnect, device number 86 [ 1112.801067][T16638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1113.002102][ T30] audit: type=1400 audit(1778512748.172:1555): avc: denied { write } for pid=16610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.278508][T16647] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1114.440448][ T30] audit: type=1400 audit(1778512749.622:1556): avc: denied { write } for pid=16645 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.544543][T16660] FAULT_INJECTION: forcing a failure. [ 1114.544543][T16660] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.557443][T16660] CPU: 1 UID: 0 PID: 16660 Comm: syz.5.2624 Tainted: G L syzkaller #0 PREEMPT(full) [ 1114.557472][T16660] Tainted: [L]=SOFTLOCKUP [ 1114.557479][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1114.557490][T16660] Call Trace: [ 1114.557496][T16660] [ 1114.557503][T16660] dump_stack_lvl+0x100/0x190 [ 1114.557535][T16660] should_fail_ex.cold+0x5/0xa [ 1114.557559][T16660] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1114.557585][T16660] should_failslab+0xc2/0x120 [ 1114.557606][T16660] __kmalloc_noprof+0xe0/0x850 [ 1114.557631][T16660] ? kfree+0x1dd/0x6c0 [ 1114.557658][T16660] tomoyo_realpath_from_path+0xb6/0x690 [ 1114.557689][T16660] tomoyo_path_number_perm+0x23c/0x580 [ 1114.557709][T16660] ? tomoyo_path_number_perm+0x22e/0x580 [ 1114.557732][T16660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1114.557779][T16660] ? find_held_lock+0x2b/0x80 [ 1114.557797][T16660] ? __fget_files+0x215/0x3d0 [ 1114.557818][T16660] ? hook_file_ioctl_common+0x149/0x410 [ 1114.557842][T16660] ? __fget_files+0x215/0x3d0 [ 1114.557868][T16660] ? __fget_files+0x21f/0x3d0 [ 1114.557894][T16660] security_file_ioctl+0xd3/0x230 [ 1114.557919][T16660] __x64_sys_ioctl+0xb7/0x210 [ 1114.557941][T16660] do_syscall_64+0x10b/0xf80 [ 1114.557964][T16660] ? clear_bhb_loop+0x40/0x90 [ 1114.557986][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.558004][T16660] RIP: 0033:0x7f9b3839cdd9 [ 1114.558019][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.558035][T16660] RSP: 002b:00007f9b39251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.558053][T16660] RAX: ffffffffffffffda RBX: 00007f9b38615fa0 RCX: 00007f9b3839cdd9 [ 1114.558065][T16660] RDX: 0000200000000000 RSI: 0000000040096101 RDI: 0000000000000003 [ 1114.558075][T16660] RBP: 00007f9b39251090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.558086][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.558096][T16660] R13: 00007f9b38616038 R14: 00007f9b38615fa0 R15: 00007ffeec248558 [ 1114.558121][T16660] [ 1114.558148][T16660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1114.569806][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1114.578144][T16660] QAT: Stopping all acceleration devices. [ 1114.702174][ T8487] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1114.850741][T15943] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1115.110603][ T5342] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1115.262475][ T5342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1115.271715][ T5342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.285713][ T5342] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1115.296524][T15806] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1115.304807][ T5342] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1115.316396][ T5342] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1115.320376][T15943] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1115.334036][ T5342] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1115.350323][T15943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.358741][T15943] usb 2-1: Product: syz [ 1115.363315][T15943] usb 2-1: Manufacturer: syz [ 1115.363861][ T5342] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1115.367998][T15943] usb 2-1: SerialNumber: syz [ 1115.389923][T15943] usb 2-1: config 0 descriptor?? [ 1115.394902][ T5342] usb 6-1: string descriptor 0 read error: -22 [ 1115.406617][ T5342] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1115.417670][ T5342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.490711][T15806] usb 7-1: Using ep0 maxpacket: 32 [ 1115.501527][T15806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1115.510352][T15806] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 1115.522994][T15806] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.546123][T15806] usb 7-1: config 7 has no interface number 0 [ 1115.570611][T15806] usb 7-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.587271][T15806] usb 7-1: config 7 interface 187 has no altsetting 0 [ 1115.599111][T15806] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1115.608591][T15806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.636596][T15806] usb 7-1: Product: syz [ 1115.644685][T15806] usb 7-1: Manufacturer: syz [ 1115.649368][T15806] usb 7-1: SerialNumber: syz [ 1115.896680][T15943] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1115.924499][T15806] usb 7-1: Cannot retrieve CPort count: 0 [ 1115.930992][T15806] usb 7-1: Cannot retrieve CPort count: -5 [ 1115.937116][T15806] es2_ap_driver 7-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 1116.041808][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1116.127692][T15806] usb 7-1: USB disconnect, device number 4 [ 1116.341911][ T5342] usb 6-1: 2:0: failed to get current value for ch 1 (-71) [ 1116.583087][ T5342] usb 6-1: USB disconnect, device number 5 [ 1116.951018][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1117.299673][T16690] syzkaller0: entered promiscuous mode [ 1117.331219][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1117.337107][T16690] syzkaller0: entered allmulticast mode [ 1117.351951][ T9] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1117.373557][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.382862][ T9] usb 3-1: Product: syz [ 1117.387373][ T9] usb 3-1: Manufacturer: syz [ 1117.393113][ T9] usb 3-1: SerialNumber: syz [ 1117.994186][ T9] usb 3-1: config 0 descriptor?? [ 1118.022269][ T9] usb 3-1: selecting invalid altsetting 3 [ 1118.028593][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 1118.037612][ T9] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1118.053329][ T9] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 1118.231048][T15943] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1118.245869][ T5342] usb 3-1: USB disconnect, device number 94 [ 1118.252557][T15943] usb 2-1: USB disconnect, device number 87 [ 1118.800629][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1119.080605][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1119.089129][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1119.099352][ T9] usb 5-1: config 0 has no interface number 0 [ 1119.105494][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1119.116464][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1119.126324][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1119.137974][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 105, changing to 10 [ 1119.149368][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 25707, setting to 1024 [ 1119.160672][ T9] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.310836][T15806] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1119.320161][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1119.331459][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.339982][ T9] usb 5-1: Product: syz [ 1119.345347][ T9] usb 5-1: Manufacturer: syz [ 1119.350396][ T9] usb 5-1: SerialNumber: syz [ 1119.370548][ T9] usb 5-1: config 0 descriptor?? [ 1119.389308][T16699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1119.499190][T15806] usb 2-1: Using ep0 maxpacket: 32 [ 1119.540143][T15806] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1119.549957][T15806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.659711][ T9] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1119.686555][ T9] usb 5-1: USB disconnect, device number 81 [ 1119.925530][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 1121.336514][T15806] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1121.397152][T15806] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1121.419411][T15806] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1121.708095][T16718] XFS (nullb0): Invalid superblock magic number [ 1122.473733][T16718] lo speed is unknown, defaulting to 1000 [ 1122.480777][T16718] xfrm0 speed is unknown, defaulting to 1000 [ 1122.850960][ T5342] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1122.870585][T11981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1122.910487][ T5699] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1123.015488][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 1123.093938][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1123.105124][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 1123.113815][T11981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.136380][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.156830][T11981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.171765][ T5342] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1123.184563][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1123.199556][T11981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1123.225425][ T5342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.252253][T11981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1123.266069][ T5699] usb 3-1: config 9 has an invalid interface number: 7 but max is 0 [ 1123.282812][ T5342] usb 7-1: config 0 descriptor?? [ 1123.289953][T11981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.299513][ T5699] usb 3-1: config 9 has no interface number 0 [ 1123.318289][ T5699] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1123.334956][ T5699] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0xC has an invalid bInterval 116, changing to 7 [ 1123.356855][T11981] usb 6-1: config 0 descriptor?? [ 1123.364037][ T5699] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0xC has invalid maxpacket 8456, setting to 1024 [ 1123.376721][ T5699] usb 3-1: config 9 interface 7 has no altsetting 0 [ 1123.388798][ T5699] usb 3-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 1123.398445][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.456079][ T5699] usb 3-1: Product: syz [ 1123.460350][ T5699] usb 3-1: Manufacturer: syz [ 1123.471385][ T5699] usb 3-1: SerialNumber: syz [ 1123.719202][ T5342] hid_parser_main: 20 callbacks suppressed [ 1123.719241][ T5342] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 1123.814943][ T5342] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 1123.829072][ T5342] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 1123.882322][ T5342] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 1123.950905][ T5342] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 1123.991361][ T5342] elan 0003:04F3:0755.001B: failed to start in urb: -90 [ 1124.031304][ T5342] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1124.116944][ T5342] usb 7-1: USB disconnect, device number 5 [ 1124.307689][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2644'. [ 1124.321851][T16747] fido_id[16747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1124.966600][ T5699] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1125.005704][ T5699] usb 3-1: USB disconnect, device number 95 [ 1125.805467][T11981] usbhid 6-1:0.0: can't add hid device: -71 [ 1125.820612][T11981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1125.843119][T11981] usb 6-1: USB disconnect, device number 6 [ 1126.154559][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1126.640726][T11981] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1126.832384][T11981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.864684][T11981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.904367][T11981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1126.934199][T11981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1126.951206][ T5706] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1126.952049][T11981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.993131][T11981] usb 5-1: config 0 descriptor?? [ 1127.128979][ T5706] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 1127.159602][ T5706] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.175070][ T5706] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1127.390873][ T5706] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1127.399916][ T5706] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1127.413205][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.427563][ T5706] usb 3-1: config 0 descriptor?? [ 1127.939407][ T5706] usbhid 3-1:0.0: can't add hid device: -71 [ 1127.957481][ T5706] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1127.983093][ T5706] usb 3-1: USB disconnect, device number 96 [ 1128.006653][T16795] FAULT_INJECTION: forcing a failure. [ 1128.006653][T16795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.021155][T16795] CPU: 0 UID: 0 PID: 16795 Comm: syz.5.2655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.021184][T16795] Tainted: [L]=SOFTLOCKUP [ 1128.021191][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1128.021200][T16795] Call Trace: [ 1128.021206][T16795] [ 1128.021212][T16795] dump_stack_lvl+0x100/0x190 [ 1128.021238][T16795] should_fail_ex.cold+0x5/0xa [ 1128.021261][T16795] _copy_from_user+0x2e/0xd0 [ 1128.021288][T16795] copy_msghdr_from_user+0x9f/0x4f0 [ 1128.021312][T16795] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1128.021344][T16795] ___sys_sendmsg+0x106/0x1e0 [ 1128.021367][T16795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.021389][T16795] ? ksys_write+0x12a/0x250 [ 1128.021435][T16795] __sys_sendmsg+0x170/0x220 [ 1128.021452][T16795] ? __pfx___sys_sendmsg+0x10/0x10 [ 1128.021478][T16795] ? rcu_is_watching+0x12/0xc0 [ 1128.021504][T16795] do_syscall_64+0x10b/0xf80 [ 1128.021527][T16795] ? clear_bhb_loop+0x40/0x90 [ 1128.021546][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.021562][T16795] RIP: 0033:0x7f9b3839cdd9 [ 1128.021576][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.021592][T16795] RSP: 002b:00007f9b39251028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.021608][T16795] RAX: ffffffffffffffda RBX: 00007f9b38615fa0 RCX: 00007f9b3839cdd9 [ 1128.021619][T16795] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1128.021630][T16795] RBP: 00007f9b39251090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.021641][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.021651][T16795] R13: 00007f9b38616038 R14: 00007f9b38615fa0 R15: 00007ffeec248558 [ 1128.021674][T16795] [ 1129.294424][T16802] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1129.804383][T11981] usbhid 5-1:0.0: can't add hid device: -71 [ 1129.877335][T11981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1129.999670][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 1130.247301][T11981] usb 5-1: USB disconnect, device number 82 [ 1130.537007][T16811] XFS (nullb0): Invalid superblock magic number [ 1131.031659][T11981] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1131.190583][ T24] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1131.202378][T11981] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.252182][T11981] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1131.287576][T11981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.331194][T11981] usb 7-1: Product: syz [ 1131.385543][T11981] usb 7-1: Manufacturer: syz [ 1131.405707][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 1131.458493][T11981] usb 7-1: SerialNumber: syz [ 1131.549042][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1131.678255][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 1131.742681][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 1131.796530][T16811] lo speed is unknown, defaulting to 1000 [ 1131.802877][T11981] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1131.842083][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1131.847514][T16811] xfrm0 speed is unknown, defaulting to 1000 [ 1131.860611][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1131.870531][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.237275][T11981] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1132.262465][ T30] audit: type=1326 audit(1778512767.152:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.292280][ T30] audit: type=1326 audit(1778512767.162:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.297685][ T24] usb 6-1: low speed audio streaming not supported [ 1132.319291][ T30] audit: type=1326 audit(1778512767.162:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.352015][ T30] audit: type=1326 audit(1778512767.172:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.378997][ T30] audit: type=1326 audit(1778512767.182:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.469839][ T24] usb 6-1: low speed audio streaming not supported [ 1132.517994][ T30] audit: type=1326 audit(1778512767.182:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.526270][ T24] usb 6-1: unit 3 not found! [ 1132.556252][ T30] audit: type=1326 audit(1778512767.192:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.597661][ T30] audit: type=1326 audit(1778512767.212:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.598929][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.625099][ T30] audit: type=1326 audit(1778512767.242:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.682762][ T30] audit: type=1326 audit(1778512767.252:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.2665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc889d9cdd9 code=0x7ffc0000 [ 1132.712988][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.776266][ T24] usb 6-1: USB disconnect, device number 7 [ 1132.833320][ T5706] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1132.990524][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 1133.063065][T11981] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1133.217024][ T5706] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1133.226581][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.241242][T11981] usb 5-1: Using ep0 maxpacket: 16 [ 1133.248285][T11981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1133.257296][T11981] usb 5-1: config 9 has an invalid interface number: 7 but max is 0 [ 1133.265533][T11981] usb 5-1: config 9 has no interface number 0 [ 1133.272119][T11981] usb 5-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1133.281888][T11981] usb 5-1: config 9 interface 7 altsetting 6 endpoint 0xC has an invalid bInterval 116, changing to 7 [ 1133.293007][T11981] usb 5-1: config 9 interface 7 altsetting 6 endpoint 0xC has invalid maxpacket 8456, setting to 1024 [ 1133.304110][T11981] usb 5-1: config 9 interface 7 has no altsetting 0 [ 1133.312410][T11981] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 1133.322978][T11981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.331046][T11981] usb 5-1: Product: syz [ 1133.335339][T11981] usb 5-1: Manufacturer: syz [ 1133.339973][T11981] usb 5-1: SerialNumber: syz [ 1133.456892][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1133.602395][T11981] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1133.668123][T11981] usb 5-1: USB disconnect, device number 83 [ 1133.881895][T16844] syz.5.2668 (16844): drop_caches: 2 [ 1134.154714][ T5706] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1134.197788][T11981] usb 7-1: USB disconnect, device number 6 [ 1134.771124][T16862] FAULT_INJECTION: forcing a failure. [ 1134.771124][T16862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.887175][T16862] CPU: 0 UID: 0 PID: 16862 Comm: syz.4.2673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.887207][T16862] Tainted: [L]=SOFTLOCKUP [ 1134.887214][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1134.887225][T16862] Call Trace: [ 1134.887232][T16862] [ 1134.887239][T16862] dump_stack_lvl+0x100/0x190 [ 1134.887268][T16862] should_fail_ex.cold+0x5/0xa [ 1134.887295][T16862] _copy_from_user+0x2e/0xd0 [ 1134.887323][T16862] kstrtouint_from_user+0xd6/0x1d0 [ 1134.887345][T16862] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1134.887364][T16862] ? __lock_acquire+0x4a5/0x2630 [ 1134.887393][T16862] ? lock_acquire+0x1b1/0x370 [ 1134.887421][T16862] proc_fail_nth_write+0x83/0x220 [ 1134.887443][T16862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1134.887471][T16862] vfs_write+0x2aa/0x1070 [ 1134.887493][T16862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1134.887514][T16862] ? __pfx_vfs_write+0x10/0x10 [ 1134.887533][T16862] ? __fget_files+0x215/0x3d0 [ 1134.887562][T16862] ? __fget_files+0x21f/0x3d0 [ 1134.887592][T16862] ksys_write+0x12a/0x250 [ 1134.887613][T16862] ? __pfx_ksys_write+0x10/0x10 [ 1134.887635][T16862] ? rcu_is_watching+0x12/0xc0 [ 1134.887667][T16862] do_syscall_64+0x10b/0xf80 [ 1134.887691][T16862] ? clear_bhb_loop+0x40/0x90 [ 1134.887714][T16862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.887732][T16862] RIP: 0033:0x7f419a95d60e [ 1134.887748][T16862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1134.887765][T16862] RSP: 002b:00007f419b7e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1134.887783][T16862] RAX: ffffffffffffffda RBX: 00007f419b7e36c0 RCX: 00007f419a95d60e [ 1134.887796][T16862] RDX: 0000000000000001 RSI: 00007f419b7e30a0 RDI: 0000000000000005 [ 1134.887807][T16862] RBP: 00007f419b7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.887818][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.887828][T16862] R13: 00007f419ac16218 R14: 00007f419ac16180 R15: 00007ffd23b3d4e8 [ 1134.887853][T16862] [ 1135.553191][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2674'. [ 1136.565916][T16887] befs: (nullb0): invalid magic header [ 1137.621906][T16898] bond1: option mode: unable to set because the bond device has slaves [ 1137.648572][T16898] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1137.674172][T16897] XFS (nullb0): Invalid superblock magic number [ 1138.060549][ T5725] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1138.087607][T16897] lo speed is unknown, defaulting to 1000 [ 1138.094925][T16897] xfrm0 speed is unknown, defaulting to 1000 [ 1138.223867][ T5725] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 1138.237850][ T5725] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.250320][ T5725] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1138.263286][ T5725] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1138.269912][ T5725] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1138.278949][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.289343][ T5725] usb 6-1: config 0 descriptor?? [ 1138.630556][T15943] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1138.790602][T15943] usb 7-1: Using ep0 maxpacket: 16 [ 1138.798049][T15943] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1138.871583][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.880307][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.131104][ T5725] usbhid 6-1:0.0: can't add hid device: -71 [ 1139.137489][T15943] usb 7-1: config 9 has an invalid interface number: 7 but max is 0 [ 1139.191684][T16925] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1139.298651][ T5725] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1139.316384][T15943] usb 7-1: config 9 has no interface number 0 [ 1139.653807][T15943] usb 7-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1139.856082][ T5725] usb 6-1: USB disconnect, device number 8 [ 1139.862869][T15943] usb 7-1: config 9 interface 7 altsetting 6 endpoint 0xC has an invalid bInterval 116, changing to 7 [ 1139.881264][T15943] usb 7-1: config 9 interface 7 altsetting 6 endpoint 0xC has invalid maxpacket 8456, setting to 1024 [ 1139.893348][T15943] usb 7-1: config 9 interface 7 has no altsetting 0 [ 1139.934186][T15943] usb 7-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 1139.968419][T15943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.988115][T15943] usb 7-1: Product: syz [ 1139.992314][T15943] usb 7-1: Manufacturer: syz [ 1139.997749][T15943] usb 7-1: SerialNumber: syz [ 1140.264956][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 1140.539718][T15943] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1140.558221][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2690'. [ 1140.573034][T15943] usb 7-1: USB disconnect, device number 7 [ 1140.828666][T16939] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2694'. [ 1141.875161][ T24] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1142.061954][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1142.146848][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1142.147197][ T30] audit: type=1400 audit(1778512777.322:1570): avc: denied { listen } for pid=16952 comm="syz.5.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1142.181048][T15336] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1142.212562][ T30] audit: type=1400 audit(1778512777.332:1571): avc: denied { accept } for pid=16952 comm="syz.5.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1142.212856][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1142.245559][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.258102][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1142.270602][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1142.284389][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1142.292056][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1142.302939][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.316849][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1142.330652][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1142.343940][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1142.351599][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1142.363722][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.376791][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1142.389124][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1142.405813][ T24] usb 5-1: string descriptor 0 read error: -22 [ 1142.413720][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1142.423117][T15336] usb 7-1: Using ep0 maxpacket: 16 [ 1142.430101][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.442410][T15336] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1142.452222][T15336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.460352][T15336] usb 7-1: Product: syz [ 1142.468330][T15336] usb 7-1: Manufacturer: syz [ 1142.473524][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1142.481089][T15336] usb 7-1: SerialNumber: syz [ 1142.493106][T15336] usb 7-1: config 0 descriptor?? [ 1142.502477][T15336] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1142.749813][T15336] ssu100 7-1:0.0: probe with driver ssu100 failed with error -5 [ 1142.897340][T16956] futex_wake_op: syz.4.2695 tries to shift op by -1; fix this program [ 1143.060535][ T30] audit: type=1400 audit(1778512778.242:1572): avc: denied { getopt } for pid=16948 comm="syz.6.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1143.380775][T16949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.392982][T16949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.457444][T16960] openvswitch: netlink: Flow key attr not present in new flow. [ 1143.467924][T15529] Bluetooth: hci5: ACL packet too small [ 1143.475489][ T24] usb 7-1: USB disconnect, device number 8 [ 1143.792494][T16964] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1144.640116][ T5342] usb 5-1: USB disconnect, device number 84 [ 1146.159992][ T30] audit: type=1326 audit(1778512781.342:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.4.2705" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1146.199742][ T30] audit: type=1326 audit(1778512781.342:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.4.2705" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1146.218306][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1146.474143][T16986] XFS (nullb0): Invalid superblock magic number [ 1147.401180][ T5725] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1147.437359][T16999] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2711'. [ 1147.449610][T16999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2711'. [ 1147.835716][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.860364][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.892019][ T5725] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1147.979513][ T5725] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1148.011686][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.066427][ T5725] usb 6-1: config 0 descriptor?? [ 1148.232065][T15529] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.245872][T15529] Bluetooth: hci5: command 0x0406 tx timeout [ 1148.344412][T17007] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1149.107389][T16986] lo speed is unknown, defaulting to 1000 [ 1149.225423][T16986] xfrm0 speed is unknown, defaulting to 1000 [ 1149.470963][ T5342] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1149.635925][ T5342] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1149.651981][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.661546][ T5342] usb 5-1: Product: syz [ 1149.665940][ T5342] usb 5-1: Manufacturer: syz [ 1149.672542][ T5342] usb 5-1: SerialNumber: syz [ 1149.695123][ T5342] usb 5-1: config 0 descriptor?? [ 1149.842511][T17025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2717'. [ 1150.031418][ T5342] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1150.929914][ T5725] usbhid 6-1:0.0: can't add hid device: -71 [ 1150.941466][ T5725] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1150.954775][ T5725] usb 6-1: USB disconnect, device number 9 [ 1152.582975][T17064] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 1152.590583][T17064] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 1152.671763][ T30] audit: type=1400 audit(1778512787.782:1575): avc: denied { create } for pid=17053 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1152.776946][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2724'. [ 1152.818889][T17062] lo speed is unknown, defaulting to 1000 [ 1152.825539][T17062] xfrm0 speed is unknown, defaulting to 1000 [ 1153.011803][ T5342] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1154.330871][T17069] overlayfs: missing 'workdir' [ 1154.433417][T17072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2727'. [ 1154.499737][T17072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2727'. [ 1155.234772][T17080] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2730'. [ 1155.427828][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2731'. [ 1156.464026][T17091] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1157.988110][T17107] XFS (nullb0): Invalid superblock magic number [ 1158.222936][T17121] syz.2.2740 (17121): drop_caches: 4 [ 1158.782201][T17127] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1158.809727][T17107] lo speed is unknown, defaulting to 1000 [ 1158.828125][T17107] xfrm0 speed is unknown, defaulting to 1000 [ 1158.943911][ T5342] usb 5-1: USB disconnect, device number 85 [ 1159.398860][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1159.530485][ T24] usb 6-1: device descriptor read/64, error -71 [ 1159.754370][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2743'. [ 1159.820494][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1159.981548][ T24] usb 6-1: device descriptor read/64, error -71 [ 1160.107125][ T24] usb usb6-port1: attempt power cycle [ 1160.333418][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1160.560698][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1161.150507][ T30] audit: type=1326 audit(1778512796.332:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.4.2748" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1161.355825][T17153] lo speed is unknown, defaulting to 1000 [ 1161.363060][T17153] xfrm0 speed is unknown, defaulting to 1000 [ 1161.938261][ T30] audit: type=1326 audit(1778512796.332:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.4.2748" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1161.965179][ T30] audit: type=1400 audit(1778512796.632:1578): avc: denied { ioctl } for pid=17149 comm="syz.6.2749" path="socket:[64536]" dev="sockfs" ino=64536 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1162.303765][ T30] audit: type=1326 audit(1778512797.492:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.4.2748" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1162.346950][ T30] audit: type=1326 audit(1778512797.492:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.4.2748" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1162.488783][ T30] audit: type=1326 audit(1778512797.492:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.4.2748" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419a99cdd9 code=0x7ffc0000 [ 1162.764034][T17168] binder: 17165:17168 ioctl 4018620d 0 returned -22 [ 1162.765994][T17169] binder: 17165:17169 ioctl 8004587d 0 returned -22 [ 1163.156786][T17163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1163.321560][T17164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1163.353948][T17164] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1163.378943][T11981] bond_slave_0: entered promiscuous mode [ 1163.384679][T11981] bond_slave_1: entered promiscuous mode [ 1164.530798][T17180] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1164.959117][ T24] usb 6-1: device descriptor read/8, error -71 [ 1165.843606][T17193] lo speed is unknown, defaulting to 1000 [ 1165.850679][T17193] xfrm0 speed is unknown, defaulting to 1000 [ 1167.746525][T17202] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 1167.963176][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1168.301968][T17202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1168.379535][T17208] bond3: entered promiscuous mode [ 1168.411762][T17208] bond3: entered allmulticast mode [ 1168.453037][T17221] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2764'. [ 1168.504794][T17222] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2764'. [ 1168.842030][ T30] audit: type=1326 audit(1778512804.022:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.078725][ T30] audit: type=1326 audit(1778512804.062:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.243662][ T30] audit: type=1326 audit(1778512804.062:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.271320][ T30] audit: type=1326 audit(1778512804.062:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.388716][ T30] audit: type=1326 audit(1778512804.082:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.518473][ T30] audit: type=1326 audit(1778512804.092:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.626359][ T30] audit: type=1326 audit(1778512804.172:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.913331][ T30] audit: type=1326 audit(1778512804.542:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1169.970567][ T5342] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1169.993058][ T30] audit: type=1326 audit(1778512804.542:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.2.2765" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1c59cdd9 code=0x7ffc0000 [ 1170.099755][T17238] XFS (nullb0): Invalid superblock magic number [ 1170.197695][ T5342] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1170.239742][ T5342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.286255][ T5342] usb 6-1: Product: syz [ 1170.305074][ T5342] usb 6-1: Manufacturer: syz [ 1170.328608][ T5342] usb 6-1: SerialNumber: syz [ 1170.357510][ T5342] usb 6-1: config 0 descriptor?? [ 1170.539847][T17238] lo speed is unknown, defaulting to 1000 [ 1170.567049][T17238] xfrm0 speed is unknown, defaulting to 1000 [ 1170.592350][ T5342] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1170.690522][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1170.873270][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.902412][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.926786][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1170.947502][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1170.956556][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.988043][ T9] usb 5-1: config 0 descriptor?? [ 1171.726754][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.733679][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.095188][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2773'. [ 1172.289380][ T5342] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1172.319332][ T5342] usb 6-1: USB disconnect, device number 14 [ 1172.620688][ T30] audit: type=1400 audit(1778512807.802:1591): avc: denied { listen } for pid=17273 comm="syz.6.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1174.592320][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1174.598984][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1174.611102][ T9] usb 5-1: USB disconnect, device number 86 [ 1174.881930][T17286] sctp: [Deprecated]: syz.5.2775 (pid 17286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1174.881930][T17286] Use struct sctp_sack_info instead [ 1177.361667][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2781'. [ 1178.677342][ T6082] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1179.245190][T17334] XFS (nullb0): Invalid superblock magic number [ 1179.464069][T17334] lo speed is unknown, defaulting to 1000 [ 1179.477100][T17334] xfrm0 speed is unknown, defaulting to 1000 [ 1179.712359][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1180.531248][T17356] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1181.981142][ T5706] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1182.020269][T15806] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1182.062342][ T5706] dvb_usb_az6027 3-1:64.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1182.129606][T15806] dvb_usb_az6027 2-1:64.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1182.174284][ T5706] usb 3-1: USB disconnect, device number 97 [ 1182.216039][T15806] usb 2-1: USB disconnect, device number 88 [ 1182.439493][T17378] netlink: 'syz.2.2800': attribute type 1 has an invalid length. [ 1182.660609][T15806] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1182.840764][T15806] usb 2-1: Using ep0 maxpacket: 32 [ 1182.851283][T15806] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1182.865788][T15806] usb 2-1: config 0 has no interface number 0 [ 1182.878687][T15806] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1182.896608][T15806] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1182.911287][T15806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.926231][T15806] usb 2-1: Product: syz [ 1182.934665][T15806] usb 2-1: Manufacturer: syz [ 1182.944062][T15806] usb 2-1: SerialNumber: syz [ 1182.971019][T15806] usb 2-1: config 0 descriptor?? [ 1183.400757][T11981] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1183.720681][ T5342] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1184.362174][T11981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.380635][T11981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.395286][T11981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1184.410012][T11981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.795749][T15806] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1184.810656][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.844956][T11981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.855516][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.877124][T11981] usb 6-1: config 0 descriptor?? [ 1184.888385][ T5342] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1184.906451][ T5342] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.917008][ T5342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.949100][ T5342] usb 7-1: config 0 descriptor?? [ 1185.161786][T15806] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1185.894597][ T30] audit: type=1400 audit(1778512820.452:1592): avc: denied { open } for pid=17393 comm="syz.2.2805" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1185.937791][T15806] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1186.021740][T15806] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1186.099485][T17370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.112403][T15806] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1186.294023][T15806] usb 2-1: USB disconnect, device number 89 [ 1186.396852][T17402] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1187.680556][ T9] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 1187.861798][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1187.876985][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1187.900634][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1187.919280][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1187.938532][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1188.150830][T11981] usbhid 6-1:0.0: can't add hid device: -71 [ 1188.173665][T11981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1188.253079][T11981] usb 6-1: USB disconnect, device number 15 [ 1188.306325][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1188.313758][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1188.324447][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1188.336088][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1188.347236][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1188.376734][ T5342] usbhid 7-1:0.0: can't add hid device: -71 [ 1188.420559][ T5342] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1188.483475][ T5342] usb 7-1: USB disconnect, device number 9 [ 1188.790966][T11981] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1189.053141][T11981] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1189.114734][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2815'. [ 1189.129125][T11981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.293835][T11981] usb 6-1: config 0 descriptor?? [ 1189.822735][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1189.840589][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1189.854834][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1189.866497][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1189.877617][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1189.881941][T11981] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1190.073873][T11981] [drm:udl_init] *ERROR* Selecting channel failed [ 1190.116324][T11981] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1190.150094][T17448] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2817'. [ 1190.158845][T11981] [drm] Initialized udl on minor 2 [ 1190.159144][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 1190.177987][T11981] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1190.182983][T11981] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1190.195835][T11981] usb 6-1: USB disconnect, device number 16 [ 1190.207378][T15336] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1190.268327][T15336] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1190.427378][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1190.433651][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1190.442691][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.539020][ T9] usb 2-1: can't set config #168, error -71 [ 1190.548068][ T9] usb 2-1: USB disconnect, device number 90 [ 1190.620484][T15336] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1190.660562][ T5706] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1190.781933][T15336] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1190.789428][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1190.801367][T15336] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.810528][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 1190.813479][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1190.820877][ T5706] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1190.829941][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1190.831043][T15336] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1190.839913][ T5706] usb 3-1: config 0 has no interface number 0 [ 1190.850020][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1190.858142][ T5706] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.865473][T15336] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.874192][ T5706] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.874236][ T5706] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1190.874253][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.885521][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1190.936212][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1190.936913][ T5706] usb 3-1: config 0 descriptor?? [ 1190.956813][T15336] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1190.956855][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1190.956878][T15336] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.956900][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1190.956923][T15336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1190.959360][T15336] usb 7-1: string descriptor 0 read error: -22 [ 1190.959459][T15336] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1190.959479][T15336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.026004][T15336] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1191.028689][ T5725] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1191.071855][ T5608] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1191.140545][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1191.224423][T17454] futex_wake_op: syz.6.2820 tries to shift op by -1; fix this program [ 1191.238452][ T5608] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 1191.249947][ T5608] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1191.261331][ T5608] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 1191.274333][ T5608] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 1191.287099][ T5725] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1191.297141][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.308086][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.319889][ T5725] usb 5-1: Product: syz [ 1191.324866][ T5725] usb 5-1: Manufacturer: syz [ 1191.330226][ T5608] usb 6-1: string descriptor 0 read error: -22 [ 1191.337151][ T5608] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1191.347105][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.358741][ T5725] usb 5-1: SerialNumber: syz [ 1191.363785][ T5608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.375682][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1191.390559][ T5725] usb 5-1: config 0 descriptor?? [ 1191.405200][ T5608] usb 6-1: low speed audio streaming not supported [ 1191.412255][ T5725] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 087 [ 1191.420672][ T5608] usb 6-1: low speed audio streaming not supported [ 1191.427717][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1191.438077][ T5608] usb 6-1: unit 3 not found! [ 1191.449015][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.472559][ T9] usb 2-1: config 0 descriptor?? [ 1191.638217][T17466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.658400][T17466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.730354][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1296.737352][ C1] rcu: 0-...!: (1 GPs behind) idle=1004/1/0x4000000000000000 softirq=86937/86938 fqs=0 [ 1296.748113][ C1] rcu: (detected by 1, t=10506 jiffies, g=100625, q=393 ncpus=2) [ 1296.755913][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1296.755938][ C0] NMI backtrace for cpu 0 [ 1296.755952][ C0] CPU: 0 UID: 0 PID: 5608 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.755972][ C0] Tainted: [L]=SOFTLOCKUP [ 1296.755977][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1296.755987][ C0] Workqueue: usb_hub_wq hub_event [ 1296.756010][ C0] RIP: 0010:mark_lock+0x17/0xa20 [ 1296.756029][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 53 48 83 e4 f0 <48> 83 ec 70 65 48 8b 1d 15 8d 26 12 48 89 5c 24 68 89 d3 83 fa 08 [ 1296.756046][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00000086 [ 1296.756057][ C0] RAX: 000000000000000c RBX: ffff888037f00c58 RCX: 0000000000000005 [ 1296.756066][ C0] RDX: 0000000000000008 RSI: ffff888037f00c58 RDI: ffff888037f00000 [ 1296.756075][ C0] RBP: ffffc90000007c30 R08: 0000000000000001 R09: 0000000000000000 [ 1296.756084][ C0] R10: 0000000000000005 R11: 0000000000000001 R12: ffff888037f00c58 [ 1296.756092][ C0] R13: ffff888037f00000 R14: 0000000000000005 R15: 0000000000000002 [ 1296.756101][ C0] FS: 0000000000000000(0000) GS:ffff888124372000(0000) knlGS:0000000000000000 [ 1296.756115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1296.756124][ C0] CR2: 00007f67f6389f9c CR3: 0000000046739000 CR4: 00000000003526f0 [ 1296.756134][ C0] Call Trace: [ 1296.756141][ C0] [ 1296.756149][ C0] __lock_acquire+0x4a5/0x2630 [ 1296.756167][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1296.756187][ C0] lock_acquire+0x1b1/0x370 [ 1296.756202][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 1296.756222][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1296.756242][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1296.756259][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 1296.756277][ C0] debug_object_deactivate+0x135/0x3b0 [ 1296.756294][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1296.756314][ C0] ? timerqueue_linked_add+0x260/0x430 [ 1296.756336][ C0] __hrtimer_run_queues+0x2f0/0xa00 [ 1296.756359][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1296.756376][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1296.756396][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1296.756414][ C0] [ 1296.756418][ C0] [ 1296.756424][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1296.756439][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 1296.756456][ C0] Code: 05 7b 5a 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 28 f3 0e 0f 82 a4 02 00 00 8b 35 0e 5c f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 5a 26 12 0f 85 ed 02 00 00 48 83 c4 [ 1296.756468][ C0] RSP: 0018:ffffc900039fef60 EFLAGS: 00000206 [ 1296.756478][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 1296.756487][ C0] RDX: 0000000000000000 RSI: ffffffff8defbc27 RDI: ffffffff8c1c3800 [ 1296.756496][ C0] RBP: ffffffff8e7e54e0 R08: 0000000056a09c81 R09: 0000000000000007 [ 1296.756505][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1296.756514][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.756526][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1296.756545][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1296.756564][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1296.756579][ C0] unwind_next_frame+0xd1/0x2090 [ 1296.756597][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1296.756615][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1296.756637][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1296.756651][ C0] arch_stack_walk+0x94/0xf0 [ 1296.756671][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1296.756692][ C0] stack_trace_save+0x8e/0xc0 [ 1296.756706][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1296.756720][ C0] ? kasan_save_stack+0x3f/0x50 [ 1296.756732][ C0] ? kasan_save_stack+0x30/0x50 [ 1296.756743][ C0] ? kasan_save_track+0x14/0x30 [ 1296.756754][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1296.756774][ C0] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 1296.756795][ C0] ? kstrdup+0x51/0xe0 [ 1296.756807][ C0] ? kstrdup_const+0x63/0x80 [ 1296.756819][ C0] kasan_save_stack+0x30/0x50 [ 1296.756831][ C0] ? kasan_save_stack+0x30/0x50 [ 1296.756842][ C0] ? kasan_save_track+0x14/0x30 [ 1296.756853][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1296.756866][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1296.756896][ C0] kasan_save_track+0x14/0x30 [ 1296.756908][ C0] __kasan_slab_alloc+0x89/0x90 [ 1296.756921][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1296.756940][ C0] ? __kernfs_new_node+0xd2/0x9f0 [ 1296.756956][ C0] ? kstrdup+0xb3/0xe0 [ 1296.756968][ C0] __kernfs_new_node+0xd2/0x9f0 [ 1296.756984][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1296.756998][ C0] ? arch_stack_walk+0x94/0xf0 [ 1296.757016][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 1296.757034][ C0] ? find_held_lock+0x2b/0x80 [ 1296.757052][ C0] ? kernfs_root+0xee/0x2a0 [ 1296.757067][ C0] ? kernfs_root+0xee/0x2a0 [ 1296.757084][ C0] kernfs_new_node+0x11b/0x1a0 [ 1296.757103][ C0] kernfs_create_dir_ns+0x4c/0x1a0 [ 1296.757123][ C0] sysfs_create_dir_ns+0x13a/0x2b0 [ 1296.757139][ C0] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1296.757154][ C0] ? find_held_lock+0x2b/0x80 [ 1296.757167][ C0] ? kobject_add_internal+0x25f/0x930 [ 1296.757187][ C0] ? kobject_add_internal+0x25f/0x930 [ 1296.757207][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1296.757227][ C0] kobject_add_internal+0x2c8/0x930 [ 1296.757248][ C0] kobject_add+0x16a/0x1e0 [ 1296.757260][ C0] ? __pfx_kobject_add+0x10/0x10 [ 1296.757274][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1296.757291][ C0] ? class_to_subsys+0x114/0x150 [ 1296.757308][ C0] device_add+0x294/0x1950 [ 1296.757323][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1296.757340][ C0] ? __pfx_device_add+0x10/0x10 [ 1296.757353][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1296.757370][ C0] ? __init_waitqueue_head+0xca/0x150 [ 1296.757391][ C0] usb_create_ep_devs+0x160/0x2b0 [ 1296.757412][ C0] usb_new_device.cold+0xcf3/0x115c [ 1296.757431][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1296.757449][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1296.757467][ C0] ? mark_held_locks+0x40/0x70 [ 1296.757484][ C0] hub_event+0x314d/0x4af0 [ 1296.757509][ C0] ? __pfx_hub_event+0x10/0x10 [ 1296.757531][ C0] process_one_work+0xa0e/0x1980 [ 1296.757552][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1296.757571][ C0] ? __pfx_hub_event+0x10/0x10 [ 1296.757589][ C0] worker_thread+0x5ef/0xe50 [ 1296.757608][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1296.757625][ C0] ? kthread+0x13a/0x450 [ 1296.757640][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1296.757656][ C0] kthread+0x370/0x450 [ 1296.757671][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.757687][ C0] ret_from_fork+0x72b/0xd50 [ 1296.757705][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1296.757722][ C0] ? rcu_is_watching+0x12/0xc0 [ 1296.757742][ C0] ? __switch_to+0x800/0x1100 [ 1296.757761][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.757777][ C0] ret_from_fork_asm+0x1a/0x30 [ 1296.757801][ C0] [ 1296.757934][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g100625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1297.440828][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1297.450782][ C1] rcu: RCU grace-period kthread stack dump: [ 1297.456653][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1297.470134][ C1] Call Trace: [ 1297.473401][ C1] [ 1297.476326][ C1] __schedule+0x1295/0x67a0 [ 1297.480844][ C1] ? __pfx___schedule+0x10/0x10 [ 1297.485689][ C1] ? find_held_lock+0x2b/0x80 [ 1297.490353][ C1] ? schedule+0x2bf/0x390 [ 1297.494678][ C1] schedule+0xdd/0x390 [ 1297.498741][ C1] schedule_timeout+0x127/0x280 [ 1297.503582][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1297.508946][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1297.514225][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1297.520025][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1297.525480][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1297.530240][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1297.535521][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 1297.540973][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1297.545906][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1297.551104][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1297.556906][ C1] rcu_gp_kthread+0x179/0x230 [ 1297.561577][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1297.566767][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1297.572571][ C1] ? __kthread_parkme+0x18c/0x230 [ 1297.577590][ C1] ? kthread+0x13a/0x450 [ 1297.581825][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1297.587013][ C1] kthread+0x370/0x450 [ 1297.591073][ C1] ? __pfx_kthread+0x10/0x10 [ 1297.595657][ C1] ret_from_fork+0x72b/0xd50 [ 1297.600329][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.605435][ C1] ? __switch_to+0x800/0x1100 [ 1297.610112][ C1] ? __pfx_kthread+0x10/0x10 [ 1297.614703][ C1] ret_from_fork_asm+0x1a/0x30 [ 1297.619475][ C1] [ 1297.622484][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1297.628795][ C1] CPU: 1 UID: 0 PID: 17455 Comm: syz.2.2819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.639716][ C1] Tainted: [L]=SOFTLOCKUP [ 1297.644022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1297.654063][ C1] RIP: 0010:write_comp_data+0x2b/0x90 [ 1297.659435][ C1] Code: 8b 05 59 40 02 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 30 40 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 cc cc cc cc 8b 87 d4 16 00 00 85 c0 74 f1 8b 87 b0 16 00 00 83 [ 1297.679037][ C1] RSP: 0018:ffffc9000792fb38 EFLAGS: 00000297 [ 1297.685102][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff81fc238d [ 1297.693065][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802229ca00 [ 1297.701031][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 1297.708990][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1297.716960][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 1297.724921][ C1] FS: 00007f8b1d4866c0(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 1297.733850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1297.740432][ C1] CR2: 0000000000000000 CR3: 0000000061dbb000 CR4: 00000000003526f0 [ 1297.748393][ C1] Call Trace: [ 1297.751661][ C1] [ 1297.754579][ C1] smp_call_function_many_cond+0x5ad/0x1700 [ 1297.760471][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 1297.766194][ C1] ? clock_was_set+0x1c3/0x870 [ 1297.770945][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1297.777269][ C1] ? mark_held_locks+0x40/0x70 [ 1297.782030][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1297.787831][ C1] clock_was_set+0x62b/0x870 [ 1297.792421][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 1297.797519][ C1] ? rcu_is_watching+0x12/0xc0 [ 1297.802293][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1297.808095][ C1] do_settimeofday64+0x330/0x4d0 [ 1297.813027][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 1297.818474][ C1] ? security_capable+0x80/0x260 [ 1297.823512][ C1] ? hidinput_configure_usage+0x1347/0x7df0 [ 1297.829402][ C1] ? capable+0xd3/0xf0 [ 1297.833478][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 1297.838759][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 1297.844209][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1297.850179][ C1] ? rcu_is_watching+0x12/0xc0 [ 1297.854943][ C1] do_syscall_64+0x10b/0xf80 [ 1297.859536][ C1] ? clear_bhb_loop+0x40/0x90 [ 1297.864206][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.870094][ C1] RIP: 0033:0x7f8b1c59cdd9 [ 1297.874501][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.894270][ C1] RSP: 002b:00007f8b1d486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1297.902678][ C1] RAX: ffffffffffffffda RBX: 00007f8b1c815fa0 RCX: 00007f8b1c59cdd9 [ 1297.911071][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1297.919030][ C1] RBP: 00007f8b1c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1297.926985][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.934942][ C1] R13: 00007f8b1c816038 R14: 00007f8b1c815fa0 R15: 00007ffed1fb5538 [ 1297.942912][ C1]