last executing test programs: 17m46.01967386s ago: executing program 4 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 17m45.881855317s ago: executing program 4 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000580), 0x0, 0x1fe, 0x12) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) close(0x3) 17m44.547749698s ago: executing program 4 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x29, 0x80000, 0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f0000000e00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 17m43.520350158s ago: executing program 4 (id=1442): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05004b20"], 0x28) 17m41.967556889s ago: executing program 4 (id=1447): ioperm(0x4, 0x8, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x1, 0x0, 0x0, 0x1) 17m39.670500667s ago: executing program 4 (id=1452): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x88, r4, 0xc1564882fce2ad39, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket(0x11, 0x6, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) getrandom(&(0x7f00000005c0)=""/231, 0xe7, 0x3) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 17m23.378397693s ago: executing program 32 (id=1452): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x88, r4, 0xc1564882fce2ad39, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket(0x11, 0x6, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) getrandom(&(0x7f00000005c0)=""/231, 0xe7, 0x3) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3m54.970423711s ago: executing program 1 (id=3152): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r1, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r4, 0x407, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5}, 0x0) ioctl(r6, 0xc0104d03, &(0x7f0000000140)) 3m47.354086101s ago: executing program 1 (id=3164): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x240002) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, &(0x7f00000008c0), 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x703d25, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x5bd1, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000000c0)={0x0, 'wg0\x00', {}, 0xff}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) 3m43.655505314s ago: executing program 1 (id=3170): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r1, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m40.333244616s ago: executing program 1 (id=3177): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) write(r1, &(0x7f0000000140)='blk', 0x3) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x7, 0x0, &(0x7f00000001c0)) r3 = syz_clone(0x8000, &(0x7f0000000000)="7d92e47e010713bd8651fda8a8b90375e55e8a8c4d17fc569da6261e8cb42aa204bf8fb3555468b13bcf", 0x2a, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="9cb70a473e058e18104c7a69023c2311cb6e3e97018ec118c647a39072cef81fcd7e024a5d79742b4328c2b7ab9ad03b444dbe2174634c8c6cd754088b418d5893396b72b21b6a1d1d6dbe15dea5029ad4a47ec7faa88eb5014e92d7861f4d6bf8452fbd84b7906ca318508316f8179ec9") r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x5, 0x400, 0x2e2}}, 0x30) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, r7}) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m33.341284588s ago: executing program 1 (id=3192): sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28012000", @ANYRES16, @ANYBLOB="00042dbd7000fcdbdf250300000008000100", @ANYRES32, @ANYBLOB="1c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f73746174730000000000000000000000000000000000000005000300"], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 3m25.698744992s ago: executing program 1 (id=3205): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./ttyUSB0\x00', 0x81b6, 0x8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 3m24.673399916s ago: executing program 33 (id=3205): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./ttyUSB0\x00', 0x81b6, 0x8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 3m2.446338635s ago: executing program 3 (id=3247): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000001c0)={0x2, 0x2, 0x5}) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x4, 0x1, 0x2, 0x9, @multicast}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x3fffffffffffce3, 0x700000000000000, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x2006c802) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r6, &(0x7f0000000040)=0x731, 0x8) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = socket(0x1b, 0x803, 0x7) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xfffffffffffffeb5) sendmsg$nl_route(r7, 0x0, 0x20000080) r9 = fsopen(&(0x7f0000000100)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='0\x00', 0x0) 2m57.719558999s ago: executing program 3 (id=3262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2000000}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 2m53.977096105s ago: executing program 3 (id=3270): syz_open_dev$vim2m(&(0x7f0000000180), 0x7fffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0xff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xfffffff9, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) close(r2) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000ffff17bd700002dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b8f010080000000280012800b000100697036746e6c0000180002801400030000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x40014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) 2m49.083758651s ago: executing program 3 (id=3275): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1a, &(0x7f0000001900)={0x31, 0x0, 0x5}) timer_create(0x0, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_gettime(0x0, &(0x7f00000001c0)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x40, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000001000080000201672889400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000340)=0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m46.534171103s ago: executing program 3 (id=3280): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m45.206730464s ago: executing program 3 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) (async, rerun: 64) sendmsg$nl_route_sched(r0, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r2, 0xc0104d08, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltfilter={0x690, 0x2d, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0x8}, {0xe, 0xfff1}, {0xffff, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xff000000, 0xcbe66e7517c45c8f, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x60c, 0x2, [@TCA_FLOW_ACT={0x5ec, 0x9, 0x0, 0x1, [@m_vlan={0xc4, 0x5, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x79}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x10000000, 0x5, 0xf4d7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3ee}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd46c, 0x95f, 0xfffffffffffffff8, 0x2, 0x4}, 0x3}}]}, {0x2d, 0x6, "cd34fee2e87141a25ce5372018771b38f5318e061beb47a936d4d4f45204cca8a051412aec6ccbfde4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x524, 0x17, 0x0, 0x0, {{0xb}, {0x4f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x7, 0x5, 0xd, {0x2, 0x0, 0x40, 0x449, 0x4, 0x1}, {0x80, 0x2, 0xea, 0x8, 0x3, 0x46904f62}, 0x2, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x447, 0x8, 0x3, 0x6, 0xfa0, {0x80, 0x0, 0x4, 0x8, 0xa, 0x77e9}, {0x4, 0x1, 0x4, 0xfffd, 0x1, 0x7}, 0xa, 0x1, 0xf16a}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0xffff, 0x4, 0x6, {0x9, 0x0, 0x8, 0x3, 0xf, 0x7}, {0x0, 0x0, 0x2, 0x3, 0x6, 0x6}, 0x9, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x6, 0x5, 0xa9, 0xb, {0x9, 0x1, 0xbb80, 0x1000, 0xf, 0x2}, {0x9, 0x2, 0xfffc, 0x7fff, 0xff, 0x8}, 0xe6d, 0xa, 0xd}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0xe00000, 0x2, 0x40000, 0x8, 0x3, 0x12, 0x81, 0x4, 0x80, 0x2, 0xef, 0x6, 0x8, 0x0, 0xae4, 0x2, 0x87, 0x8, 0xfff, 0x800, 0x9, 0xfffffffc, 0x0, 0x8, 0xfffffffd, 0x0, 0x6, 0x5, 0x200, 0x1, 0x6, 0x9, 0x1, 0x2, 0x1000, 0x1, 0x1, 0xff, 0x10000, 0x8, 0x2, 0xffffffc0, 0xffff7fff, 0x6a3, 0x7fffffff, 0x9, 0x500, 0xfffffffe, 0x1f, 0x2, 0xffff, 0x1, 0xff, 0x2, 0xfffffff9, 0xff, 0xfffffff7, 0x41fc, 0x3, 0x7, 0x6, 0x8, 0x4f3, 0x3, 0x9, 0x2, 0x8, 0x1, 0x800, 0x8, 0x7, 0x77, 0x1, 0x82f, 0x87a, 0x80000000, 0xab, 0x3ff, 0xfffffffa, 0x0, 0x5f, 0xffff0001, 0x3e, 0x2, 0x73, 0xb, 0x3, 0x4, 0x7, 0x8b, 0x10001, 0xb, 0x9, 0xf, 0x3, 0x5dd5, 0xdc, 0x3, 0x80000000, 0x1, 0xc15, 0x2, 0x8, 0xa, 0x6, 0x1, 0x0, 0xffff, 0x257028af, 0x6, 0x0, 0x76a3, 0x6, 0x6, 0x0, 0x9, 0xc, 0x9, 0x7, 0x7, 0x4, 0x8, 0xf, 0x6, 0x1, 0xfff, 0x5, 0x6, 0x9, 0x3, 0x7, 0xffffdd3b, 0x1, 0x88cc, 0xfffffe00, 0x28a4, 0xc, 0x6, 0x69e3, 0xfffffffb, 0x1, 0xc00, 0x3d39d383, 0x7fff, 0x2, 0x9, 0x8, 0x7, 0x5f9, 0x8, 0x40, 0x7, 0xc36, 0xd37, 0x7fff, 0x6, 0x8, 0x8000, 0xe, 0x200, 0xff, 0x3, 0x2, 0x9, 0x9, 0x3, 0x7, 0x80000000, 0x7, 0x7, 0x20000, 0x6, 0x1, 0x7, 0xff8000, 0x7, 0x0, 0x8001, 0x2, 0x2, 0x3, 0x4, 0xfffffff8, 0x7fffffff, 0x5, 0x7f, 0x8, 0x2, 0xfe6a, 0xb42, 0x7, 0x8, 0x79a418dd, 0x9, 0x3ff, 0x8, 0x0, 0x7, 0xb9d, 0x36ff4183, 0x8c, 0x4, 0x10000, 0x7, 0x0, 0x9, 0xddd7, 0x8, 0x1, 0x719, 0x6, 0x6, 0x7, 0x101, 0x401, 0x5b6, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x5, 0x80000000, 0x6, 0x1ff, 0x41, 0x11a, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xffffff7f, 0x6, 0x5c76, 0x1, 0xad, 0x800, 0x5, 0x3, 0x3, 0x3, 0x400, 0x6, 0x0, 0x5, 0xfac, 0x5, 0x6, 0x0, 0x4000000, 0xd, 0x7fff, 0x6]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc24}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) setns(0xc9, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010024bd70000000000002201400ff0000070024000008000100e0000001fc83aee4fcbeaa544d6f647e9e339e48c841b6c6d50b8e1480763994754b1b06eeca7bcf8f537c09e27550d7608ec14811a103dbad89377f7cdfb0b314884dfa945ae2f424de534147559dc3e2fc7a72e58b38779c66155c3c66d84718740ff27bab5f5a57fe8f3dbf1e5d62e735e30bf595aa82c44f1dc67f724d24c46e1d0da12ba016bd537a86207b30e7452dfa65e1a83aa5a55823c44987b967f58ac6e01343adc2ff983b1eb3e03aea077e7be1f3fd6eed1e5333f1923c4de725843acabb15f6673c1e53b18da81697845c"], 0x24}}, 0xea5bc50b4199d7ae) (async, rerun: 64) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000e, 0xa2010, r3, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) sync() 2m29.661350346s ago: executing program 34 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) (async, rerun: 64) sendmsg$nl_route_sched(r0, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r2, 0xc0104d08, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltfilter={0x690, 0x2d, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0x8}, {0xe, 0xfff1}, {0xffff, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xff000000, 0xcbe66e7517c45c8f, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x60c, 0x2, [@TCA_FLOW_ACT={0x5ec, 0x9, 0x0, 0x1, [@m_vlan={0xc4, 0x5, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x79}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x10000000, 0x5, 0xf4d7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3ee}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd46c, 0x95f, 0xfffffffffffffff8, 0x2, 0x4}, 0x3}}]}, {0x2d, 0x6, "cd34fee2e87141a25ce5372018771b38f5318e061beb47a936d4d4f45204cca8a051412aec6ccbfde4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x524, 0x17, 0x0, 0x0, {{0xb}, {0x4f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x7, 0x5, 0xd, {0x2, 0x0, 0x40, 0x449, 0x4, 0x1}, {0x80, 0x2, 0xea, 0x8, 0x3, 0x46904f62}, 0x2, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x447, 0x8, 0x3, 0x6, 0xfa0, {0x80, 0x0, 0x4, 0x8, 0xa, 0x77e9}, {0x4, 0x1, 0x4, 0xfffd, 0x1, 0x7}, 0xa, 0x1, 0xf16a}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0xffff, 0x4, 0x6, {0x9, 0x0, 0x8, 0x3, 0xf, 0x7}, {0x0, 0x0, 0x2, 0x3, 0x6, 0x6}, 0x9, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x6, 0x5, 0xa9, 0xb, {0x9, 0x1, 0xbb80, 0x1000, 0xf, 0x2}, {0x9, 0x2, 0xfffc, 0x7fff, 0xff, 0x8}, 0xe6d, 0xa, 0xd}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0xe00000, 0x2, 0x40000, 0x8, 0x3, 0x12, 0x81, 0x4, 0x80, 0x2, 0xef, 0x6, 0x8, 0x0, 0xae4, 0x2, 0x87, 0x8, 0xfff, 0x800, 0x9, 0xfffffffc, 0x0, 0x8, 0xfffffffd, 0x0, 0x6, 0x5, 0x200, 0x1, 0x6, 0x9, 0x1, 0x2, 0x1000, 0x1, 0x1, 0xff, 0x10000, 0x8, 0x2, 0xffffffc0, 0xffff7fff, 0x6a3, 0x7fffffff, 0x9, 0x500, 0xfffffffe, 0x1f, 0x2, 0xffff, 0x1, 0xff, 0x2, 0xfffffff9, 0xff, 0xfffffff7, 0x41fc, 0x3, 0x7, 0x6, 0x8, 0x4f3, 0x3, 0x9, 0x2, 0x8, 0x1, 0x800, 0x8, 0x7, 0x77, 0x1, 0x82f, 0x87a, 0x80000000, 0xab, 0x3ff, 0xfffffffa, 0x0, 0x5f, 0xffff0001, 0x3e, 0x2, 0x73, 0xb, 0x3, 0x4, 0x7, 0x8b, 0x10001, 0xb, 0x9, 0xf, 0x3, 0x5dd5, 0xdc, 0x3, 0x80000000, 0x1, 0xc15, 0x2, 0x8, 0xa, 0x6, 0x1, 0x0, 0xffff, 0x257028af, 0x6, 0x0, 0x76a3, 0x6, 0x6, 0x0, 0x9, 0xc, 0x9, 0x7, 0x7, 0x4, 0x8, 0xf, 0x6, 0x1, 0xfff, 0x5, 0x6, 0x9, 0x3, 0x7, 0xffffdd3b, 0x1, 0x88cc, 0xfffffe00, 0x28a4, 0xc, 0x6, 0x69e3, 0xfffffffb, 0x1, 0xc00, 0x3d39d383, 0x7fff, 0x2, 0x9, 0x8, 0x7, 0x5f9, 0x8, 0x40, 0x7, 0xc36, 0xd37, 0x7fff, 0x6, 0x8, 0x8000, 0xe, 0x200, 0xff, 0x3, 0x2, 0x9, 0x9, 0x3, 0x7, 0x80000000, 0x7, 0x7, 0x20000, 0x6, 0x1, 0x7, 0xff8000, 0x7, 0x0, 0x8001, 0x2, 0x2, 0x3, 0x4, 0xfffffff8, 0x7fffffff, 0x5, 0x7f, 0x8, 0x2, 0xfe6a, 0xb42, 0x7, 0x8, 0x79a418dd, 0x9, 0x3ff, 0x8, 0x0, 0x7, 0xb9d, 0x36ff4183, 0x8c, 0x4, 0x10000, 0x7, 0x0, 0x9, 0xddd7, 0x8, 0x1, 0x719, 0x6, 0x6, 0x7, 0x101, 0x401, 0x5b6, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x5, 0x80000000, 0x6, 0x1ff, 0x41, 0x11a, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xffffff7f, 0x6, 0x5c76, 0x1, 0xad, 0x800, 0x5, 0x3, 0x3, 0x3, 0x400, 0x6, 0x0, 0x5, 0xfac, 0x5, 0x6, 0x0, 0x4000000, 0xd, 0x7fff, 0x6]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc24}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) setns(0xc9, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010024bd70000000000002201400ff0000070024000008000100e0000001fc83aee4fcbeaa544d6f647e9e339e48c841b6c6d50b8e1480763994754b1b06eeca7bcf8f537c09e27550d7608ec14811a103dbad89377f7cdfb0b314884dfa945ae2f424de534147559dc3e2fc7a72e58b38779c66155c3c66d84718740ff27bab5f5a57fe8f3dbf1e5d62e735e30bf595aa82c44f1dc67f724d24c46e1d0da12ba016bd537a86207b30e7452dfa65e1a83aa5a55823c44987b967f58ac6e01343adc2ff983b1eb3e03aea077e7be1f3fd6eed1e5333f1923c4de725843acabb15f6673c1e53b18da81697845c"], 0x24}}, 0xea5bc50b4199d7ae) (async, rerun: 64) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000e, 0xa2010, r3, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) sync() 1m14.99785618s ago: executing program 6 (id=3448): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) syz_clone3(0x0, 0x0) (rerun: 32) r1 = io_uring_setup(0xf08, &(0x7f0000000240)={0x0, 0xfb6d, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000010) mount(0x0, 0x0, 0x0, 0x2c01006, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) 1m13.502646297s ago: executing program 6 (id=3451): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x2f, 0x7, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$xdp(r2, &(0x7f0000001240)={0x2c, 0x6, 0x0, 0x10000006}, 0xfffffffffffffd01) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x3, 0x5003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x178, 0x394, 0xd0, 0x178, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0x0, 0xffffffff], [], 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x10, 0x3}}}, {{@ipv6={@private1, @mcast1, [0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {}, {}, 0x3b, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1e, 0x8, 0x5, 'snmp_trap\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) write(0xffffffffffffffff, &(0x7f0000000480)='du', 0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000202010200000000000000000a00000006000740000000003c0001802c000180140003002001000009000000000000000000000214000400fe8000000000000000000000000000bb0c000280050001"], 0x58}}, 0x0) 1m12.05745485s ago: executing program 6 (id=3456): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0x2, 0x8, 0x8, 0x9}, 0x131, &(0x7f0000000180)={0x5, 0xf, 0x131, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x9, 0xf0f, 0xe4, [0xc00f, 0x3f00, 0xc060, 0x7eff, 0xfff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9046d661402cb5a8a2d751d45936cb12"}, @ss_cap={0xa, 0x10, 0x3, 0x5dc073b6d72fafda, 0x2, 0x1, 0x76, 0x2}, @generic={0xd2, 0x10, 0x1, "4413fca5f72078a1584a623ccd4c6380dae67a58a3b5fe9ef19bc2d1f3563d834db4ac168655ba542a8ff86fb127266b2aaa10b7447ca65ffad82ed5b01f786a94e41102bc1494bf6cb7c325f8ee621366b385455bf625ce4ac17d64a3bc15a3b2200b7d8050391cc8f621b14fa6b43f08dfa7d260b3fd410b0672f0b4cde3c97c7a6b1f01c57b178d9928cb757991e81e7b3f6aa6e38076598210b7829bc3b6f1c5ac52fdb04fa0b389ca963b499e4ea1b82c24572249d0731c37bc883efc3496147a42bd0581ff69607603ec7d86"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x5, 0xff00, 0x0, [0xff3f3f, 0xff000f, 0xffc000, 0xcf]}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c01}}]}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x101001) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) socket$inet(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x9, 0x1, &(0x7f0000000000)={0x13, "4d0ca3fc32093a0ad16374b0b7e80f45380154c4c19d05aff3675e949398567d0e"}}) 1m8.025253957s ago: executing program 6 (id=3465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x1000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m7.571236862s ago: executing program 6 (id=3468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd9f2827ff5e9759f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x2, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@empty, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd7, [0x1ff, 0xa]}, 0xad, 0xf1}}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000300000000200000"], 0x50) r2 = semget(0x1, 0x4, 0x39c) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = semget(0x3, 0x3, 0x44) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000200)=""/39) socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000040)='./proc\x00', &(0x7f0000000180)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 1m5.529427396s ago: executing program 6 (id=3472): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x87, &(0x7f0000000040)=""/135}) r1 = dup3(r0, r0, 0x80000) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) r2 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x1, 0x8, 0x0, 0xe, 0x1, 0x2, 0x5, 0x1, 0x3, 0xd, 0x30, {0x3ff, 0x4}, 0x8e, 0x3}}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000280)=0x10000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0)=0x5, 0x4) exit_group(0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000300)=0xfd, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000017c0)={{'\x00', 0x2}, {0x100000000}, 0x11, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)="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", 0x1bd, 0x0, &(0x7f0000000580)={0x2, 0x110c, {0x1, 0xc, 0x1000, "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", 0xff, "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"}, 0xfd, "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"}, 0x1215}) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}}, 0x4000040) exit_group(0xfffffffffffffffa) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000001980)={0x8, @broadcast, 0x4e21, 0x1, 'sed\x00', 0xc, 0x5, 0x3a}, 0x2c) exit_group(0xc) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000019c0)={0x0, "2e32286d37aeb167196bb4bd1b627d7a"}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002a00)={0x2020}, 0x2020) write$P9_RSETATTR(r1, &(0x7f0000004a40)={0x7, 0x1b, 0x2}, 0x7) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f0000004b80)={&(0x7f0000004a80)=[{0xb58, 0x1, 0x0, {0x9, 0x3c7, 0x1}}, {0x1ff, 0x2, 0x0, {0x8, 0x1, 0x2}}, {0x3ff, 0x0, 0x0, {0x1, 0x6}}, {0x5, 0x1, 0x0, {0x9, 0x5, 0x2}}, {0x3ff, 0x2, 0x0, {0x8, 0x9, 0x1}}, {0x8, 0x1, 0x0, {0x2, 0x4, 0x1}}, {0xd5, 0x1, 0x0, {0x1, 0xa0}}], 0x7, 0x20, 0xff01, 0x7}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000004d00)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c40)={0x78, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x63}}}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0xa, 0x7f}}, @addba_req={0x3, 0x0, {0x0, {0x1, 0x0, 0xe, 0x80}, 0x9, {0x4, 0xff}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6b1}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x8, 0x3, 0xaab, 0x6, 0x8, 0x0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3ff]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x84) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000004d40)=0x1c24, &(0x7f0000004d80)=0x4) clock_gettime(0x0, &(0x7f0000004e00)={0x0, 0x0}) ppoll(&(0x7f0000004dc0)=[{r0, 0x1408}], 0x1, &(0x7f0000004e40)={r6, r7+60000000}, &(0x7f0000004e80)={[0x9]}, 0x8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000004ec0)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000004f40), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x1c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x20048040) 50.013076644s ago: executing program 35 (id=3472): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x87, &(0x7f0000000040)=""/135}) r1 = dup3(r0, r0, 0x80000) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) r2 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x1, 0x8, 0x0, 0xe, 0x1, 0x2, 0x5, 0x1, 0x3, 0xd, 0x30, {0x3ff, 0x4}, 0x8e, 0x3}}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000280)=0x10000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0)=0x5, 0x4) exit_group(0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000300)=0xfd, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000017c0)={{'\x00', 0x2}, {0x100000000}, 0x11, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)="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", 0x1bd, 0x0, &(0x7f0000000580)={0x2, 0x110c, {0x1, 0xc, 0x1000, "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", 0xff, "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"}, 0xfd, "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"}, 0x1215}) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}}, 0x4000040) exit_group(0xfffffffffffffffa) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000001980)={0x8, @broadcast, 0x4e21, 0x1, 'sed\x00', 0xc, 0x5, 0x3a}, 0x2c) exit_group(0xc) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000019c0)={0x0, "2e32286d37aeb167196bb4bd1b627d7a"}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002a00)={0x2020}, 0x2020) write$P9_RSETATTR(r1, &(0x7f0000004a40)={0x7, 0x1b, 0x2}, 0x7) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f0000004b80)={&(0x7f0000004a80)=[{0xb58, 0x1, 0x0, {0x9, 0x3c7, 0x1}}, {0x1ff, 0x2, 0x0, {0x8, 0x1, 0x2}}, {0x3ff, 0x0, 0x0, {0x1, 0x6}}, {0x5, 0x1, 0x0, {0x9, 0x5, 0x2}}, {0x3ff, 0x2, 0x0, {0x8, 0x9, 0x1}}, {0x8, 0x1, 0x0, {0x2, 0x4, 0x1}}, {0xd5, 0x1, 0x0, {0x1, 0xa0}}], 0x7, 0x20, 0xff01, 0x7}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000004d00)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c40)={0x78, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x63}}}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0xa, 0x7f}}, @addba_req={0x3, 0x0, {0x0, {0x1, 0x0, 0xe, 0x80}, 0x9, {0x4, 0xff}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6b1}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x8, 0x3, 0xaab, 0x6, 0x8, 0x0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3ff]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x84) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000004d40)=0x1c24, &(0x7f0000004d80)=0x4) clock_gettime(0x0, &(0x7f0000004e00)={0x0, 0x0}) ppoll(&(0x7f0000004dc0)=[{r0, 0x1408}], 0x1, &(0x7f0000004e40)={r6, r7+60000000}, &(0x7f0000004e80)={[0x9]}, 0x8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000004ec0)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000004f40), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x1c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x20048040) 29.306364611s ago: executing program 2 (id=3536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fb4f00b76ec28e29e230c29701", @ANYRES16=r2, @ANYBLOB="110a28bd7000fddbdf2509000000"], 0x14}}, 0x4044800) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0xe0) (async) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e80489680000010203010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001380)={0x54, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6}, {0x8, 0x13, 0x400}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044054}, 0x40050) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) (async, rerun: 32) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INTERRUPT(r6, &(0x7f00000043c0)={0x10, 0x0, r7}, 0x10) (async) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async, rerun: 64) recvmmsg(r8, 0x0, 0x0, 0x12160, 0x0) (rerun: 64) 25.658617095s ago: executing program 2 (id=3545): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c57000/0x3000)=nil, &(0x7f0000d67000/0x2000)=nil, &(0x7f0000e62000/0x1000)=nil, &(0x7f0000011000/0x1000)=nil, &(0x7f00008f6000/0x2000)=nil, &(0x7f00009fc000/0x3000)=nil, &(0x7f0000d51000/0x4000)=nil, &(0x7f0000e54000/0x3000)=nil, &(0x7f0000106000/0x1000)=nil, &(0x7f0000c3f000/0x1000)=nil, &(0x7f0000000180)="e07f4644112e7ce142596cd12e78895e7ef7b03b36e3", 0x16, r0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xb, &(0x7f0000000040)={0x611, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000080000004c00000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r5, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 24.720493626s ago: executing program 0 (id=3547): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/206, 0xce}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000004b00)=""/200, 0xc8}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000005d00)=""/199, 0xc7}], 0x7}}], 0x1, 0x2020, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r2 = io_uring_setup(0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r2, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x71, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 22.319060392s ago: executing program 2 (id=3550): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000300000010410e5046400001020301090285000301d8100c080b0102010130020904010000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c80010904020000010230000904020101010230001724010600263cc5513e624fcb705b8180000007000200000000000000064a0900100905820920007f0320c16109e794f6b269c09547684d44b062f699768e30fa1b40e37cbec7324bc8e0e2a9a1d89a1a53b90931f998a652f22a3852330c89bc11e2660c959201cd295df92be324b0b663c6"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001040)=""/91, &(0x7f00000010c0)=0x5b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x3000000) 21.84440774s ago: executing program 0 (id=3551): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x1803, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x1, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5, 0x19, 0x20000000, 0x4010005, 0x393a72d]}, &(0x7f0000000040)=0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x6f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x81, 0x10, 0x20, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "fceb"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7ff, 0xfe06, 0xec}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xc, 0x7}, @obex={0x5, 0x24, 0x15, 0x401}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x3}, @acm={0x4, 0x24, 0x2, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x8, 0x4, 0xa, 0x20, 0x6}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x2, 0xbf, 0xdb1, 0x7f}]}, 0x1, [{0x2, &(0x7f0000000200)=@string={0x2}}]}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x3, 0xfffffffe, 0x4, 0x201, 0x4000, 0x4, r4, r5, 0x7, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040014}, 0x4040) write(r8, &(0x7f0000000400)='+d', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffff00000001, {0x80000000000005, 0x3, 0x4, 0x4080000000004, 0xfffffffd, 0x6, {0x2, 0xffc, 0x808, 0x9, 0x8, 0x81, 0xfaae, 0x6, 0x5, 0x2000, 0x80000e44, r4, r5, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20080a0000000a31f70ba381326dcf"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19.919180368s ago: executing program 7 (id=3554): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000300000010410e5046400001020301090285000301d8100c080b0102010130020904010000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001040)=""/91, &(0x7f00000010c0)=0x5b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x3000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) 19.562804215s ago: executing program 0 (id=3556): mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r1, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.442959339s ago: executing program 2 (id=3557): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000300000010410e5046400001020301090285000301d8100c080b0102010130020904010000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c80010904020000010230000904020101010230001724010600263cc5513e624fcb705b8180000007000200000000000000064a0900100905820920007f0320c16109e794f6b269c09547684d44b062f699768e30fa1b40e37cbec7324bc8e0e2a9a1d89a1a53b90931f998a652f22a3852330c89bc11e2660c959201cd295df92be324b0b663c6"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001040)=""/91, &(0x7f00000010c0)=0x5b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000047, 0x3000000) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0xfffd, 0x1, 0xf, 0xaf8}, 0x8) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0303020000000203"]}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400e02000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001100)={0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0x6c6b}, @calipso={0x7, 0x8, {0x2, 0x0, 0xfb, 0xd29}}, @padn, @jumbo={0xc2, 0x4, 0x5}, @pad1]}, 0x28) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 17.511853232s ago: executing program 0 (id=3559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_open_procfs(0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)="6164642073797a30203a36cf56fb408fa4af6a4ab4f1ca3ca4d623cfc6562c976bdf50b0e6d4e201ca18e5bf2c7000532c805e5de21a2355143ca6f26a4fd8f19fac1046d99a8495b43bb39e7ad040a8ef425d90e1ac1a53755a21a98b3946a110592f4eda8fdeb2da108275627db558679ba6ca0f41382d8132a25a8c23caf0214cc077b327000000000000def815b422c1121d773428de", 0x98) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r7, 0x0, 0x0) write(r6, &(0x7f0000000180)='rd_', 0x3) 15.950933278s ago: executing program 7 (id=3561): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x8000000, 0x1000000, 0x0, 0x8fc0, 0x65f40}) 15.767066302s ago: executing program 7 (id=3562): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000300000010410e5046400001020301090285000301d8100c080b0102010130020904010000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c80010904020000010230000904020101010230001724010600263cc5513e624fcb705b8180000007000200000000000000064a0900100905820920007f0320c16109e794f6b269c09547684d44b062f699768e30fa1b40e37cbec7324bc8e0e2a9a1d89a1a53b90931f998a652f22a3852330c89bc11e2660c959201cd295df92be324b0b663c6"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001040)=""/91, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000047, 0x3000000) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0xfffd, 0x1, 0xf, 0xaf8}, 0x8) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0303020000000203"]}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400e02000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001100)={0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0x6c6b}, @calipso={0x7, 0x8, {0x2, 0x0, 0xfb, 0xd29}}, @padn, @jumbo={0xc2, 0x4, 0x5}, @pad1]}, 0x28) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 15.64995309s ago: executing program 8 (id=3563): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000003, 0x82002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) msgrcv(0x0, 0x0, 0x1f, 0x0, 0x6000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='^((&[\x00', 0x82000, &(0x7f0000000080)={@align=0xffffffffffffffff, {0x0, 0x8000, 0x0, 0x2}}, 0xdc, &(0x7f00000000c0), &(0x7f0000000140)=0x1}) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xbe, 0x0, 0x1}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r3, &(0x7f0000000380)="c37b16e60341c734e30a501306654b225333e9a882de2e851f7dffae7dd036fc4222c275a01766b88e16009450e3f27f"}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) 15.090761537s ago: executing program 8 (id=3564): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x29, 0x80000, 0x5) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 13.360404285s ago: executing program 5 (id=3565): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000000000000000000000200040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r6, 0x0, 0x1000, 0x1, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x5) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$alg(0x26, 0x5, 0x0) accept$alg(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x6, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) dup(r7) socket$tipc(0x1e, 0x0, 0x0) 12.424340352s ago: executing program 0 (id=3566): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x80, 0xfffffe00, @vifc_lcl_addr=@private=0xa010100, @local}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f", 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0x9, 0xfffffffe}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="c0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)="d40f30e5ab9ee82b8d1ced07", 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001840)="e8d650", 0x3}], 0x1}}], 0x3, 0x5081) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.33144188s ago: executing program 7 (id=3567): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000300000010410e5046400001020301090285000301d8100c080b0102010130020904010000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c80010904020000010230000904020101010230001724010600263cc5513e624fcb705b8180000007000200000000000000064a0900100905820920007f0320c16109e794f6b269c09547684d44b062f699768e30fa1b40e37cbec7324bc8e0e2a9a1d89a1a53b90931f998a652f22a3852330c89bc11e2660c959201cd295df92be324b0b663c6"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001040)=""/91, &(0x7f00000010c0)=0x5b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x3000000) 12.275820316s ago: executing program 8 (id=3568): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r3 = socket(0x10, 0x2, 0x0) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000800)={&(0x7f00000003c0)={{@hyper, 0x7}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x7}) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x6bf5, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x402, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000000c0)=r6, 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) openat(0xffffffffffffffff, &(0x7f00000000c0)='dir0\x00', 0x404000, 0x24) 10.822844971s ago: executing program 5 (id=3569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2000000}}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @sliced={0x5, [0xa46, 0x7e, 0x4, 0x23, 0xd, 0x401, 0x9, 0xcf, 0x8000, 0x3, 0xfffb, 0x101, 0x9, 0x9, 0xfffa, 0xfffa, 0xc85c, 0x4, 0x101, 0x7, 0x8, 0xa, 0x8, 0x80, 0x2, 0x7, 0x81, 0x94b, 0x17, 0x7, 0x7, 0x2, 0xffff, 0x8, 0x5, 0x2, 0x3, 0x7ff, 0x7, 0x5, 0x0, 0x1, 0x200, 0x98, 0x2, 0x4, 0x8, 0x7], 0xe}}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 8.843491187s ago: executing program 5 (id=3570): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x240002) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c8, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x703d25, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x5bd1, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000000c0)={0x0, 'wg0\x00', {}, 0xff}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) 8.762145402s ago: executing program 8 (id=3571): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000300000010410e5046400001020301090285000301d8100c080b0102010130020904010000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001040)=""/91, &(0x7f00000010c0)=0x5b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x3000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) 7.791619835s ago: executing program 7 (id=3572): creat(&(0x7f0000000040)='./file0\x00', 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x1) r4 = accept4(r1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000007080)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f0000000540)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/215, 0xd7}], 0x3, &(0x7f0000001700)=""/110, 0x6e}, 0x1d4}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001800)=""/136, 0x88}, {&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/101, 0x65}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/94, 0x5e}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x6, &(0x7f0000002b80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003b80)=@generic, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003c00)=""/241, 0xf1}, {&(0x7f0000003d00)=""/113, 0x71}, {&(0x7f0000003d80)=""/61, 0x3d}, {&(0x7f0000003e00)=""/27, 0x1b}, {&(0x7f0000003e40)=""/85, 0x55}], 0x5, &(0x7f0000003f40)=""/195, 0xc3}, 0xf14}, {{&(0x7f0000004040)=@sco, 0x80, &(0x7f00000053c0), 0x0, &(0x7f0000005440)=""/181, 0xb5}, 0x5}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/202, 0xca}, {&(0x7f0000006600)=""/111, 0x6f}, {&(0x7f0000006680)=""/180, 0xb4}, {&(0x7f0000006740)=""/173, 0xad}, {&(0x7f0000006800)=""/142, 0x8e}], 0x6}, 0x7}, {{&(0x7f0000006940)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000006a80)=[{&(0x7f00000069c0)=""/146, 0x92}], 0x1, &(0x7f00000040c0)=""/212, 0xd4}, 0xfffffffc}, {{&(0x7f0000006bc0)=@tipc=@name, 0x80, &(0x7f0000006d80)=[{&(0x7f0000006c40)=""/135, 0x87}, {&(0x7f0000006d00)=""/90, 0x5a}], 0x2, &(0x7f0000006dc0)=""/218, 0xda}, 0x80}], 0x7, 0x40010060, &(0x7f00000070c0)={r5, r6+60000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES16=r9, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r10], 0x3c}}, 0x0) close(r10) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000007100)=ANY=[@ANYBLOB="140000001001010000000000000000000000000a38000000060a010400000000000000000a0000010900010073797a31000000000900020073797a3200000000000003140000001100010000000000000000000200000a1f02ee13de0454491a5d26347242ce41fb2ef3dddec144ca7b9e6f731242e707a55d0fd62f4aa45866431a6066f1df97b8e879808065f942d3000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x24004000) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000200)=@random={'os2.', '\x00'}, &(0x7f0000000300)=',\xf5\x00', 0x3, 0x6) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 7.223988797s ago: executing program 5 (id=3573): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_submit(0x0, 0x30, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)={{0x0, 0xea60}, {r6, r7/1000+60000}}) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 6.957394876s ago: executing program 2 (id=3574): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c57000/0x3000)=nil, &(0x7f0000d67000/0x2000)=nil, &(0x7f0000e62000/0x1000)=nil, &(0x7f0000011000/0x1000)=nil, &(0x7f00008f6000/0x2000)=nil, &(0x7f00009fc000/0x3000)=nil, &(0x7f0000d51000/0x4000)=nil, &(0x7f0000e54000/0x3000)=nil, &(0x7f0000106000/0x1000)=nil, &(0x7f0000c3f000/0x1000)=nil, &(0x7f0000000180)="e07f4644112e7ce142596cd12e78895e7ef7b03b36e3", 0x16, r0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xb, &(0x7f0000000040)={0x611, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000080000004c00000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, 0x0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 5.538511302s ago: executing program 7 (id=3575): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r3, 0x407, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5}, 0x0) ioctl(r5, 0xc0104d03, &(0x7f0000000140)) 4.278838183s ago: executing program 2 (id=3576): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) getpgid(0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x80000, 0xa, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c0) r3 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000100)={0x14}, 0x14) r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0x30, 0x5, "11b626cd74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000200ffffa332dee9825d80fcd37f73af8f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 1.429036206s ago: executing program 8 (id=3577): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r3, 0x407, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5}, 0x0) ioctl(r5, 0xc0104d03, &(0x7f0000000140)) 239.333617ms ago: executing program 0 (id=3578): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203ff030700000028bd7000fbdbdf2502000100000004d40000070100000000030005000000000002004e21ac1e00010000000000000000d7fbdac4bfddf3fa42edfe70f26ded8fb92c16c907bb14040000006e19719ca1a7c0265d506001d82ff06dc3d60f206a23ff2730c803cb15ab38ea1b7f4d96ec3c50b92bae491416359fce88303fb3d5696319eb7aa632b6d1fadeeb660f04b99291d1d1713d91d1c45e519f6846c5a64208fe7391407354f9deb26e36f6ca35045e26759ded004177e221687b60c7036e2a0eab2d85e138663cf9808732f83b0322c8d3a701"], 0x38}, 0x1, 0x7}, 0x0) r1 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 170.932081ms ago: executing program 5 (id=3579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0xce25, @loopback}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.752321ms ago: executing program 8 (id=3580): unshare(0x8000000) r0 = semget$private(0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) unshare(0x22020600) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0x11]) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r3 = dup(r2) fanotify_init(0x200, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0xfffffffffffff7dd, 0xa00) read(r3, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x70f04a, 0x8000000}) read$FUSE(r3, &(0x7f0000008180)={0x2020}, 0xfffffdfc) semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x1000, 0x800}], 0x1, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r4, 0x3) unshare(0x8000000) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) 0s ago: executing program 5 (id=3581): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x11a5e4c1fd51c0b5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0xf2, 0x4, 0x7fa, 0x2, @empty, @mcast2, 0x20, 0x7800, 0x2, 0x8001}}) write(r1, &(0x7f00000002c0), 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(r7, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x80c000, 0x0) (fail_nth: 8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) kernel console output (not intermixed with test programs): 6112] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1483.934037][T16112] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1483.935021][T16112] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1483.935345][T16112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.098792][T17762] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1484.294194][T16112] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1484.935349][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.935400][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.685820][T17769] usb usb8: usbfs: process 17769 (syz.6.3333) did not claim interface 0 before use [ 1486.434948][ T5615] Bluetooth: hci1: command 0x2016 tx timeout [ 1486.462665][T15553] az6027: usb out operation failed. (-110) [ 1486.464158][T15553] az6027: usb out operation failed. (-32) [ 1486.464195][T15553] stb0899_attach: Driver disabled by Kconfig [ 1486.464206][T15553] az6027: no front-end attached [ 1486.464206][T15553] [ 1486.465081][T15553] az6027: usb out operation failed. (-32) [ 1486.465120][T15553] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1486.587157][T15553] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44 [ 1486.606204][ T5710] usb 1-1: USB disconnect, device number 22 [ 1486.608130][T15553] dvb-usb: schedule remote query interval to 400 msecs. [ 1486.608151][T15553] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1486.633817][ T30] usb 7-1: USB disconnect, device number 4 [ 1486.655885][T16112] usb 6-1: USB disconnect, device number 69 [ 1487.085570][T17765] 8021q: VLANs not supported on wg0 [ 1487.274781][ T31] audit: type=1400 audit(2000001379.591:1900): avc: denied { ioctl } for pid=17777 comm="syz.7.3306" path="socket:[62694]" dev="sockfs" ino=62694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1487.840607][T16112] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1489.501782][T17794] zram: failed to load dictionary d (err=-2) [ 1490.077643][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1490.652136][ T5685] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1490.803710][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 1490.812013][ T5685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1490.812062][ T5685] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1490.812946][ T5685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.812969][ T5685] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1490.812992][ T5685] usb 3-1: config 1 has no interface number 0 [ 1490.813028][ T5685] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1490.813067][ T5685] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1490.816932][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.816960][ T5685] usb 3-1: Product: syz [ 1490.816977][ T5685] usb 3-1: Manufacturer: syz [ 1490.816992][ T5685] usb 3-1: SerialNumber: syz [ 1491.045178][T17802] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1491.118621][T17804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=17804 comm=syz.7.3343 [ 1491.232275][ T5710] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1492.408751][ T5710] usb 7-1: Using ep0 maxpacket: 32 [ 1492.420274][ T5710] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 1492.553860][ T5710] usb 7-1: config 3 has an invalid interface number: 160 but max is 0 [ 1492.553892][ T5710] usb 7-1: config 3 has no interface number 0 [ 1492.554378][ T5710] usb 7-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 1492.554409][ T5710] usb 7-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1492.554438][ T5710] usb 7-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1492.554461][ T5710] usb 7-1: config 3 interface 160 has no altsetting 0 [ 1492.754378][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.754408][ T5710] usb 7-1: Product: syz [ 1492.754424][ T5710] usb 7-1: Manufacturer: syz [ 1492.754440][ T5710] usb 7-1: SerialNumber: syz [ 1492.762197][T17799] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1493.079074][ T31] audit: type=1400 audit(2000001385.481:1901): avc: denied { relabelfrom } for pid=17816 comm="syz.5.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1493.080228][ T31] audit: type=1400 audit(2000001385.481:1902): avc: denied { relabelto } for pid=17816 comm="syz.5.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1493.800829][T10802] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1493.812942][T16112] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1493.875381][ T5685] usb 3-1: USB disconnect, device number 102 [ 1493.951805][T10802] usb 1-1: Using ep0 maxpacket: 32 [ 1493.953050][T10802] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1493.954206][T10802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.957312][T10802] usb 1-1: config 0 descriptor?? [ 1494.002895][T16112] usb 8-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1494.005391][T16112] usb 8-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1494.005418][T16112] usb 8-1: Product: syz [ 1494.023870][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1494.058163][T16112] usb 8-1: config 0 descriptor?? [ 1494.067051][T16112] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1494.070992][T16112] usb 8-1: Detected FT232H [ 1494.179614][T10802] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1494.210542][T10802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1494.221909][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3347'. [ 1494.233698][T17824] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3347'. [ 1494.271387][T10802] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1494.279149][T10802] usb 1-1: media controller created [ 1494.327998][T10802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1494.366364][T16112] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1494.366693][T16112] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1494.369817][T16112] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1494.397931][T16112] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1494.411421][T16112] usb 8-1: USB disconnect, device number 2 [ 1494.433251][T16112] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1494.433707][T16112] ftdi_sio 8-1:0.0: device disconnected [ 1494.507468][T16591] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1494.702076][T16591] usb 3-1: Using ep0 maxpacket: 16 [ 1494.914725][T16591] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1494.915011][T16591] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1495.399151][T16591] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.399182][T16591] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1495.399196][T16591] usb 3-1: config 1 has no interface number 0 [ 1495.399217][T16591] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1495.399276][T16591] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1495.442331][T16591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.442357][T16591] usb 3-1: Product: syz [ 1495.442381][T16591] usb 3-1: Manufacturer: syz [ 1495.442391][T16591] usb 3-1: SerialNumber: syz [ 1495.528098][ T5710] usb 7-1: USB disconnect, device number 5 [ 1495.540428][T10802] az6027: usb out operation failed. (-71) [ 1495.540740][T10802] az6027: usb out operation failed. (-71) [ 1495.540748][T10802] stb0899_attach: Driver disabled by Kconfig [ 1495.540755][T10802] az6027: no front-end attached [ 1495.540755][T10802] [ 1495.541050][T10802] az6027: usb out operation failed. (-71) [ 1495.541059][T10802] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1495.599081][T10802] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 1495.600491][T10802] dvb-usb: schedule remote query interval to 400 msecs. [ 1495.600504][T10802] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1495.639604][T10802] usb 1-1: USB disconnect, device number 23 [ 1496.957356][ T5710] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1497.227242][T10802] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1497.252797][ T5710] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1497.253772][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.878454][T16591] usb 3-1: USB disconnect, device number 103 [ 1497.949400][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.192342][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.214744][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.436416][ T5710] rtsx_usb 7-1:1.0: probe with driver rtsx_usb failed with error -110 [ 1498.491539][T16591] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1498.584203][ T31] audit: type=1400 audit(2000001390.991:1903): avc: denied { map } for pid=17828 comm="syz.6.3348" path="pipe:[59713]" dev="pipefs" ino=59713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1498.642072][T16591] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1498.643183][T16591] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.643334][T16591] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1498.643351][T16591] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1498.643374][T16591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.048393][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 1499.130473][T17838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.149542][T16591] cxacru 3-1:1.0: receive of cm 0x90 failed (-71) [ 1499.174441][T17853] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1499.174469][T17853] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1499.177252][T16591] usb 3-1: USB disconnect, device number 104 [ 1500.014398][T17855] usb usb8: usbfs: process 17855 (syz.7.3351) did not claim interface 0 before use [ 1500.413733][ T30] usb 7-1: USB disconnect, device number 6 [ 1500.904019][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1500.904817][T17868] hsr_slave_0: left promiscuous mode [ 1500.929689][T17868] hsr_slave_1: left promiscuous mode [ 1501.064597][T17861] sctp: [Deprecated]: syz.5.3357 (pid 17861) Use of int in maxseg socket option. [ 1501.064597][T17861] Use struct sctp_assoc_value instead [ 1501.272426][ T31] audit: type=1400 audit(2000001393.681:1904): avc: denied { setopt } for pid=17872 comm="syz.6.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1501.495874][T15316] block nbd0: Possible stuck request ffff888027f65080: control (read@0,1024B). Runtime 150 seconds [ 1501.495904][T15316] block nbd0: Possible stuck request ffff888027f65240: control (read@1024,1024B). Runtime 150 seconds [ 1501.495920][T15316] block nbd0: Possible stuck request ffff888027f65400: control (read@2048,1024B). Runtime 150 seconds [ 1501.495934][T15316] block nbd0: Possible stuck request ffff888027f655c0: control (read@3072,1024B). Runtime 150 seconds [ 1501.511721][ T5685] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1501.666921][ T5685] usb 6-1: Using ep0 maxpacket: 32 [ 1501.670807][ T5685] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1501.676793][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.687828][ T5685] usb 6-1: config 0 descriptor?? [ 1501.873083][T15553] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1501.895431][ T5685] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1501.902887][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1501.903624][ T5685] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1501.903667][ T5685] usb 6-1: media controller created [ 1501.945847][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1502.021830][T15553] usb 8-1: Using ep0 maxpacket: 16 [ 1502.023820][T15553] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1502.023864][T15553] usb 8-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1502.028449][T15553] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.028479][T15553] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1502.028492][T15553] usb 8-1: config 1 has no interface number 0 [ 1502.028722][T15553] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1502.028759][T15553] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1502.030897][T15553] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.030912][T15553] usb 8-1: Product: syz [ 1502.030921][T15553] usb 8-1: Manufacturer: syz [ 1502.030930][T15553] usb 8-1: SerialNumber: syz [ 1503.110499][ T5685] az6027: usb out operation failed. (-71) [ 1503.110869][ T5685] az6027: usb out operation failed. (-71) [ 1503.110882][ T5685] stb0899_attach: Driver disabled by Kconfig [ 1503.110893][ T5685] az6027: no front-end attached [ 1503.110893][ T5685] [ 1503.139412][ T5685] az6027: usb out operation failed. (-71) [ 1503.139450][ T5685] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1503.161258][ T5685] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1503.182910][ T5685] dvb-usb: schedule remote query interval to 400 msecs. [ 1503.182927][ T5685] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1503.313529][ T5685] usb 6-1: USB disconnect, device number 70 [ 1503.871635][ T31] audit: type=1400 audit(2000001395.971:1905): avc: denied { read write } for pid=17885 comm="syz.6.3364" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1503.871698][ T31] audit: type=1400 audit(2000001395.981:1906): avc: denied { open } for pid=17885 comm="syz.6.3364" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1504.001582][ T5685] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1504.227809][T17893] Bluetooth: MGMT ver 1.23 [ 1506.530038][T15553] usb 8-1: USB disconnect, device number 3 [ 1506.594687][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.751566][ T5710] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1506.754058][T17907] usb usb9: usbfs: process 17907 (syz.2.3371) did not claim interface 47 before use [ 1506.876581][ T31] audit: type=1400 audit(2000001399.281:1907): avc: denied { listen } for pid=17910 comm="syz.0.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1506.877962][ T31] audit: type=1400 audit(2000001399.281:1908): avc: denied { accept } for pid=17910 comm="syz.0.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1506.902554][ T5710] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1506.903645][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.903687][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1506.903711][ T5710] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1506.903738][ T5710] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1506.903778][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.984651][T15553] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1507.070519][T17915] zram: failed to load dictionary d (err=-2) [ 1507.125303][ T5710] usb 6-1: USB disconnect, device number 71 [ 1507.173182][T15553] usb 8-1: Using ep0 maxpacket: 16 [ 1507.174713][T15553] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1507.175865][T15553] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.175909][T15553] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.175937][T15553] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.175961][T15553] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1507.175988][T15553] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1507.176020][T15553] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.180298][T15553] usb 8-1: config 0 descriptor?? [ 1507.515519][T17921] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1507.933806][T15553] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.7-1/input0 [ 1508.109243][T17925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.164629][T17925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.162566][ T5710] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1509.239134][T15553] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 1509.311853][ T5710] usb 7-1: Using ep0 maxpacket: 32 [ 1509.315544][ T5710] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1509.316610][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.339586][ T5710] usb 7-1: config 0 descriptor?? [ 1509.356863][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1509.451031][ T31] audit: type=1400 audit(2000001401.851:1909): avc: denied { read } for pid=17937 comm="syz.0.3379" name="dynamic_events" dev="tracefs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1509.477307][T17938] FAULT_INJECTION: forcing a failure. [ 1509.477307][T17938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.477342][T17938] CPU: 1 UID: 0 PID: 17938 Comm: syz.0.3379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.477372][T17938] Tainted: [L]=SOFTLOCKUP [ 1509.477380][T17938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1509.477394][T17938] Call Trace: [ 1509.477401][T17938] [ 1509.477411][T17938] dump_stack_lvl+0x100/0x190 [ 1509.477451][T17938] should_fail_ex.cold+0x5/0xa [ 1509.477484][T17938] _copy_to_user+0x32/0xd0 [ 1509.477508][T17938] simple_read_from_buffer+0xcb/0x170 [ 1509.477540][T17938] proc_fail_nth_read+0x1af/0x230 [ 1509.477569][T17938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1509.477599][T17938] ? rw_verify_area+0xce/0x6d0 [ 1509.477632][T17938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1509.477660][T17938] vfs_read+0x1e4/0xb40 [ 1509.477681][T17938] ? lock_acquire+0x1d1/0x380 [ 1509.477704][T17938] ? __fget_files+0x34/0x3d0 [ 1509.477730][T17938] ? __pfx_vfs_read+0x10/0x10 [ 1509.477750][T17938] ? find_held_lock+0x2b/0x80 [ 1509.477782][T17938] ? __fget_files+0x215/0x3d0 [ 1509.477815][T17938] ? __fget_files+0x21f/0x3d0 [ 1509.477858][T17938] ksys_read+0x12a/0x250 [ 1509.477880][T17938] ? __pfx_ksys_read+0x10/0x10 [ 1509.477912][T17938] do_syscall_64+0x123/0x790 [ 1509.477945][T17938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.477966][T17938] RIP: 0033:0x7fdcf1d5e98e [ 1509.477984][T17938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1509.478004][T17938] RSP: 002b:00007fdcf2b9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1509.478026][T17938] RAX: ffffffffffffffda RBX: 00007fdcf2b9f6c0 RCX: 00007fdcf1d5e98e [ 1509.478040][T17938] RDX: 000000000000000f RSI: 00007fdcf2b9f0a0 RDI: 0000000000000009 [ 1509.478054][T17938] RBP: 00007fdcf2b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.478067][T17938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.478079][T17938] R13: 00007fdcf2026038 R14: 00007fdcf2025fa0 R15: 00007ffd5b061b08 [ 1509.478110][T17938] [ 1509.559911][ T5710] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1509.579566][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1509.582240][ T5710] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1509.582284][ T5710] usb 7-1: media controller created [ 1509.640756][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1509.761856][T10305] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1509.921515][T10305] usb 6-1: Using ep0 maxpacket: 32 [ 1509.939280][T10305] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 1509.952420][T10305] usb 6-1: config 3 has an invalid interface number: 160 but max is 0 [ 1509.952448][T10305] usb 6-1: config 3 has no interface number 0 [ 1509.952503][T10305] usb 6-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 1509.952532][T10305] usb 6-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1509.952558][T10305] usb 6-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1509.952572][T10305] usb 6-1: config 3 interface 160 has no altsetting 0 [ 1509.958144][T10305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.958172][T10305] usb 6-1: Product: syz [ 1509.958188][T10305] usb 6-1: Manufacturer: syz [ 1509.958226][T10305] usb 6-1: SerialNumber: syz [ 1509.962404][ T5710] az6027: usb out operation failed. (-71) [ 1509.962700][ T5710] az6027: usb out operation failed. (-71) [ 1509.962713][ T5710] stb0899_attach: Driver disabled by Kconfig [ 1509.962723][ T5710] az6027: no front-end attached [ 1509.962723][ T5710] [ 1509.963013][ T5710] az6027: usb out operation failed. (-71) [ 1509.963028][ T5710] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1509.966238][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input47 [ 1509.995082][ T5710] dvb-usb: schedule remote query interval to 400 msecs. [ 1509.995102][ T5710] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1509.996691][T17940] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1510.001918][ T5710] usb 7-1: USB disconnect, device number 7 [ 1510.160404][ T5710] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1510.581324][T17949] usb usb9: usbfs: process 17949 (syz.7.3382) did not claim interface 47 before use [ 1512.591590][ T31] audit: type=1326 audit(2000001404.951:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.6.3385" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda2599e159 code=0x0 [ 1512.835197][T10305] usb 6-1: USB disconnect, device number 72 [ 1514.050605][ T30] usb 8-1: USB disconnect, device number 4 [ 1514.149321][T17966] FAULT_INJECTION: forcing a failure. [ 1514.149321][T17966] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.149361][T17966] CPU: 0 UID: 0 PID: 17966 Comm: syz.5.3387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.149399][T17966] Tainted: [L]=SOFTLOCKUP [ 1514.149408][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1514.149422][T17966] Call Trace: [ 1514.149429][T17966] [ 1514.149439][T17966] dump_stack_lvl+0x100/0x190 [ 1514.149479][T17966] should_fail_ex.cold+0x5/0xa [ 1514.149521][T17966] should_failslab+0xc2/0x120 [ 1514.149553][T17966] __kvmalloc_node_noprof+0x113/0x9b0 [ 1514.149582][T17966] ? do_raw_spin_lock+0x128/0x260 [ 1514.149614][T17966] ? alloc_fdtable+0x17f/0x2d0 [ 1514.149647][T17966] alloc_fdtable+0x17f/0x2d0 [ 1514.149677][T17966] dup_fd+0x995/0xd10 [ 1514.149707][T17966] ? do_raw_spin_unlock+0x145/0x1e0 [ 1514.149736][T17966] ? _raw_spin_unlock+0x28/0x50 [ 1514.149764][T17966] ? copy_fs_struct+0x2a0/0x340 [ 1514.149794][T17966] ksys_unshare+0x7c7/0xa70 [ 1514.149822][T17966] ? __pfx_ksys_unshare+0x10/0x10 [ 1514.149860][T17966] __x64_sys_unshare+0x31/0x40 [ 1514.149886][T17966] do_syscall_64+0x123/0x790 [ 1514.149922][T17966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.149946][T17966] RIP: 0033:0x7f93bf39e159 [ 1514.149965][T17966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.149986][T17966] RSP: 002b:00007f93c02c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1514.150009][T17966] RAX: ffffffffffffffda RBX: 00007f93bf625fa0 RCX: 00007f93bf39e159 [ 1514.150024][T17966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1514.150039][T17966] RBP: 00007f93bf43506b R08: 0000000000000000 R09: 0000000000000000 [ 1514.150053][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1514.150067][T17966] R13: 00007f93bf626038 R14: 00007f93bf625fa0 R15: 00007ffcf92fe6d8 [ 1514.150143][T17966] [ 1514.223066][T17974] FAULT_INJECTION: forcing a failure. [ 1514.223066][T17974] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.223103][T17974] CPU: 1 UID: 0 PID: 17974 Comm: syz.2.3388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.223137][T17974] Tainted: [L]=SOFTLOCKUP [ 1514.223146][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1514.223161][T17974] Call Trace: [ 1514.223168][T17974] [ 1514.223177][T17974] dump_stack_lvl+0x100/0x190 [ 1514.223215][T17974] should_fail_ex.cold+0x5/0xa [ 1514.223247][T17974] should_failslab+0xc2/0x120 [ 1514.223276][T17974] __kvmalloc_node_noprof+0x113/0x9b0 [ 1514.223303][T17974] ? do_raw_spin_lock+0x128/0x260 [ 1514.223332][T17974] ? alloc_fdtable+0x17f/0x2d0 [ 1514.223362][T17974] alloc_fdtable+0x17f/0x2d0 [ 1514.223390][T17974] dup_fd+0x995/0xd10 [ 1514.223418][T17974] ? do_raw_spin_unlock+0x145/0x1e0 [ 1514.223446][T17974] ? _raw_spin_unlock+0x28/0x50 [ 1514.223476][T17974] ? copy_fs_struct+0x2a0/0x340 [ 1514.223503][T17974] ksys_unshare+0x7c7/0xa70 [ 1514.223531][T17974] ? __pfx_ksys_unshare+0x10/0x10 [ 1514.223569][T17974] __x64_sys_unshare+0x31/0x40 [ 1514.223596][T17974] do_syscall_64+0x123/0x790 [ 1514.223630][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.223654][T17974] RIP: 0033:0x7f6b9239e159 [ 1514.223672][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.223693][T17974] RSP: 002b:00007f6b93240028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1514.223714][T17974] RAX: ffffffffffffffda RBX: 00007f6b92626090 RCX: 00007f6b9239e159 [ 1514.223730][T17974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1514.223744][T17974] RBP: 00007f6b9243506b R08: 0000000000000000 R09: 0000000000000000 [ 1514.223759][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1514.223772][T17974] R13: 00007f6b92626128 R14: 00007f6b92626090 R15: 00007ffffc0e2e48 [ 1514.223802][T17974] [ 1514.239096][T17975] SQUASHFS error: Failed to read block 0x0: -5 [ 1514.239146][T17975] unable to read squashfs_super_block [ 1514.261039][T17974] SQUASHFS error: Failed to read block 0x0: -5 [ 1514.261086][T17974] unable to read squashfs_super_block [ 1514.393427][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1514.544493][ T30] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1514.545375][ T30] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1514.545408][ T30] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1514.545445][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.555805][T17965] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1514.561276][ T30] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1514.773866][T15553] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1514.923262][T15553] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1514.924642][T15553] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1514.924668][T15553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.008189][T17985] usb usb9: usbfs: process 17985 (syz.0.3393) did not claim interface 47 before use [ 1515.090412][T17754] usb 8-1: USB disconnect, device number 5 [ 1516.103953][T15553] qmi_wwan 7-1:1.0: probe with driver qmi_wwan failed with error -22 [ 1516.109811][T15553] usb 7-1: USB disconnect, device number 8 [ 1516.260538][T17995] FAULT_INJECTION: forcing a failure. [ 1516.260538][T17995] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.260572][T17995] CPU: 0 UID: 0 PID: 17995 Comm: syz.0.3396 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.260604][T17995] Tainted: [L]=SOFTLOCKUP [ 1516.260612][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1516.260624][T17995] Call Trace: [ 1516.260632][T17995] [ 1516.260641][T17995] dump_stack_lvl+0x100/0x190 [ 1516.260679][T17995] should_fail_ex.cold+0x5/0xa [ 1516.260709][T17995] should_failslab+0xc2/0x120 [ 1516.260737][T17995] __kmalloc_noprof+0xfc/0x840 [ 1516.260759][T17995] ? __pfx_dynamic_dname+0x10/0x10 [ 1516.260783][T17995] ? tomoyo_encode2+0xfb/0x3c0 [ 1516.260813][T17995] tomoyo_encode2+0xfb/0x3c0 [ 1516.260841][T17995] tomoyo_encode+0x29/0x50 [ 1516.260865][T17995] tomoyo_realpath_from_path+0x18c/0x690 [ 1516.260901][T17995] tomoyo_path_number_perm+0x23c/0x580 [ 1516.260924][T17995] ? tomoyo_path_number_perm+0x22e/0x580 [ 1516.260945][T17995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1516.260974][T17995] ? __lock_acquire+0x5c0/0x1f40 [ 1516.261006][T17995] ? __fget_files+0x34/0x3d0 [ 1516.261032][T17995] ? find_held_lock+0x2b/0x80 [ 1516.261061][T17995] ? hook_file_ioctl_common+0x140/0x440 [ 1516.261092][T17995] ? __fget_files+0x21f/0x3d0 [ 1516.261126][T17995] security_file_ioctl+0xd3/0x230 [ 1516.261153][T17995] __x64_sys_ioctl+0xb7/0x210 [ 1516.261176][T17995] do_syscall_64+0x123/0x790 [ 1516.261209][T17995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.261231][T17995] RIP: 0033:0x7fdcf1d9e159 [ 1516.261248][T17995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.261267][T17995] RSP: 002b:00007fdcf2b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.261288][T17995] RAX: ffffffffffffffda RBX: 00007fdcf2026090 RCX: 00007fdcf1d9e159 [ 1516.261303][T17995] RDX: 0000200000000000 RSI: 00000000800448d2 RDI: 0000000000000009 [ 1516.261318][T17995] RBP: 00007fdcf2b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.261331][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.261344][T17995] R13: 00007fdcf2026128 R14: 00007fdcf2026090 R15: 00007ffd5b061b08 [ 1516.261375][T17995] [ 1516.261787][T17995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1517.111260][ T31] audit: type=1400 audit(2000001409.511:1911): avc: denied { setopt } for pid=17999 comm="syz.6.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1517.161758][T16112] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1517.168257][ T31] audit: type=1400 audit(2000001409.571:1912): avc: denied { bind } for pid=17999 comm="syz.6.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1517.175222][T18000] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3400'. [ 1517.227825][ T31] audit: type=1400 audit(2000001409.631:1913): avc: denied { getopt } for pid=17999 comm="syz.6.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1517.341582][T16112] usb 6-1: Using ep0 maxpacket: 32 [ 1517.343616][T16112] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 1517.344962][T16112] usb 6-1: config 3 has an invalid interface number: 160 but max is 0 [ 1517.344992][T16112] usb 6-1: config 3 has no interface number 0 [ 1517.345030][T16112] usb 6-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 1517.345059][T16112] usb 6-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1517.345089][T16112] usb 6-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1517.345114][T16112] usb 6-1: config 3 interface 160 has no altsetting 0 [ 1517.349682][T16112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.349709][T16112] usb 6-1: Product: syz [ 1517.349727][T16112] usb 6-1: Manufacturer: syz [ 1517.349745][T16112] usb 6-1: SerialNumber: syz [ 1517.455712][T17998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1517.488738][ T5710] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1517.681768][ T5710] usb 8-1: Using ep0 maxpacket: 16 [ 1517.738239][ T5710] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1517.738519][ T5710] usb 8-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1517.808628][ T5710] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.808689][ T5710] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1517.808766][ T5710] usb 8-1: config 1 has no interface number 0 [ 1517.808958][ T5710] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1517.809185][ T5710] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1517.894575][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.894606][ T5710] usb 8-1: Product: syz [ 1517.894623][ T5710] usb 8-1: Manufacturer: syz [ 1517.894640][ T5710] usb 8-1: SerialNumber: syz [ 1520.112107][T16112] usb 6-1: USB disconnect, device number 73 [ 1520.436783][ T5710] usb 8-1: USB disconnect, device number 6 [ 1521.269407][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.121224][T18042] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1522.121243][T18042] md: pers->run() failed ... [ 1523.226738][ T5710] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1523.265398][T18062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18062 comm=syz.6.3412 [ 1523.384533][ T5710] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1523.388850][ T5710] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1523.388890][ T5710] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1523.388965][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.647612][ T5710] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 1523.970347][ T5710] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 1524.491977][T18057] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1524.492333][T18057] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1524.492660][T18057] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1524.732902][ T5724] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1524.772277][T17754] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1525.391914][T18068] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -110) [ 1525.511815][T17754] usb 7-1: Using ep0 maxpacket: 16 [ 1525.512019][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 1525.514755][ T5724] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 1525.519284][ T5724] usb 6-1: config 3 has an invalid interface number: 160 but max is 0 [ 1525.519310][ T5724] usb 6-1: config 3 has no interface number 0 [ 1525.519406][ T5724] usb 6-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 1525.519437][ T5724] usb 6-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.519487][ T5724] usb 6-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1525.519533][ T5724] usb 6-1: config 3 interface 160 has no altsetting 0 [ 1525.524189][T17754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1525.524236][T17754] usb 7-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1525.526218][T17754] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.526242][T17754] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1525.526264][T17754] usb 7-1: config 1 has no interface number 0 [ 1525.526324][T17754] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1525.526381][T17754] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1525.531402][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.531520][ T5724] usb 6-1: Product: syz [ 1525.531537][ T5724] usb 6-1: Manufacturer: syz [ 1525.531553][ T5724] usb 6-1: SerialNumber: syz [ 1525.537040][T17754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.537064][T17754] usb 7-1: Product: syz [ 1525.537080][T17754] usb 7-1: Manufacturer: syz [ 1525.537096][T17754] usb 7-1: SerialNumber: syz [ 1525.555060][T18071] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1526.570345][T16519] usb 8-1: USB disconnect, device number 7 [ 1527.568600][T16519] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1527.599691][T16519] spcp8x5 8-1:1.0: device disconnected [ 1527.850050][T17754] usb 7-1: USB disconnect, device number 9 [ 1527.902770][T16451] udevd[16451]: setting mode of /dev/bus/usb/007/009 to 020664 failed: No such file or directory [ 1527.903879][T16451] udevd[16451]: setting owner of /dev/bus/usb/007/009 to uid=0, gid=0 failed: No such file or directory [ 1527.940415][T18094] kAFS: bad VL server IP address [ 1527.956710][T16451] udevd[16451]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.959038][T18094] netlink: 'syz.2.3421': attribute type 7 has an invalid length. [ 1527.959057][T18094] netlink: 'syz.2.3421': attribute type 8 has an invalid length. [ 1527.959069][T18094] netlink: 'syz.2.3421': attribute type 9 has an invalid length. [ 1527.985493][T18100] No such timeout policy "syz1" [ 1528.131872][ T31] audit: type=1400 audit(2000001421.441:1914): avc: denied { connect } for pid=18097 comm="syz.7.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1528.157889][ T31] audit: type=1400 audit(2000001421.561:1915): avc: denied { ioctl } for pid=18097 comm="syz.7.3422" path="socket:[64099]" dev="sockfs" ino=64099 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1528.223756][ T31] audit: type=1400 audit(2000001421.631:1916): avc: denied { read append } for pid=18097 comm="syz.7.3422" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1528.244324][ T31] audit: type=1400 audit(2000001421.631:1917): avc: denied { open } for pid=18097 comm="syz.7.3422" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1528.267356][ T31] audit: type=1400 audit(2000001421.671:1918): avc: denied { ioctl } for pid=18097 comm="syz.7.3422" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1528.326289][ T5724] usb 6-1: USB disconnect, device number 74 [ 1529.257688][ T31] audit: type=1400 audit(2000001422.651:1919): avc: denied { recv } for pid=6236 comm="kworker/u8:16" saddr=fe80::1b src=16385 daddr=fe80::c dest=46460 netif=teql0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1529.260262][ T31] audit: type=1400 audit(2000001422.661:1920): avc: denied { connect } for pid=18115 comm="syz.6.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1529.296056][ T31] audit: type=1400 audit(2000001422.701:1921): avc: denied { getopt } for pid=18115 comm="syz.6.3427" lport=27880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1530.382224][T16112] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1530.541708][T16112] usb 8-1: Using ep0 maxpacket: 16 [ 1530.543339][T16112] usb 8-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1530.568413][T16112] usb 8-1: config 0 has an invalid interface number: 98 but max is 0 [ 1530.568433][T16112] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.568444][T16112] usb 8-1: config 0 has no interface number 0 [ 1530.568467][T16112] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1530.568481][T16112] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1530.568495][T16112] usb 8-1: config 0 interface 98 has no altsetting 0 [ 1530.571326][T18117] smpboot: CPU 1 is now offline [ 1530.639394][T16112] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.639413][T16112] usb 8-1: Product: syz [ 1530.639422][T16112] usb 8-1: Manufacturer: syz [ 1530.639432][T16112] usb 8-1: SerialNumber: syz [ 1530.666665][T16112] usb 8-1: config 0 descriptor?? [ 1530.678535][T18114] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1530.678598][T18114] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1530.921339][T18114] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1530.921535][T18114] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1531.105761][ T5703] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1531.985817][T16592] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1532.000754][ T8772] block nbd0: Possible stuck request ffff888027f65080: control (read@0,1024B). Runtime 180 seconds [ 1532.004474][ T8772] block nbd0: Possible stuck request ffff888027f65240: control (read@1024,1024B). Runtime 180 seconds [ 1532.004498][ T8772] block nbd0: Possible stuck request ffff888027f65400: control (read@2048,1024B). Runtime 180 seconds [ 1532.004513][ T8772] block nbd0: Possible stuck request ffff888027f655c0: control (read@3072,1024B). Runtime 180 seconds [ 1532.071530][ T5703] usb 6-1: Using ep0 maxpacket: 16 [ 1532.175342][T16592] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1532.178239][T16592] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1532.178261][T16592] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1532.178283][T16592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.231961][T18128] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1532.257039][T16592] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1533.278172][T16112] asix 8-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1533.278317][T16112] asix 8-1:0.98: probe with driver asix failed with error -71 [ 1533.811254][T16112] usb 8-1: USB disconnect, device number 8 [ 1534.114737][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1534.114773][ T5703] usb 6-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1534.114945][T16592] usb 1-1: USB disconnect, device number 24 [ 1534.119100][ T5703] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1534.119123][ T5703] usb 6-1: can't read configurations, error -71 [ 1535.519326][T16592] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1535.875418][T16592] usb 1-1: Using ep0 maxpacket: 32 [ 1535.979497][T16592] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 1536.434591][T16592] usb 1-1: config 3 has an invalid interface number: 160 but max is 0 [ 1536.434610][T16592] usb 1-1: config 3 has no interface number 0 [ 1536.434649][T16592] usb 1-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 1536.434672][T16592] usb 1-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1536.434687][T16592] usb 1-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1536.434701][T16592] usb 1-1: config 3 interface 160 has no altsetting 0 [ 1536.519868][T16592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.519887][T16592] usb 1-1: Product: syz [ 1536.519896][T16592] usb 1-1: Manufacturer: syz [ 1536.519906][T16592] usb 1-1: SerialNumber: syz [ 1536.552816][ T31] audit: type=1400 audit(2000001429.961:1922): avc: denied { listen } for pid=18151 comm="syz.2.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1536.565522][T18152] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1536.565554][T18152] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1536.565580][T18152] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1536.570163][T18152] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1536.576275][T18152] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1536.707909][T18143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1538.114855][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 1539.290638][ T31] audit: type=1400 audit(2000001432.661:1923): avc: denied { egress } for pid=18141 comm="syz.0.3434" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1539.290680][ T31] audit: type=1400 audit(2000001432.661:1924): avc: denied { sendto } for pid=18141 comm="syz.0.3434" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1539.291034][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1539.410487][T16592] usb 1-1: USB disconnect, device number 25 [ 1539.507116][T18160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3441'. [ 1541.063376][ T31] audit: type=1400 audit(2000001434.451:1925): avc: denied { write } for pid=18177 comm="syz.7.3443" path="socket:[64381]" dev="sockfs" ino=64381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1541.221503][T16592] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1541.372745][T16592] usb 1-1: Using ep0 maxpacket: 16 [ 1541.373224][T16592] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1541.374085][T16592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.374115][T16592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.374129][T16592] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1541.374156][T16592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.406687][T16592] usb 1-1: config 0 descriptor?? [ 1541.451503][T16112] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1541.461737][ T5703] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1541.674005][ T5703] usb 6-1: Using ep0 maxpacket: 16 [ 1541.681099][T16112] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1541.704701][ T5703] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1541.822695][ T5703] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1541.822715][ T5703] usb 6-1: config 1 has no interface number 0 [ 1541.822740][ T5703] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1541.822755][ T5703] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1541.822771][ T5703] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1541.935327][T16112] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1541.935346][T16112] usb 7-1: Product: syz [ 1542.263643][T16112] usb 7-1: config 0 descriptor?? [ 1542.332097][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1542.332117][ T5703] usb 6-1: Product: syz [ 1542.332127][ T5703] usb 6-1: Manufacturer: syz [ 1542.332136][ T5703] usb 6-1: SerialNumber: syz [ 1542.389690][T16112] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1542.571658][T18190] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1542.571723][T18190] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1542.572438][T16112] usb 7-1: Detected FT232H [ 1542.590073][T16592] microsoft 0003:045E:07DA.0007: unexpected long global item [ 1542.590471][T16592] microsoft 0003:045E:07DA.0007: parse failed [ 1542.590524][T16592] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 1542.633306][T16112] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1542.635330][T16112] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1542.636988][T16112] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1542.648642][T16112] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1542.694652][T16112] usb 7-1: USB disconnect, device number 10 [ 1542.749931][T16112] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1542.750253][T16112] ftdi_sio 7-1:0.0: device disconnected [ 1542.785443][ T31] audit: type=1400 audit(2000001436.191:1926): avc: denied { getopt } for pid=18179 comm="syz.0.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1542.816410][T16592] usb 1-1: USB disconnect, device number 26 [ 1543.024894][T18190] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1543.024972][T18190] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1543.841940][ T5703] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1543.895131][ T5703] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1544.489911][ T5703] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d2:c5:22:0f:4d:87 [ 1544.510718][ T5703] usb 6-1: USB disconnect, device number 77 [ 1544.519835][ T5703] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1544.536594][ T31] audit: type=1400 audit(2000001437.941:1927): avc: denied { mounton } for pid=18197 comm="syz.6.3448" path="/51/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1544.673341][ T5703] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1544.673409][ T5703] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1544.673484][ T5703] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1546.183181][ T31] audit: type=1400 audit(2000001439.591:1928): avc: denied { accept } for pid=18228 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1546.374519][ T31] audit: type=1400 audit(2000001439.781:1929): avc: denied { append } for pid=18233 comm="syz.0.3458" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1546.379418][T18235] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1546.379492][T18234] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1546.452857][ T31] audit: type=1400 audit(2000001439.861:1930): avc: denied { listen } for pid=18215 comm="syz.7.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1546.458962][ T31] audit: type=1400 audit(2000001439.861:1931): avc: denied { accept } for pid=18215 comm="syz.7.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1546.561639][ T5703] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1546.673549][T16112] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1546.713332][ T5703] usb 7-1: Using ep0 maxpacket: 32 [ 1546.713773][ T5703] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1546.715965][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.717459][ T5703] usb 7-1: config 0 descriptor?? [ 1546.821723][T16112] usb 1-1: Using ep0 maxpacket: 16 [ 1546.822969][T16112] usb 1-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 1546.823762][T16112] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 1546.825294][T16112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.825309][T16112] usb 1-1: Product: syz [ 1546.825318][T16112] usb 1-1: Manufacturer: syz [ 1546.825327][T16112] usb 1-1: SerialNumber: syz [ 1546.926288][ T5703] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1546.930727][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1546.950667][ T5703] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1546.950709][ T5703] usb 7-1: media controller created [ 1546.991117][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1547.041698][ T5710] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1547.043851][T16112] usb 1-1: BAAD GENERIC IO: no channels? [ 1547.114433][T16112] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1547.114938][T16112] snd_usb_pod 1-1:1.0: Line 6 PODxt found [ 1547.114951][T16112] usb 1-1: selecting invalid altsetting 5 [ 1547.114960][T16112] snd_usb_pod 1-1:1.0: set_interface failed [ 1547.149488][T16112] snd_usb_pod 1-1:1.0: Line 6 PODxt now disconnected [ 1547.149623][T16112] snd_usb_pod 1-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 1547.168413][T16112] snd_usb_pod 1-1:1.1: Line 6 PODxt found [ 1547.168430][T16112] usb 1-1: selecting invalid altsetting 5 [ 1547.168440][T16112] snd_usb_pod 1-1:1.1: set_interface failed [ 1547.170178][T16112] snd_usb_pod 1-1:1.1: Line 6 PODxt now disconnected [ 1547.170279][T16112] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1547.206029][ T5710] usb 8-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1547.229386][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1547.229403][ T5710] usb 8-1: Product: syz [ 1547.248579][ T5710] usb 8-1: config 0 descriptor?? [ 1547.260492][ T5710] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1547.271380][ T5710] usb 8-1: Detected FT232H [ 1547.277077][T16112] snd_usb_pod 1-1:1.2: Line 6 PODxt found [ 1547.277092][T16112] usb 1-1: selecting invalid altsetting 5 [ 1547.277102][T16112] snd_usb_pod 1-1:1.2: set_interface failed [ 1547.277221][T16112] snd_usb_pod 1-1:1.2: Line 6 PODxt now disconnected [ 1547.277326][T16112] snd_usb_pod 1-1:1.2: probe with driver snd_usb_pod failed with error -22 [ 1547.326066][T16112] usb 1-1: USB disconnect, device number 27 [ 1547.455922][ T5710] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1547.457054][ T5710] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1547.459269][ T5710] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1547.484455][ T5710] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1547.505076][ T5710] usb 8-1: USB disconnect, device number 9 [ 1547.520305][ T5710] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1547.520783][ T5710] ftdi_sio 8-1:0.0: device disconnected [ 1547.561052][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.588926][ T5703] az6027: usb out operation failed. (-71) [ 1547.589577][ T5703] az6027: usb out operation failed. (-71) [ 1547.589586][ T5703] stb0899_attach: Driver disabled by Kconfig [ 1547.589593][ T5703] az6027: no front-end attached [ 1547.589593][ T5703] [ 1547.590075][ T5703] az6027: usb out operation failed. (-71) [ 1547.590084][ T5703] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1547.591135][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input48 [ 1547.686990][ T5703] dvb-usb: schedule remote query interval to 400 msecs. [ 1547.687007][ T5703] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1547.718544][ T5703] usb 7-1: USB disconnect, device number 11 [ 1547.822726][ T5703] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1549.160516][ T31] audit: type=1400 audit(2000001442.561:1932): avc: denied { read } for pid=18248 comm="syz.5.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1550.571736][ T5701] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1550.732304][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 1550.732834][ T5701] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1550.735089][ T5701] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1550.735104][ T5701] usb 1-1: config 0 has no interface number 0 [ 1550.735126][ T5701] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1550.735139][ T5701] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1550.737081][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.737096][ T5701] usb 1-1: Product: syz [ 1550.737105][ T5701] usb 1-1: Manufacturer: syz [ 1550.737114][ T5701] usb 1-1: SerialNumber: syz [ 1550.815808][ T5701] usb 1-1: config 0 descriptor?? [ 1550.958126][T18273] FAULT_INJECTION: forcing a failure. [ 1550.958126][T18273] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.958155][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.6.3468 Tainted: G L syzkaller #0 PREEMPT(full) [ 1550.958178][T18273] Tainted: [L]=SOFTLOCKUP [ 1550.958183][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1550.958191][T18273] Call Trace: [ 1550.958197][T18273] [ 1550.958203][T18273] dump_stack_lvl+0x100/0x190 [ 1550.958229][T18273] should_fail_ex.cold+0x5/0xa [ 1550.958248][T18273] should_failslab+0xc2/0x120 [ 1550.958265][T18273] __kmalloc_noprof+0xfc/0x840 [ 1550.958280][T18273] ? lsm_blob_alloc+0x68/0x90 [ 1550.958300][T18273] lsm_blob_alloc+0x68/0x90 [ 1550.958318][T18273] security_sem_alloc+0x22/0x240 [ 1550.958336][T18273] newary+0x237/0xc30 [ 1550.958347][T18273] ? ipcget+0x8aa/0xf50 [ 1550.958361][T18273] ? ipcget+0x8aa/0xf50 [ 1550.958381][T18273] ipcget+0x909/0xf50 [ 1550.958398][T18273] ? __pfx_do_futex+0x10/0x10 [ 1550.958417][T18273] ? __pfx_ipcget+0x10/0x10 [ 1550.958433][T18273] ? __x64_sys_futex+0x34f/0x4d0 [ 1550.958452][T18273] __x64_sys_semget+0x1cb/0x260 [ 1550.958467][T18273] ? __pfx___x64_sys_semget+0x10/0x10 [ 1550.958484][T18273] do_syscall_64+0x123/0x790 [ 1550.958504][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.958517][T18273] RIP: 0033:0x7fda2599e159 [ 1550.958529][T18273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.958541][T18273] RSP: 002b:00007fda268d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 1550.958554][T18273] RAX: ffffffffffffffda RBX: 00007fda25c25fa0 RCX: 00007fda2599e159 [ 1550.958562][T18273] RDX: 000000000000039c RSI: 0000000000000004 RDI: 00000000798e264c [ 1550.958577][T18273] RBP: 00007fda25a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1550.958586][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1550.958594][T18273] R13: 00007fda25c26038 R14: 00007fda25c25fa0 R15: 00007ffe23b67188 [ 1550.958612][T18273] [ 1551.220919][ T5701] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1551.386839][ T5701] cx231xx 1-1:0.1: Failed to read PCB config [ 1551.386880][ T5701] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1551.410595][ T5701] usb 1-1: USB disconnect, device number 28 [ 1551.459948][T18280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18280 comm=syz.2.3469 [ 1553.237518][T18296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.322136][T16112] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1553.476414][T16112] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1553.480292][T16112] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1553.480314][T16112] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1553.480337][T16112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.523936][T18290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1553.547506][T16112] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1553.926021][T16112] usb 1-1: USB disconnect, device number 29 [ 1554.773732][T15921] Bluetooth: hci4: command 0x2016 tx timeout [ 1555.400213][T18315] FAULT_INJECTION: forcing a failure. [ 1555.400213][T18315] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.400238][T18315] CPU: 0 UID: 0 PID: 18315 Comm: syz.7.3480 Tainted: G L syzkaller #0 PREEMPT(full) [ 1555.400257][T18315] Tainted: [L]=SOFTLOCKUP [ 1555.400262][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1555.400271][T18315] Call Trace: [ 1555.400275][T18315] [ 1555.400281][T18315] dump_stack_lvl+0x100/0x190 [ 1555.400304][T18315] should_fail_ex.cold+0x5/0xa [ 1555.400322][T18315] should_failslab+0xc2/0x120 [ 1555.400341][T18315] __kmalloc_cache_noprof+0x91/0x6d0 [ 1555.400360][T18315] ? selinux_netlbl_sk_security_free+0x12c/0x3f0 [ 1555.400375][T18315] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 1555.400393][T18315] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 1555.400408][T18315] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 1555.400425][T18315] security_mptcp_add_subflow+0x91/0x210 [ 1555.400439][T18315] mptcp_subflow_create_socket+0x1a9/0xa30 [ 1555.400457][T18315] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1555.400471][T18315] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1555.400489][T18315] ? look_up_lock_class+0x55/0x120 [ 1555.400511][T18315] __mptcp_nmpc_sk+0x17f/0x880 [ 1555.400526][T18315] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1555.400540][T18315] ? irqentry_exit+0x24d/0xa10 [ 1555.400559][T18315] ? lockdep_hardirqs_on+0x7d/0x110 [ 1555.400581][T18315] mptcp_connect+0x7e/0xa20 [ 1555.400601][T18315] __inet_stream_connect+0x208/0xf90 [ 1555.400621][T18315] ? lock_acquire+0x1d1/0x380 [ 1555.400636][T18315] ? __pfx___inet_stream_connect+0x10/0x10 [ 1555.400654][T18315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1555.400674][T18315] ? __local_bh_enable_ip+0xa5/0x120 [ 1555.400690][T18315] inet_stream_connect+0x57/0xa0 [ 1555.400709][T18315] __sys_connect_file+0x146/0x1a0 [ 1555.400725][T18315] __sys_connect+0x141/0x170 [ 1555.400738][T18315] ? __pfx___sys_connect+0x10/0x10 [ 1555.400762][T18315] __x64_sys_connect+0x72/0xb0 [ 1555.400775][T18315] ? lockdep_hardirqs_on+0x7d/0x110 [ 1555.400792][T18315] do_syscall_64+0x123/0x790 [ 1555.400812][T18315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.400825][T18315] RIP: 0033:0x7f109a59e159 [ 1555.400836][T18315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.400847][T18315] RSP: 002b:00007f109b441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1555.400860][T18315] RAX: ffffffffffffffda RBX: 00007f109a826090 RCX: 00007f109a59e159 [ 1555.400868][T18315] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000009 [ 1555.400876][T18315] RBP: 00007f109a63506b R08: 0000000000000000 R09: 0000000000000000 [ 1555.400884][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.400891][T18315] R13: 00007f109a826128 R14: 00007f109a826090 R15: 00007ffeaea2f418 [ 1555.400908][T18315] [ 1555.826478][T18312] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1555.944147][T18321] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3481'. [ 1556.851486][T15921] Bluetooth: hci4: command 0x2016 tx timeout [ 1557.294923][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.296086][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.607505][T18323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.622350][T18323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1557.879197][T18329] 8021q: VLANs not supported on wg0 [ 1557.893063][ T81] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.893588][ T81] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.893609][ T81] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.893628][ T81] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.236258][ T31] audit: type=1400 audit(2000001451.641:1933): avc: denied { read write } for pid=18344 comm="syz.5.3487" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1558.236291][ T31] audit: type=1400 audit(2000001451.641:1934): avc: denied { open } for pid=18344 comm="syz.5.3487" path="/414/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1558.237377][ T31] audit: type=1400 audit(2000001451.641:1935): avc: denied { ioctl } for pid=18344 comm="syz.5.3487" path="/414/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1558.323753][ T5710] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1558.344137][ T31] audit: type=1400 audit(2000001451.751:1936): avc: denied { ioctl } for pid=18344 comm="syz.5.3487" path="socket:[65242]" dev="sockfs" ino=65242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1558.379636][ T31] audit: type=1400 audit(2000001451.781:1937): avc: denied { bind } for pid=18344 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1558.481523][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 1558.731505][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1558.731537][ T5710] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1558.931569][T17163] Bluetooth: hci4: command 0x2016 tx timeout [ 1559.026257][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.026274][ T5710] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1559.026287][ T5710] usb 1-1: config 1 has no interface number 0 [ 1559.026309][ T5710] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1559.026332][ T5710] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1559.456975][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.456994][ T5710] usb 1-1: Product: syz [ 1559.457003][ T5710] usb 1-1: Manufacturer: syz [ 1559.457012][ T5710] usb 1-1: SerialNumber: syz [ 1559.639999][ T31] audit: type=1400 audit(2000001453.041:1938): avc: denied { unmount } for pid=17622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1559.759449][T17853] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1560.164061][T18360] FAULT_INJECTION: forcing a failure. [ 1560.164061][T18360] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.164086][T18360] CPU: 0 UID: 0 PID: 18360 Comm: syz.7.3491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.164105][T18360] Tainted: [L]=SOFTLOCKUP [ 1560.164109][T18360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1560.164118][T18360] Call Trace: [ 1560.164124][T18360] [ 1560.164129][T18360] dump_stack_lvl+0x100/0x190 [ 1560.164152][T18360] should_fail_ex.cold+0x5/0xa [ 1560.164171][T18360] should_failslab+0xc2/0x120 [ 1560.164188][T18360] __kvmalloc_node_noprof+0x113/0x9b0 [ 1560.164204][T18360] ? do_raw_spin_lock+0x128/0x260 [ 1560.164219][T18360] ? alloc_fdtable+0x17f/0x2d0 [ 1560.164237][T18360] alloc_fdtable+0x17f/0x2d0 [ 1560.164252][T18360] dup_fd+0x995/0xd10 [ 1560.164267][T18360] ? do_raw_spin_unlock+0x145/0x1e0 [ 1560.164283][T18360] ? _raw_spin_unlock+0x28/0x50 [ 1560.164306][T18360] ? copy_fs_struct+0x2a0/0x340 [ 1560.164325][T18360] ksys_unshare+0x7c7/0xa70 [ 1560.164341][T18360] ? __pfx_ksys_unshare+0x10/0x10 [ 1560.164363][T18360] __x64_sys_unshare+0x31/0x40 [ 1560.164378][T18360] do_syscall_64+0x123/0x790 [ 1560.164402][T18360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.164415][T18360] RIP: 0033:0x7f109a59e159 [ 1560.164427][T18360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.164438][T18360] RSP: 002b:00007f109b462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1560.164451][T18360] RAX: ffffffffffffffda RBX: 00007f109a825fa0 RCX: 00007f109a59e159 [ 1560.164459][T18360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1560.164467][T18360] RBP: 00007f109a63506b R08: 0000000000000000 R09: 0000000000000000 [ 1560.164475][T18360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.164482][T18360] R13: 00007f109a826038 R14: 00007f109a825fa0 R15: 00007ffeaea2f418 [ 1560.164499][T18360] [ 1560.171669][ T5701] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1560.282297][T16591] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1560.339204][ T5701] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1560.340755][ T5701] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1560.340771][ T5701] usb 6-1: config 0 has no interface number 0 [ 1560.340792][ T5701] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1560.340823][ T5701] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1560.340844][ T5701] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1560.443382][T16591] usb 3-1: Using ep0 maxpacket: 16 [ 1560.484412][ T31] audit: type=1400 audit(2000001453.891:1939): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=34456 daddr=10.128.0.143 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1560.518184][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.518202][ T5701] usb 6-1: Product: syz [ 1560.518211][ T5701] usb 6-1: Manufacturer: syz [ 1560.518220][ T5701] usb 6-1: SerialNumber: syz [ 1560.520277][T16591] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1560.520304][T16591] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1560.522374][T16591] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.522389][T16591] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1560.522401][T16591] usb 3-1: config 1 has no interface number 0 [ 1560.522430][T16591] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1560.522452][T16591] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.622834][T16591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.622851][T16591] usb 3-1: Product: syz [ 1560.622861][T16591] usb 3-1: Manufacturer: syz [ 1560.622870][T16591] usb 3-1: SerialNumber: syz [ 1560.629538][ T5701] usb 6-1: config 0 descriptor?? [ 1560.661354][T18354] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1560.668817][T18354] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1560.686655][ T5701] f81534 6-1:0.12: unsupported endpoint max packet size [ 1560.755219][T18360] SQUASHFS error: Failed to read block 0x0: -5 [ 1560.755266][T18360] unable to read squashfs_super_block [ 1561.056825][ T31] audit: type=1400 audit(2000001454.461:1940): avc: denied { bind } for pid=18353 comm="syz.5.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1561.298331][ T5710] usb 1-1: USB disconnect, device number 30 [ 1561.369544][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1562.653434][T16078] block nbd0: Possible stuck request ffff888027f65080: control (read@0,1024B). Runtime 210 seconds [ 1562.653464][T16078] block nbd0: Possible stuck request ffff888027f65240: control (read@1024,1024B). Runtime 210 seconds [ 1562.653480][T16078] block nbd0: Possible stuck request ffff888027f65400: control (read@2048,1024B). Runtime 210 seconds [ 1562.653494][T16078] block nbd0: Possible stuck request ffff888027f655c0: control (read@3072,1024B). Runtime 210 seconds [ 1562.803443][T16591] usb 3-1: USB disconnect, device number 105 [ 1562.903049][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1562.928708][ T5710] usb 6-1: USB disconnect, device number 78 [ 1563.666209][T18376] usb usb8: usbfs: process 18376 (syz.7.3492) did not claim interface 0 before use [ 1564.883109][ T31] audit: type=1326 audit(2000001458.291:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18374 comm="syz.0.3495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcf1d9e159 code=0x0 [ 1565.929143][ T31] audit: type=1326 audit(2000001459.331:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz.0.3498" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcf1d9e159 code=0x0 [ 1566.164706][T18386] netlink: 'syz.0.3498': attribute type 3 has an invalid length. [ 1566.189117][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1566.263941][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1567.168085][ T31] audit: type=1400 audit(2000001460.571:1943): avc: denied { map } for pid=18395 comm="syz.7.3497" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1568.147183][ T31] audit: type=1800 audit(2000001461.421:1944): pid=18397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3501" name="file0" dev="overlay" ino=787 res=0 errno=0 [ 1568.615768][T18404] xt_connbytes: Forcing CT accounting to be enabled [ 1568.615954][T18404] set match dimension is over the limit! [ 1568.645808][ T31] audit: type=1400 audit(2000001462.051:1945): avc: denied { getopt } for pid=18403 comm="syz.0.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1568.673011][ T31] audit: type=1400 audit(2000001462.051:1946): avc: denied { setattr } for pid=18403 comm="syz.0.3504" name="TIPC" dev="sockfs" ino=65447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1568.801668][ T5710] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1568.828474][T15921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1568.844382][T15921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1568.863072][T15921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1568.865203][T15921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1568.867101][T15921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1568.962191][ T5710] usb 8-1: Using ep0 maxpacket: 16 [ 1568.983429][ T5710] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1568.983460][ T5710] usb 8-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1568.986275][ T5710] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.986292][ T5710] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1568.986305][ T5710] usb 8-1: config 1 has no interface number 0 [ 1568.986326][ T5710] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1568.986349][ T5710] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1568.988023][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.988039][ T5710] usb 8-1: Product: syz [ 1568.988048][ T5710] usb 8-1: Manufacturer: syz [ 1568.988057][ T5710] usb 8-1: SerialNumber: syz [ 1570.931845][T15921] Bluetooth: hci6: command tx timeout [ 1572.446460][ T5710] usb 8-1: USB disconnect, device number 10 [ 1572.891319][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.921645][ T31] audit: type=1400 audit(2000001466.321:1947): avc: denied { setopt } for pid=18430 comm="syz.5.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1573.172097][T15921] Bluetooth: hci6: command tx timeout [ 1573.313120][ T31] audit: type=1400 audit(2000001466.721:1948): avc: denied { write } for pid=18445 comm="syz.5.3511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1573.314201][ T31] audit: type=1400 audit(2000001466.721:1949): avc: denied { write } for pid=18442 comm="syz.7.3510" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1573.413744][T18443] tipc: Started in network mode [ 1573.413761][T18443] tipc: Node identity ac1414aa, cluster identity 4711 [ 1573.413828][T18443] FAULT_INJECTION: forcing a failure. [ 1573.413828][T18443] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.413846][T18443] CPU: 0 UID: 0 PID: 18443 Comm: syz.7.3510 Tainted: G L syzkaller #0 PREEMPT(full) [ 1573.413862][T18443] Tainted: [L]=SOFTLOCKUP [ 1573.413867][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1573.413875][T18443] Call Trace: [ 1573.413879][T18443] [ 1573.413885][T18443] dump_stack_lvl+0x100/0x190 [ 1573.413913][T18443] should_fail_ex.cold+0x5/0xa [ 1573.413931][T18443] should_failslab+0xc2/0x120 [ 1573.413948][T18443] __kmalloc_noprof+0xfc/0x840 [ 1573.413961][T18443] ? lsm_blob_alloc+0x68/0x90 [ 1573.413981][T18443] lsm_blob_alloc+0x68/0x90 [ 1573.413998][T18443] security_sk_alloc+0x2d/0x290 [ 1573.414011][T18443] sk_prot_alloc+0x1d1/0x2a0 [ 1573.414029][T18443] sk_alloc+0x36/0xe80 [ 1573.414044][T18443] inet_create+0x3a0/0x1060 [ 1573.414062][T18443] ? inet_create+0x94/0x1060 [ 1573.414082][T18443] __sock_create+0x339/0x860 [ 1573.414103][T18443] udp_sock_create4+0xa6/0x450 [ 1573.414119][T18443] ? __pfx_udp_sock_create4+0x10/0x10 [ 1573.414132][T18443] ? find_held_lock+0x2b/0x80 [ 1573.414149][T18443] ? net_generic+0xea/0x2a0 [ 1573.414167][T18443] ? net_generic+0xea/0x2a0 [ 1573.414184][T18443] ? __asan_memcpy+0x3c/0x60 [ 1573.414198][T18443] tipc_udp_enable+0xd6a/0x1010 [ 1573.414218][T18443] ? __pfx_tipc_udp_enable+0x10/0x10 [ 1573.414234][T18443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.414269][T18443] ? tipc_enable_bearer+0x772/0xe60 [ 1573.414288][T18443] tipc_enable_bearer+0x857/0xe60 [ 1573.414309][T18443] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 1573.414325][T18443] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1573.414348][T18443] ? __nla_parse+0x40/0x60 [ 1573.414368][T18443] __tipc_nl_bearer_enable+0x332/0x420 [ 1573.414387][T18443] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1573.414404][T18443] ? __pfx___mutex_lock+0x10/0x10 [ 1573.414421][T18443] ? rcu_is_watching+0x13/0xc0 [ 1573.414448][T18443] tipc_nl_bearer_enable+0x21/0x40 [ 1573.414465][T18443] genl_family_rcv_msg_doit+0x214/0x300 [ 1573.414484][T18443] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1573.414504][T18443] ? bpf_lsm_capable+0x9/0x10 [ 1573.414521][T18443] ? security_capable+0x80/0x260 [ 1573.414539][T18443] ? ns_capable+0xd2/0xf0 [ 1573.414553][T18443] genl_rcv_msg+0x560/0x800 [ 1573.414571][T18443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1573.414585][T18443] ? __lock_acquire+0x5c0/0x1f40 [ 1573.414598][T18443] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1573.414621][T18443] netlink_rcv_skb+0x159/0x420 [ 1573.414635][T18443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1573.414651][T18443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1573.414671][T18443] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1573.414686][T18443] genl_rcv+0x28/0x40 [ 1573.414700][T18443] netlink_unicast+0x585/0x850 [ 1573.414715][T18443] ? __pfx_netlink_unicast+0x10/0x10 [ 1573.414733][T18443] netlink_sendmsg+0x8b0/0xda0 [ 1573.414750][T18443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.414765][T18443] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1573.414781][T18443] ____sys_sendmsg+0xa4d/0xbe0 [ 1573.414797][T18443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.414811][T18443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1573.414835][T18443] ? lock_acquire+0x1d1/0x380 [ 1573.414846][T18443] ? get_pid_task+0x2a/0x250 [ 1573.414863][T18443] ___sys_sendmsg+0x190/0x1e0 [ 1573.414876][T18443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1573.414887][T18443] ? get_pid_task+0x106/0x250 [ 1573.414913][T18443] ? find_held_lock+0x2b/0x80 [ 1573.414939][T18443] __sys_sendmsg+0x160/0x210 [ 1573.414954][T18443] ? __pfx___sys_sendmsg+0x10/0x10 [ 1573.414978][T18443] do_syscall_64+0x123/0x790 [ 1573.414997][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.415009][T18443] RIP: 0033:0x7f109a59e159 [ 1573.415020][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.415031][T18443] RSP: 002b:00007f109b462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.415043][T18443] RAX: ffffffffffffffda RBX: 00007f109a825fa0 RCX: 00007f109a59e159 [ 1573.415052][T18443] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1573.415059][T18443] RBP: 00007f109b462090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.415066][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.415073][T18443] R13: 00007f109a826038 R14: 00007f109a825fa0 R15: 00007ffeaea2f418 [ 1573.415090][T18443] [ 1573.418102][T18443] tipc: Enabling of bearer rejected, failed to enable media [ 1575.355564][T15921] Bluetooth: hci6: command tx timeout [ 1575.620474][T18405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.620527][T18405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.620644][T18405] bridge_slave_0: entered allmulticast mode [ 1575.647869][T18405] bridge_slave_0: entered promiscuous mode [ 1575.661761][T18405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.661816][T18405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.661920][T18405] bridge_slave_1: entered allmulticast mode [ 1575.664177][T18405] bridge_slave_1: entered promiscuous mode [ 1576.443376][T18471] usb usb8: usbfs: process 18471 (syz.2.3507) did not claim interface 0 before use [ 1577.411695][T17163] Bluetooth: hci6: command tx timeout [ 1577.683113][ T31] audit: type=1400 audit(2000001471.091:1950): avc: denied { ioctl } for pid=18470 comm="syz.7.3516" path="socket:[65759]" dev="sockfs" ino=65759 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1577.790506][T18405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.816213][T18405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.941150][T18405] team0: Port device team_slave_0 added [ 1577.957988][T18405] team0: Port device team_slave_1 added [ 1578.057038][T18405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.057052][T18405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.057067][T18405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.058116][T18405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.058125][T18405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.058140][T18405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.223784][ T5701] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1578.316079][T18405] hsr_slave_0: entered promiscuous mode [ 1578.320916][T18405] hsr_slave_1: entered promiscuous mode [ 1578.321257][T18405] debugfs: 'hsr0' already exists in 'hsr' [ 1578.321270][T18405] Cannot create hsr debugfs directory [ 1578.371859][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 1578.375907][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1578.375937][ T5701] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1578.376688][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.376703][ T5701] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1578.376716][ T5701] usb 1-1: config 1 has no interface number 0 [ 1578.376737][ T5701] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1578.376759][ T5701] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1578.378247][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.378262][ T5701] usb 1-1: Product: syz [ 1578.378271][ T5701] usb 1-1: Manufacturer: syz [ 1578.378280][ T5701] usb 1-1: SerialNumber: syz [ 1578.975279][T16591] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1579.123471][T16591] usb 8-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1579.125860][T16591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.125881][T16591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.125896][T16591] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1579.125919][T16591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.182262][T16591] usb 8-1: config 0 descriptor?? [ 1579.480274][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3520'. [ 1579.538036][T17163] Bluetooth: hci4: unexpected event for opcode 0x2043 [ 1579.538916][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.539179][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.151629][T16591] usbhid 8-1:0.0: can't add hid device: -71 [ 1581.151697][T16591] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1581.183696][T16591] usb 8-1: USB disconnect, device number 11 [ 1581.234922][ T5701] usb 1-1: USB disconnect, device number 31 [ 1581.280380][T18405] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1581.301089][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1581.335799][T18405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1581.336468][T18405] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1581.367427][T18405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1581.367923][T18405] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1581.412888][T18405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1581.415312][T18405] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1581.440566][T18405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1581.691325][T18405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.744847][T18405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.784608][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.784666][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.831230][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.831334][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.226163][T18508] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 1582.228465][ T31] audit: type=1400 audit(2000001475.631:1951): avc: denied { relabelto } for pid=18505 comm="syz.5.3525" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 1583.280127][T18508] hsr0: entered allmulticast mode [ 1583.280145][T18508] hsr_slave_0: entered allmulticast mode [ 1583.280157][T18508] hsr_slave_1: entered allmulticast mode [ 1583.319249][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1583.346546][T18508] hsr_slave_0: left promiscuous mode [ 1583.360702][T18508] hsr_slave_1: left promiscuous mode [ 1583.385652][T18508] hsr0 (unregistering): left allmulticast mode [ 1585.503739][T18405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.923478][T18511] Process accounting resumed [ 1587.716962][T15557] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1588.225978][T15557] usb 8-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.00 [ 1588.361695][T15557] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.361716][T15557] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.361730][T15557] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1588.361754][T15557] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.364277][T18554] netlink: Failed to add helper -22 [ 1588.364313][T18554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1588.367314][T15557] usb 8-1: config 0 descriptor?? [ 1588.490352][T18405] veth0_vlan: entered promiscuous mode [ 1588.537370][T18405] veth1_vlan: entered promiscuous mode [ 1588.620037][T18555] zram: failed to load dictionary d (err=-2) [ 1588.648656][T18405] veth0_macvtap: entered promiscuous mode [ 1588.670389][T18405] veth1_macvtap: entered promiscuous mode [ 1588.725791][T18405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.755084][T18405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.815902][T14406] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.815959][T14406] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.815989][T14406] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.816010][T14406] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.034085][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.034352][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.085419][T18558] netlink: 'syz.7.3533': attribute type 12 has an invalid length. [ 1589.090212][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.090227][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.159240][T15557] usbhid 8-1:0.0: can't add hid device: -71 [ 1589.159302][T15557] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1589.181102][ T5701] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1589.197914][T15557] usb 8-1: USB disconnect, device number 12 [ 1589.240995][ T8091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.241011][ T8091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.334648][ T5701] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1589.335567][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1589.335586][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.335607][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.338960][ T5701] usb 1-1: config 0 descriptor?? [ 1589.383035][ T31] audit: type=1800 audit(2000001482.781:1952): pid=18574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3502" name="(" dev="sda1" ino=2064 res=0 errno=0 [ 1589.482356][T18240] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1589.585816][T18576] FAULT_INJECTION: forcing a failure. [ 1589.585816][T18576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.585851][T18576] CPU: 0 UID: 0 PID: 18576 Comm: syz.5.3537 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.585869][T18576] Tainted: [L]=SOFTLOCKUP [ 1589.585873][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1589.585881][T18576] Call Trace: [ 1589.585885][T18576] [ 1589.585891][T18576] dump_stack_lvl+0x100/0x190 [ 1589.585912][T18576] should_fail_ex.cold+0x5/0xa [ 1589.585929][T18576] _copy_from_user+0x2e/0xd0 [ 1589.585945][T18576] sctp_getsockopt+0x10c1/0x7110 [ 1589.585961][T18576] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1589.585979][T18576] ? find_held_lock+0x2b/0x80 [ 1589.585996][T18576] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1589.586011][T18576] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1589.586028][T18576] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1589.586046][T18576] ? avc_has_perm+0x135/0x1e0 [ 1589.586062][T18576] ? __pfx_avc_has_perm+0x10/0x10 [ 1589.586081][T18576] ? lock_acquire+0x1d1/0x380 [ 1589.586093][T18576] ? __might_fault+0xc5/0x140 [ 1589.586111][T18576] ? find_held_lock+0x2b/0x80 [ 1589.586126][T18576] ? __might_fault+0xc5/0x140 [ 1589.586142][T18576] ? __might_fault+0xc5/0x140 [ 1589.586162][T18576] ? _copy_from_user+0x59/0xd0 [ 1589.586175][T18576] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 1589.586194][T18576] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1589.586214][T18576] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1589.586232][T18576] do_sock_getsockopt+0x50a/0x6e0 [ 1589.586252][T18576] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1589.586272][T18576] ? __fget_files+0x34/0x3d0 [ 1589.586286][T18576] ? find_held_lock+0x2b/0x80 [ 1589.586306][T18576] ? __fget_files+0x21f/0x3d0 [ 1589.586324][T18576] __sys_getsockopt+0x148/0x260 [ 1589.586343][T18576] ? __x64_sys_getsockopt+0xbd/0x160 [ 1589.586356][T18576] __x64_sys_getsockopt+0xbd/0x160 [ 1589.586369][T18576] ? do_syscall_64+0xae/0x790 [ 1589.586386][T18576] ? lockdep_hardirqs_on+0x7d/0x110 [ 1589.586402][T18576] do_syscall_64+0x123/0x790 [ 1589.586420][T18576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.586432][T18576] RIP: 0033:0x7f93bf39e159 [ 1589.586442][T18576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.586454][T18576] RSP: 002b:00007f93c02c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1589.586466][T18576] RAX: ffffffffffffffda RBX: 00007f93bf625fa0 RCX: 00007f93bf39e159 [ 1589.586474][T18576] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 1589.586481][T18576] RBP: 00007f93c02c8090 R08: 00002000000000c0 R09: 0000000000000000 [ 1589.586488][T18576] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1589.586496][T18576] R13: 00007f93bf626038 R14: 00007f93bf625fa0 R15: 00007ffcf92fe6d8 [ 1589.586512][T18576] [ 1589.647104][T18240] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 1589.893990][T18240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.894009][T18240] usb 3-1: Product: syz [ 1589.894018][T18240] usb 3-1: Manufacturer: syz [ 1589.894027][T18240] usb 3-1: SerialNumber: syz [ 1590.098825][ T5701] usb 1-1: string descriptor 0 read error: -22 [ 1590.221098][T18240] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1590.243306][T18582] usb usb9: usbfs: process 18582 (syz.7.3539) did not claim interface 47 before use [ 1590.267855][ T31] audit: type=1400 audit(2000001483.671:1953): avc: denied { write } for pid=18567 comm="syz.2.3536" name="functions" dev="configfs" ino=14840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1590.331112][ T5701] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input49 [ 1590.361659][ T31] audit: type=1400 audit(2000001483.771:1954): avc: denied { write } for pid=18567 comm="syz.2.3536" name="c.1" dev="configfs" ino=15171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1590.522008][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1590.943466][ T5701] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1590.992030][T18240] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1590.992176][T18240] kalmia 3-1:1.0: probe with driver kalmia failed with error -71 [ 1591.049520][T18240] usb 3-1: USB disconnect, device number 106 [ 1591.246815][T18600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18600 comm=syz.7.3543 [ 1592.485862][T15557] usb 1-1: USB disconnect, device number 32 [ 1593.425141][T16078] block nbd0: Possible stuck request ffff888027f65080: control (read@0,1024B). Runtime 240 seconds [ 1593.425171][T16078] block nbd0: Possible stuck request ffff888027f65240: control (read@1024,1024B). Runtime 240 seconds [ 1593.425187][T16078] block nbd0: Possible stuck request ffff888027f65400: control (read@2048,1024B). Runtime 240 seconds [ 1593.425201][T16078] block nbd0: Possible stuck request ffff888027f655c0: control (read@3072,1024B). Runtime 240 seconds [ 1593.811914][T17163] Bluetooth: hci4: command 0x2016 tx timeout [ 1594.669217][T18613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18613 comm=syz.0.3547 [ 1594.895368][ T5710] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1595.363970][ T5710] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1595.686058][ T5710] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1595.686079][ T5710] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1595.686105][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.835450][ T5710] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 1595.858953][ T5710] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 1596.442439][ T5710] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1596.592087][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 1596.593654][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1596.593683][ T5710] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1596.594416][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.594430][ T5710] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1596.594443][ T5710] usb 3-1: config 1 has no interface number 0 [ 1596.594464][ T5710] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1596.594493][ T5710] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1596.595994][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.596009][ T5710] usb 3-1: Product: syz [ 1596.596018][ T5710] usb 3-1: Manufacturer: syz [ 1596.596027][ T5710] usb 3-1: SerialNumber: syz [ 1596.741692][T18240] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1596.790632][ T31] audit: type=1400 audit(2000001490.191:1955): avc: denied { read } for pid=18624 comm="syz.5.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1597.142642][T18240] usb 1-1: Using ep0 maxpacket: 8 [ 1597.150388][T18240] usb 1-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1597.174492][T18240] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.174514][T18240] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1597.174531][T18240] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1597.174562][T18240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.181015][T18240] usb 1-1: config 0 descriptor?? [ 1597.775111][T18623] bond0: option slaves: interface +d does not exist! [ 1597.832371][T18240] hid_mf 0003:0079:1803.0009: item fetching failed at offset 8/9 [ 1597.835974][T18240] hid_mf 0003:0079:1803.0009: HID parse failed. [ 1597.836015][T18240] hid_mf 0003:0079:1803.0009: probe with driver hid_mf failed with error -22 [ 1598.040667][T18240] usb 1-1: USB disconnect, device number 33 [ 1598.344384][T18240] usb 9-1: USB disconnect, device number 2 [ 1598.396410][T18240] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1598.396800][T18240] spcp8x5 9-1:1.0: device disconnected [ 1599.808471][ T5701] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1600.757664][ T5701] usb 8-1: Using ep0 maxpacket: 16 [ 1600.767478][ T5701] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1600.767507][ T5701] usb 8-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1600.790871][ T5701] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.790888][ T5701] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1600.790901][ T5701] usb 8-1: config 1 has no interface number 0 [ 1600.790922][ T5701] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1600.790945][ T5701] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1600.855702][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.855721][ T5701] usb 8-1: Product: syz [ 1600.855730][ T5701] usb 8-1: Manufacturer: syz [ 1600.855739][ T5701] usb 8-1: SerialNumber: syz [ 1600.898980][ T5710] usb 3-1: USB disconnect, device number 107 [ 1600.966534][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.661630][ T5710] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1602.001787][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.144207][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 1602.152206][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1602.152235][ T5710] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1602.156296][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.156313][ T5710] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1602.156326][ T5710] usb 3-1: config 1 has no interface number 0 [ 1602.156346][ T5710] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1602.156383][ T5710] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1602.161681][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.161698][ T5710] usb 3-1: Product: syz [ 1602.161707][ T5710] usb 3-1: Manufacturer: syz [ 1602.161716][ T5710] usb 3-1: SerialNumber: syz [ 1602.315007][ T31] audit: type=1326 audit(2000001495.721:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18651 comm="syz.8.3558" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63f0b9e159 code=0x0 [ 1602.435117][ T5701] usb 8-1: USB disconnect, device number 13 [ 1602.507736][T16451] udevd[16451]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1602.673203][T15557] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1602.724372][ T31] audit: type=1400 audit(2000001496.131:1957): avc: denied { read write } for pid=18663 comm="syz.8.3563" name="usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1602.726450][ T31] audit: type=1400 audit(2000001496.131:1958): avc: denied { open } for pid=18663 comm="syz.8.3563" path="/dev/usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1602.832577][T15557] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1602.833365][T15557] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1602.833400][T15557] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1602.833423][T15557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.852372][T18660] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1602.905299][T15557] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1603.021677][ T5701] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1603.176030][ T5701] usb 8-1: Using ep0 maxpacket: 16 [ 1603.181081][ T5701] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1603.181120][ T5701] usb 8-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1603.210081][ T5701] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.210098][ T5701] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1603.210111][ T5701] usb 8-1: config 1 has no interface number 0 [ 1603.210146][ T5701] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1603.210168][ T5701] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1603.288378][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.288397][ T5701] usb 8-1: Product: syz [ 1603.288406][ T5701] usb 8-1: Manufacturer: syz [ 1603.288415][ T5701] usb 8-1: SerialNumber: syz [ 1603.409743][T15557] usb 6-1: USB disconnect, device number 79 [ 1603.484265][T18670] usb usb9: usbfs: process 18670 (syz.8.3564) did not claim interface 47 before use [ 1604.875508][ T31] audit: type=1400 audit(2000001498.281:1959): avc: denied { setopt } for pid=18676 comm="syz.0.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1605.746574][T18677] kAFS: bad VL server IP address [ 1606.142341][ T5701] usb 8-1: USB disconnect, device number 14 [ 1607.217502][T16451] udevd[16451]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1607.991470][ T5701] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1608.493359][ T5701] usb 8-1: Using ep0 maxpacket: 16 [ 1608.494867][ T5701] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1608.494895][ T5701] usb 8-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1608.495857][ T5701] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.495872][ T5701] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1608.495885][ T5701] usb 8-1: config 1 has no interface number 0 [ 1608.495907][ T5701] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1608.495930][ T5701] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1608.748290][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.748311][ T5701] usb 8-1: Product: syz [ 1608.748320][ T5701] usb 8-1: Manufacturer: syz [ 1608.748330][ T5701] usb 8-1: SerialNumber: syz [ 1610.825251][ T5701] usb 8-1: USB disconnect, device number 15 [ 1610.845723][ T5710] usb 3-1: USB disconnect, device number 108 [ 1610.887893][T18697] 8021q: VLANs not supported on wg0 [ 1610.925383][T17788] udevd[17788]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1610.954151][ T31] audit: type=1400 audit(2000001505.360:1960): avc: denied { bind } for pid=18701 comm="syz.7.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1610.983126][T16592] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1611.099118][ T31] audit: type=1400 audit(2000001505.500:1961): avc: denied { write } for pid=18701 comm="syz.7.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1611.141744][T16592] usb 9-1: Using ep0 maxpacket: 16 [ 1611.144021][T16592] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1611.144051][T16592] usb 9-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 1611.144814][T16592] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.144837][T16592] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1611.144850][T16592] usb 9-1: config 1 has no interface number 0 [ 1611.144872][T16592] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1611.144895][T16592] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1611.146566][T16592] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.146582][T16592] usb 9-1: Product: syz [ 1611.146591][T16592] usb 9-1: Manufacturer: syz [ 1611.146600][T16592] usb 9-1: SerialNumber: syz [ 1611.267545][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3572'. [ 1611.267962][ T31] audit: type=1400 audit(2000001505.670:1962): avc: denied { read } for pid=18701 comm="syz.7.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1612.005679][ T5701] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1612.487086][ T5701] usb 6-1: Using ep0 maxpacket: 16 [ 1613.452303][ T31] audit: type=1400 audit(2000001507.860:1963): avc: denied { read write } for pid=18704 comm="syz.5.3573" name="mouse0" dev="devtmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1613.452344][ T31] audit: type=1400 audit(2000001507.860:1964): avc: denied { open } for pid=18704 comm="syz.5.3573" path="/dev/input/mouse0" dev="devtmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1613.639350][ T31] audit: type=1326 audit(2000001508.040:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18709 comm="syz.2.3574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b9239e159 code=0x0 [ 1614.118623][T18725] FAULT_INJECTION: forcing a failure. [ 1614.118623][T18725] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.118652][T18725] CPU: 0 UID: 0 PID: 18725 Comm: syz.0.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1614.118671][T18725] Tainted: [L]=SOFTLOCKUP [ 1614.118676][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1614.118684][T18725] Call Trace: [ 1614.118690][T18725] [ 1614.118696][T18725] dump_stack_lvl+0x100/0x190 [ 1614.118719][T18725] should_fail_ex.cold+0x5/0xa [ 1614.118738][T18725] should_failslab+0xc2/0x120 [ 1614.118754][T18725] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1614.118768][T18725] ? __kernfs_new_node+0xd2/0xa10 [ 1614.118790][T18725] __kernfs_new_node+0xd2/0xa10 [ 1614.118810][T18725] ? __pfx___kernfs_new_node+0x10/0x10 [ 1614.118830][T18725] ? lock_acquire+0x1d1/0x380 [ 1614.118843][T18725] ? kernfs_root+0x23/0x2a0 [ 1614.118859][T18725] ? find_held_lock+0x2b/0x80 [ 1614.118876][T18725] ? kernfs_root+0xee/0x2a0 [ 1614.118891][T18725] ? kernfs_root+0xee/0x2a0 [ 1614.118911][T18725] kernfs_new_node+0x117/0x150 [ 1614.118931][T18725] __kernfs_create_file+0x53/0x350 [ 1614.118947][T18725] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1614.118967][T18725] internal_create_group+0x593/0xfb0 [ 1614.118988][T18725] ? __pfx_internal_create_group+0x10/0x10 [ 1614.119008][T18725] ? kernfs_create_link+0x1bd/0x240 [ 1614.119024][T18725] internal_create_groups+0x9d/0x150 [ 1614.119043][T18725] device_add+0x71a/0x1970 [ 1614.119060][T18725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1614.119075][T18725] ? __pfx_device_add+0x10/0x10 [ 1614.119092][T18725] ? lockdep_init_map_type+0x5c/0x250 [ 1614.119113][T18725] ? __init_waitqueue_head+0xca/0x150 [ 1614.119133][T18725] netdev_register_kobject+0x1df/0x410 [ 1614.119150][T18725] register_netdevice+0x15b6/0x25a0 [ 1614.119170][T18725] ? __pfx_register_netdevice+0x10/0x10 [ 1614.119191][T18725] vif_add+0xe6e/0x15c0 [ 1614.119206][T18725] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1614.119227][T18725] ? __pfx_vif_add+0x10/0x10 [ 1614.119243][T18725] ? cred_has_capability.isra.0+0x186/0x300 [ 1614.119263][T18725] ? lock_acquire+0x1d1/0x380 [ 1614.119276][T18725] ? __might_fault+0xc5/0x140 [ 1614.119294][T18725] ? find_held_lock+0x2b/0x80 [ 1614.119311][T18725] ? __might_fault+0xc5/0x140 [ 1614.119328][T18725] ? __might_fault+0xc5/0x140 [ 1614.119351][T18725] ip_mroute_setsockopt+0x108f/0x12b0 [ 1614.119371][T18725] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1614.119390][T18725] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1614.119411][T18725] ? __pfx_avc_has_perm+0x10/0x10 [ 1614.119431][T18725] do_ip_setsockopt+0x382/0x3310 [ 1614.119446][T18725] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1614.119458][T18725] ? __pfx_sock_has_perm+0x10/0x10 [ 1614.119476][T18725] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 1614.119493][T18725] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1614.119513][T18725] ip_setsockopt+0x5a/0xf0 [ 1614.119527][T18725] raw_setsockopt+0x60/0x1b0 [ 1614.119538][T18725] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1614.119558][T18725] do_sock_setsockopt+0xf3/0x1d0 [ 1614.119577][T18725] __sys_setsockopt+0x195/0x220 [ 1614.119596][T18725] __x64_sys_setsockopt+0xbd/0x160 [ 1614.119610][T18725] ? do_syscall_64+0xae/0x790 [ 1614.119627][T18725] ? lockdep_hardirqs_on+0x7d/0x110 [ 1614.119644][T18725] do_syscall_64+0x123/0x790 [ 1614.119663][T18725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.119676][T18725] RIP: 0033:0x7fdcf1d9e159 [ 1614.119689][T18725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.119701][T18725] RSP: 002b:00007fdcf2b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1614.119715][T18725] RAX: ffffffffffffffda RBX: 00007fdcf2025fa0 RCX: 00007fdcf1d9e159 [ 1614.119724][T18725] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 1614.119732][T18725] RBP: 00007fdcf1e3506b R08: 0000000000000010 R09: 0000000000000000 [ 1614.119741][T18725] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1614.119749][T18725] R13: 00007fdcf2026038 R14: 00007fdcf2025fa0 R15: 00007ffd5b061b08 [ 1614.119767][T18725] [ 1614.252664][ T31] audit: type=1400 audit(2000001508.660:1966): avc: denied { write } for pid=18726 comm="syz.2.3576" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1614.646259][ T31] audit: type=1400 audit(2000001509.050:1967): avc: denied { open } for pid=18726 comm="syz.2.3576" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1616.124140][ T5710] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1616.202875][T15557] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1616.272936][ T5710] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1616.274128][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1616.274148][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.274168][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.275880][ T5710] usb 1-1: config 0 descriptor?? [ 1616.362252][T15557] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1616.363311][T15557] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1616.363329][T15557] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1616.365365][T15557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.365380][T15557] usb 3-1: Product: syz [ 1616.365389][T15557] usb 3-1: Manufacturer: syz [ 1616.365398][T15557] usb 3-1: SerialNumber: syz [ 1616.432191][T15557] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1616.526721][T15557] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1616.526721][T15557] Please send a copy of this message to and [ 1616.622031][T16592] usb 9-1: USB disconnect, device number 3 [ 1616.909860][T18731] usb usb8: usbfs: process 18731 (syz.7.3575) did not claim interface 0 before use [ 1617.711936][ T5701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1617.711968][ T5701] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1617.711991][ T5701] usb 6-1: no configurations [ 1617.712000][ T5701] usb 6-1: can't read configurations, error -22 [ 1617.837930][T15557] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 1617.860076][ T5701] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1617.876682][T18736] usb usb8: usbfs: process 18736 (syz.8.3577) did not claim interface 0 before use [ 1617.979604][ T5710] usbhid 1-1:0.0: can't add hid device: -71 [ 1617.979677][ T5710] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1617.995311][ T5701] usb 6-1: device descriptor read/64, error -32 [ 1618.017070][ T5710] usb 1-1: USB disconnect, device number 34 [ 1618.101858][ T5701] usb usb6-port1: attempt power cycle [ 1618.481510][ T5710] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1618.807286][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 1618.841072][ T5710] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1619.205027][ T5710] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 1619.205047][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.205058][ T5710] usb 1-1: config 0 has no interface number 0 [ 1619.205081][ T5710] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1619.205096][ T5710] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1619.205111][ T5710] usb 1-1: config 0 interface 98 has no altsetting 0 [ 1619.432549][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.432568][ T5710] usb 1-1: Product: syz [ 1619.432577][ T5710] usb 1-1: Manufacturer: syz [ 1619.432586][ T5710] usb 1-1: SerialNumber: syz [ 1619.434141][ T5710] usb 1-1: config 0 descriptor?? [ 1619.434837][T18740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1619.434897][T18740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1619.517834][T18744] FAULT_INJECTION: forcing a failure. [ 1619.517834][T18744] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.517858][T18744] CPU: 0 UID: 0 PID: 18744 Comm: syz.5.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1619.517875][T18744] Tainted: [L]=SOFTLOCKUP [ 1619.517880][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1619.517887][T18744] Call Trace: [ 1619.517892][T18744] [ 1619.517897][T18744] dump_stack_lvl+0x100/0x190 [ 1619.517921][T18744] should_fail_ex.cold+0x5/0xa [ 1619.517939][T18744] should_failslab+0xc2/0x120 [ 1619.517955][T18744] __kmalloc_noprof+0xfc/0x840 [ 1619.517967][T18744] ? rcu_is_watching+0x13/0xc0 [ 1619.517983][T18744] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1619.518003][T18744] tomoyo_realpath_from_path+0xb6/0x690 [ 1619.518021][T18744] tomoyo_mount_acl+0x1b6/0x8b0 [ 1619.518033][T18744] ? is_bpf_text_address+0x8a/0x1a0 [ 1619.518050][T18744] ? is_bpf_text_address+0x8a/0x1a0 [ 1619.518066][T18744] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1619.518079][T18744] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1619.518092][T18744] ? kernel_text_address+0x8d/0x100 [ 1619.518111][T18744] ? unwind_get_return_address+0x59/0xa0 [ 1619.518129][T18744] ? arch_stack_walk+0xa6/0xf0 [ 1619.518146][T18744] ? __lock_acquire+0x5c0/0x1f40 [ 1619.518166][T18744] ? tomoyo_mount_permission+0x1f6/0x460 [ 1619.518182][T18744] ? tomoyo_domain+0xb2/0x150 [ 1619.518197][T18744] ? tomoyo_profile+0x47/0x60 [ 1619.518215][T18744] tomoyo_mount_permission+0x214/0x460 [ 1619.518228][T18744] ? tomoyo_mount_permission+0x1f6/0x460 [ 1619.518243][T18744] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1619.518266][T18744] security_sb_mount+0xdd/0x270 [ 1619.518280][T18744] path_mount+0x158/0x24c0 [ 1619.518300][T18744] ? __pfx_path_mount+0x10/0x10 [ 1619.518316][T18744] ? lockdep_hardirqs_on+0x7d/0x110 [ 1619.518335][T18744] ? putname+0xb1/0x110 [ 1619.518349][T18744] ? kmem_cache_free+0x127/0x6c0 [ 1619.518372][T18744] ? __x64_sys_mount+0x293/0x310 [ 1619.518388][T18744] __x64_sys_mount+0x293/0x310 [ 1619.518405][T18744] ? __pfx___x64_sys_mount+0x10/0x10 [ 1619.518427][T18744] do_syscall_64+0x123/0x790 [ 1619.518446][T18744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.518458][T18744] RIP: 0033:0x7f93bf39e159 [ 1619.518469][T18744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.518480][T18744] RSP: 002b:00007f93c02a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1619.518493][T18744] RAX: ffffffffffffffda RBX: 00007f93bf626090 RCX: 00007f93bf39e159 [ 1619.518501][T18744] RDX: 0000200000000080 RSI: 0000200000000a00 RDI: 0000200000000000 [ 1619.518509][T18744] RBP: 00007f93c02a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.518516][T18744] R10: 000000000080c000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.518523][T18744] R13: 00007f93bf626128 R14: 00007f93bf626090 R15: 00007ffcf92fe6d8 [ 1619.518539][T18744] [ 1619.518591][T18744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1619.837304][T15557] usb 3-1: USB disconnect, device number 109 [ 1619.869623][T18740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1619.869697][T18740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1619.891979][ T32] INFO: task syz.3.3282:17542 blocked for more than 143 seconds. [ 1619.891995][ T32] Tainted: G L syzkaller #0 [ 1619.892002][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1619.892007][ T32] task:syz.3.3282 state:D stack:27336 pid:17542 tgid:17537 ppid:16208 task_flags:0x400040 flags:0x00080002 [ 1619.892046][ T32] Call Trace: [ 1619.892051][ T32] [ 1619.892058][ T32] __schedule+0x1259/0x6920 [ 1619.892078][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1619.892095][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1619.892115][ T32] ? __pfx___schedule+0x10/0x10 [ 1619.892129][ T32] ? find_held_lock+0x2b/0x80 [ 1619.892146][ T32] ? schedule+0x225/0x2c0 [ 1619.892163][ T32] schedule+0xdd/0x2c0 [ 1619.892179][ T32] schedule_preempt_disabled+0x13/0x30 [ 1619.892195][ T32] __mutex_lock+0xccb/0x1bd0 [ 1619.892212][ T32] ? sync_bdevs+0x153/0x480 [ 1619.892227][ T32] ? sync_bdevs+0x1ff/0x480 [ 1619.892240][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1619.892263][ T32] ? iput.part.0+0x1a0/0x1050 [ 1619.892281][ T32] ? sync_bdevs+0x67/0x480 [ 1619.892296][ T32] ? sync_bdevs+0x153/0x480 [ 1619.892307][ T32] sync_bdevs+0x153/0x480 [ 1619.892422][ T32] ksys_sync+0xb0/0xf0 [ 1619.892442][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1619.892461][ T32] ? do_syscall_64+0xae/0x790 [ 1619.892479][ T32] __do_sys_sync+0xe/0x20 [ 1619.892495][ T32] do_syscall_64+0x123/0x790 [ 1619.892514][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.892527][ T32] RIP: 0033:0x7f6c4899e159 [ 1619.892538][ T32] RSP: 002b:00007f6c497df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1619.892550][ T32] RAX: ffffffffffffffda RBX: 00007f6c48c26270 RCX: 00007f6c4899e159 [ 1619.892559][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1619.892566][ T32] RBP: 00007f6c48c26270 R08: 0000000000000000 R09: 0000000000000000 [ 1619.892574][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.892581][ T32] R13: 00007f6c48c26308 R14: 00007f6c48c26270 R15: 00007ffe34c7b308 [ 1619.892598][ T32] [ 1619.892627][ T32] [ 1619.892627][ T32] Showing all locks held in the system: [ 1619.892638][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1619.892647][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1619.892707][ T32] locks held by getty/5359: 2, on CPU#0: [ 1619.892716][ T32] #0: ffff8880379ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1619.892745][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1619.892782][ T32] locks held by kworker/0:6/5710: 5, last CPU#0: [ 1619.892790][ T32] #0: ffff88802468d140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1619.892823][ T32] #1: ffffc90003e17d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1619.892857][ T32] #2: ffff88802a4471d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1619.892888][ T32] #3: ffff8880499681d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1619.892918][ T32] #4: ffff888035b671a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1619.892952][ T32] locks held by udevd/15067: 1, on CPU#1: [ 1619.892960][ T32] #0: ffff888027daf350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1619.892989][ T32] locks held by kworker/0:1/15557: 5, on CPU#0: [ 1619.892998][ T32] #0: ffff88802468d140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1619.893031][ T32] #1: ffffc9000481fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1619.893064][ T32] #2: ffff88802a9821d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1619.893095][ T32] #3: ffff88802fc2a1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1619.893125][ T32] #4: ffffffff91276340 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 [ 1619.893161][ T32] locks held by syz.3.3282/17542: 1, on CPU#1: [ 1619.893169][ T32] #0: ffff888027daf350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1619.893198][ T32] locks held by udevd/17788: 4, on CPU#0: [ 1619.893206][ T32] #0: ffff88808f050878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1619.893236][ T32] #1: ffff8880823e7480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1619.893267][ T32] #2: ffff8880359a40f8 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1619.893297][ T32] #3: ffff8880499681d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1619.893327][ T32] locks held by syz-executor/18405: 2, last CPU#0: [ 1619.893335][ T32] #0: ffff8880942a8460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1619.893385][ T32] #1: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1619.893419][ T32] locks held by syz.7.3575/18723: 1, last CPU#0: [ 1619.893428][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: percpu_ref_put_many.constprop.0+0x1b/0x150 [ 1619.893459][ T32] locks held by syz.2.3576/18729: 3, last CPU#0: [ 1619.893467][ T32] #0: ffff8880296c0e00 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1619.893498][ T32] #1: ffffffff91276340 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 [ 1619.893527][ T32] #2: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 1619.893557][ T32] [ 1619.893560][ T32] ============================================= [ 1619.893560][ T32] [ 1619.893574][ T32] NMI backtrace for cpu 0 [ 1619.893583][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1619.893599][ T32] Tainted: [L]=SOFTLOCKUP [ 1619.893604][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1619.893611][ T32] Call Trace: [ 1619.893615][ T32] [ 1619.893620][ T32] dump_stack_lvl+0x100/0x190 [ 1619.893638][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1619.893657][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1619.893671][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1619.893687][ T32] sys_info+0x141/0x190 [ 1619.893702][ T32] watchdog+0xcb1/0x1030 [ 1619.893720][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1619.893736][ T32] ? __pfx_watchdog+0x10/0x10 [ 1619.893750][ T32] ? __kthread_parkme+0x18f/0x230 [ 1619.893766][ T32] ? kthread+0x13a/0x450 [ 1619.893780][ T32] ? __pfx_watchdog+0x10/0x10 [ 1619.893792][ T32] kthread+0x373/0x450 [ 1619.893807][ T32] ? __pfx_kthread+0x10/0x10 [ 1619.893824][ T32] ret_from_fork+0x730/0xd60 [ 1619.893838][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1619.893852][ T32] ? __switch_to+0x800/0x10f0 [ 1619.893868][ T32] ? __pfx_kthread+0x10/0x10 [ 1619.893885][ T32] ret_from_fork_asm+0x1a/0x30 [ 1619.893904][ T32] [ 1619.893914][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1620.546125][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.556773][ T32] Tainted: [L]=SOFTLOCKUP [ 1620.561081][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1620.571108][ T32] Call Trace: [ 1620.574364][ T32] [ 1620.577306][ T32] dump_stack_lvl+0x100/0x190 [ 1620.581979][ T32] vpanic+0x553/0x970 [ 1620.585933][ T32] ? __pfx_vpanic+0x10/0x10 [ 1620.590411][ T32] panic+0xd1/0xe0 [ 1620.594106][ T32] ? __pfx_panic+0x10/0x10 [ 1620.598495][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 1620.603493][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1620.609620][ T32] ? watchdog.cold+0x1ec/0x234 [ 1620.614358][ T32] watchdog.cold+0x1fd/0x234 [ 1620.618923][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1620.624703][ T32] ? __pfx_watchdog+0x10/0x10 [ 1620.629371][ T32] ? __kthread_parkme+0x18f/0x230 [ 1620.634371][ T32] ? kthread+0x13a/0x450 [ 1620.638591][ T32] ? __pfx_watchdog+0x10/0x10 [ 1620.643242][ T32] kthread+0x373/0x450 [ 1620.647289][ T32] ? __pfx_kthread+0x10/0x10 [ 1620.651857][ T32] ret_from_fork+0x730/0xd60 [ 1620.656421][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.661506][ T32] ? __switch_to+0x800/0x10f0 [ 1620.666160][ T32] ? __pfx_kthread+0x10/0x10 [ 1620.670747][ T32] ret_from_fork_asm+0x1a/0x30 [ 1620.675490][ T32] [ 1620.678540][ T32] Kernel Offset: disabled [ 1620.682846][ T32] Rebooting in 86400 seconds..