last executing test programs: 2m44.250039074s ago: executing program 0 (id=393): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8c100, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000100)={0x548, 0x32, 0x1, 0x70bd27, 0x25dfdbff, {0x1c}, [@nested={0x209, 0xac, 0x0, 0x1, [@generic="2f1c7cc0e003b90676cd6c9cc309b62e6cba1fdccbf33cd0f638164381eccf689598be625b36d98ec979369b5cb7c5054bdc829924a49e1899ebfd721ef52b2e22e49c9b742079999a050327b37502cfa160e58abcbe7f33db92e75e3ec8c49920dfc921a60feec8274f411bec4985b1f495e0e43278e547ee1e3a1ba50f5e19a10d410384cd751bb72cf473616c9c96be670b11964bb58263bf51a5f620ee3f", @generic="d12017bc", @generic="59d5f392fefd36ec69d6b0fca440597835e72ea5fa8ea9b31c9ea5a4a08c70462ed352bd7e80542493f5ecc31da5710d0c276c150422387af63542dd22a390961d29a25f8b79a8246cc4ea449948770881c06225945a376c7d781b341694ad238c85386d0e164ead6ff2fa623d1e9986bcf7c31904bf5d94dfa91673ee4c", @nested={0x4, 0xf3}, @nested={0x4, 0xb3}, @generic="95d98849eb9a9c3267d1c12828e2ef13da89092d20e473a8177dda6534a310b682f43bacd9dbf94d5209a5ac5d0677917bd6198c0ae49a1025e5e48166d56beb04e12e013ed8926bbc723332fe9939386404d2351ac6b2334f982899c261ac26824f8c3e0a55a1b12b6d1163567a66", @typed={0x69, 0x5f, 0x0, 0x0, @binary="2090410e17d322fd6315163a9d1122ae1d8a6967c8ce287f5b18b619d6336911cac803dca6917ee23e00de1b572aa0719dcabd4c39a8a2b41ebcd3a83699770cf349b2c8f6bf56d531f273e352efbc4faa8f7c82b951dcf5c3cb4475703a5c56fb88da1f19"}]}, @nested={0x11d, 0x89, 0x0, 0x1, [@generic="e2895ebb420e09899b3b2aab3c564ba1d186de4a3af714bfb5303ef08a35c8d298", @nested={0x4, 0xf}, @generic="de430fa3ed510f6c203309d2eec2ed8275300ca312f13cce3ed80d42f6c5d9ecb1b0a855841a356ddcaae9cc42580510a980479b2ad5058ab19e6255e335d4ad857d6ccf20cad9e6c49af73b234736e340cebf1a9d3d00eff431ab83354388d043c8883e73dbb266afa54235a4f7b75476485d0458d72dc7bd7ca30a7509d2ad4dd1336d45cba7ca7e665fc244b2a2142ef38342dba8cf97918c0abf703e79c2ccda9c5d27906e6a9ff147e8b55f9606d2d632cc5c88d6eaf5a51e2635d6ef829a6358b4bc9e0eae1479082e44ac6e703f203f7bfed08592a6d6ef5d1dc000adff042def516037ace826b4d2d0a91a36e66bce56"]}, @generic="8b755c08ade406af11f7f5cd04de56e483b006b451aa571b61a829aa48d28625f26666ce6c03f6647de9d9602f3c3021f4aaeb345de6e3b0ed768f234428f7ef766ec7b2eddf98f26ce1", @nested={0x107, 0xf7, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0x14f}, @typed={0x8, 0x49, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x7a}, @generic="7b3c44ae6ed67f82ebf920791b3ff21729c06e6b35f1a06dfed8e48cd43ca9f5e284269a725382e3fe36f4a1f58ffbe0005ebbd75dfa1ce910cfde7e36f4755f0ce6f55e564a9a517c2ee825b0d9771756afc0c28fac711e3b96a59f41225d64222805bf751f6ad3ad6388c96d2af59aeeab92267f4b28594e2045100b620661cc44c739fe70b04a2481325124006630039c2889305444620c25054f3a1aa0aac8bc31d1ef4e8c551fc0f7e2e9ca775bcd310036d52f6cc2fa276ea3e3fa5935e001a39084855be1c4ac60dd461443ad320ca3f4ebeea1c5568ba25335028bcafdbd5d385b3f5c2c91ba8c50b9cee2"]}, @generic="700f922557870ef1dd4334fd4f70a6a0a619ca13b20b9d4e443e5e445e72195bf454ec510cc3f95fe0daea524c08a54e75c060879b15e47bc86e547818c7ae6ab61c0b217212a608a4343d16a556722cd34379ed68a60b46f371186982efc70ba31bcdbec1fa8ff02f40d6da9a6262d6bda0f461163f7536d3ae672393667f8142f90630d4f4f7330c1c3d82a40a282d51215b26aaa81cfb00072488021bb6bc98d408ffe01f4000387a6f5e484897f9707484"]}, 0x548}, 0x1, 0x0, 0x0, 0x4000}, 0x8c810) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000700)={0x80, 0x0, 0x1000}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000780)={0x3, [0x0, 0x0, 0x0]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) r3 = geteuid() quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r3, &(0x7f0000000840)) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x80002, 0x0) syz_open_dev$swradio(&(0x7f0000000900), 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz1\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r5, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20004810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$ndb(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000b40), 0x1, 0x0) read$FUSE(r2, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000002bc0)) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002c40)=@o_path={&(0x7f0000002c00)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f40)={r9, 0xe0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002d00)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000002d40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002d80), &(0x7f0000002dc0), 0x8, 0xef, 0x8, 0x8, &(0x7f0000002e00)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002f80)='./cgroup.net/syz1\x00', 0x1ff) writev(r7, &(0x7f00000034c0)=[{&(0x7f0000002fc0)="1a5d320b28565db7485112467e417118d7fd7edfe80aa7dceb0866e3d682112d9af42387ec4073d0b24d827d4692f61ce6ab470008e7f08287d291c65dd6f925795f7dba227c7feaa0284bc7c78c52f27777138ad99af5a9cd99b69fee540d15d8b23ae1291edc203341a9b2f7998fef10476a4fcc7e8fbb6c02c2f1b0a83b66c3289ad11070d28289c996fa456d141c24a8123177f6ff5a4e2a6b8181e195e45ef0c75af9e10a5ca668a61e8c27354beff3d511c36d9a76c1ee83e2e9f0ab88f03c94037a5aef9045b114442933a0972cd53a0d4c0cd7e0922b45ac1ebb63bd", 0xe0}, {&(0x7f00000030c0)="1efeb251f6556fd6b894b56b6c82eb34ba3ddcd57531735ae267724ba060716908", 0x21}, {&(0x7f0000003100)="0b75c9ebc599c912194cf317ad71e4f3567ea689d33b1d847b1b457cb3cb0ec5cf5a1c6cf2ac", 0x26}, {&(0x7f0000003140)="06b05f3e43792b63a7ff1c3c5300291619ef60c3cc3fcfbe3c2b969324e30e91ab25aa8c0396169eef43b1a14a3e9ef9e4b40ce82f2abb00525337dd71bec3707ed34dc086172f461d3ab4893805ed15df884160620bd264fcc2baf844bc58873172adc80cbcb2b66ede77c758e3f83a24eb884d4646d946c4e5737118d559bf832b356a6eabc0d3ed92b1d5f75f2b5a432c184bfc4a9d86935d2dfe490c3ae5b91b41bee28bcb4fa4502e75b52a8a8ae763bc40dd", 0xb5}, {&(0x7f0000003200)="b0b14a4f836326f26e8306cc55acf196090d7d7babe59e2e6d9fb86e489760415409331d3bce07", 0x27}, {&(0x7f0000003240)="cfc9f62894501d9e3c62cc5bede8723afe224bd707c053e12c4bc68401299244b94c24d0d42cc0957ea26ec5db7c78a0bdac42c97e7020af4c21cb572782313e67b82292d0ed6cf872eb1a08c328eede31d3e3614e5eef028a2fe2bb5775f66394f4f2d707a708b9360d6083eb5d65a25b3901fae8e193a0b7fb1b2e21d4c027884948538d5a368d8817ce3de1d2e6ae2cd0448ba652debaa63e53abd570b1387661e83befa7df7a8461c626eb3172bd0c5f894bcbf4149744a96e", 0xbb}, {&(0x7f0000003300)="a2ae7be4ca8b050989554edea78572fd0e54ed522eb40d54193b4b74e2ca47af33fa943336ddc0d2511b33cc30194885e235deffad5f0898ffb02b", 0x3b}, {&(0x7f0000003340)="308e2142b17cdce20e2230d7eb1c0ee656f89d1ebf4923e6b8d90132e365966df21abdad474a2f22b799ec998d4b0729426aacb362b8fe75c7299b964d1357d9315d67ac5afb88173fb0e37a92b49416f887f49b46062c499e45b758bd0bb42c22101c058ba2b7d6b8cc0579d5c64d673773bb73165f02b8a762c374abe3203538f20dc4e09eb32c5d90e1afdc0afc45443bc421ea54891711ca85cd21adfadccf8cf7903b2f665b2996958f5bf07cf2a4ba25be20a68ca43b42fa1658f62089976904bf7e9377b891e92ec9207cae5c9c2dc4e30fdeef9cef01cc434d939aff", 0xe0}, {&(0x7f0000003440)="bc1df90fe06a7c339003a457db046b9abb47db7a102384b8c58d4ba289d8cbb018a04daa6e33f62bb0852369ce3b74ba398eadc67969a17f5dd6352848cc1013dfdda1d4ee365d2a30a7988f20f7da7e79ee25b0b34a674b36e811ae2d1bb1eeb280b864f00cd0361912f9f8f5079f", 0x6f}], 0x9) syz_open_procfs(r8, &(0x7f0000003580)='net/netfilter\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000035c0)={0x5, 0x6}) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000005700)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000003700)="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", 0x1000, 0x0, &(0x7f0000004700)="eaa3b3505e72f4a135e1b470034640b72308f6c72deae899ad4c7c1674bdc338d32271d2f7c3c4b32527395c813cb433f502336cc8acc72c58183ae41398f2ad1b96930f410e9b0c23c87473dc09dfb471a7cc4629ab6510ebeeb55ccca06742d34d4ab3a6da87d2ae56a7efb70029a881f0ac9b4b578c6e0db5c33b20fc3917d82d89a721eb6ff24982c9335e75d33eca7431676b4896e0f17f3381a8f1960c5a3c239de00355909c35f74adaad71b4703d740ab87fe44e787e4b999605acdf58f8dff46fedf6dded1868beedbcabbf8dc7b002bfe46a9b4c9fae3bf63e76475075516c4ea7268fb50fa796269c1622ddaa2af6066d6f3d3b8951f8981161863bd9398da7ddeb457dd14a86e393e4b808b717ad832ca45da070efde9ef57fac37001b6bd5d39a8a66a475d530fb2471a3d58cc2b1317033f034cf9ff7d52412c5e4d55811971cdc7a6020d3ed7f9d3258b08aca2e32d3f6f0756d74081fd9470513b5bcedd658bc9612b5da1082feed45a6bc264b50dc856da554364757937dc4b14774d7a16998b21f70288a613e9d70d94a97db5d84fdf34d900e9b4040dae0e71696746e8a1c278ab34196ac4d7630a41c5909130d3fd14bd502d50770e815944ee2416ed6028a10b2144ac4d451e4d2473db863c7ac32699cbb25a2c834f24820c1dd8caabf3769db80a4b6aab22c46f2d4ac498f96e502e958820ceb34981276f345c2b6160b9fbebd871b5934ccd3ef0a8e3c169aebadf0f83685e0cecbd80b272922f37b4472dd3d8b802dd5c6a672ccf4af11c1c1f3c60cfb4f9b81708e11985307dd160c2d20acb63b7ef7a615c7b03ac39e60da0c58d746aab088d60b01e83c22d309d8a4e670ba49d6fc4ffbdae2a7d56f060813282a97d3bbd20fb779b3ea0f0401ada601d673fc8a8880f81e10209fcdc1b1ec0484c07c0f5a3303e98ba57669a8c567c06d187af4b181ad2d3f42d97f750adce77fe1feef21c37b58c23391e5bc96783a8c02ffb0f1d8c230993acddce3b74e4bd31083dbad7e6d7a69292756102ffc9dfa31f8e092a824b08c0a746d9c3e6bea84723bc305ef4fe3d2d701d92bccdc4cc306f3c05b720c1d2f7229112e94573854c334fbb22cabc75ef8841a04b3546bddb5e2456d967bdaca0c93bd3f1bf3add37c01c87d4a1812c0741a3fc6d0688aeda81171782b9a841805c244199f5e25b8bd18c2b9d0dfa26e8e25091b3124923c6a2b62b93fedb98415e1807479c78284663af50efd6b67afb64260d6aa7ee85925bc455ea79c792ae55b42f4367d46f9ab980f4f6d55512fa83c7c4722d1bff1035eaf670bbece17be796d591d33dcc98cf1c2fac5376a1b159b961687c0b7f702e0eb35c880a1a3130f165261eaaf82e4967c75a22036083ba3668f032776d6344f204b87c90455c7ae25495ebf0a383b71d3c17abfba24fb94909426f2ac8130c0b1f4a90ba8ede6e440aa77a1df22cb76dcd5f0c0ef5e9e492b9c3f466b82189885df8474e980c2bf314c6d4f0f90807e1637b6b73db856b753f5a8f673528a27b4f4c43cecbe0903b124c8b9c10cf994460a8ba28dc9dbbcd94fb95d1badd3174c8f8dc0ea30aba4c0f5c9211dc8c24af92e914a15e2a6085cc4e657050e05930fbcb46f385b5fc80321ca708be3a8c03db6edb934cd32c3714e215629fc342a8fb56435068bf3469d56547aa8069bb4e785730ca60b3a928246fe03a3971263ee12f5a01911f185a19f29b0ea4fcbbdb2fbec41338cb31711c4f963c0237f6e1ffc6dc03157a70964177c08ab365344a9544f7055aacc3156ebb11f2d23b33023556ea8fffdfe7a0a9b710d718e7f20e1756f02cedc7ecba0d622b22ee1217b67b597205a292c7a2ce2ea8b1a7c05f445044cffde13a818d060480a4a41896111bf5b6744472dc3539260937be68e4e2ca344a70fc3bfe32f7d01147dc700b9efb817a9d100f3eceb6ea7f1b2dfe1cec9783a541fe2b5c5a9734a34ffd3aa07b890aa6c152176634778b8942b810fcd115ad4c72fac769e8ed48a545e34f51939685071d13a9076dd11ac460ee614f7e3609407a494b1fd62ce7be7b71331fe6d26732c91bcecba06fc0d80880ad10871eb7e5d50d054515c4b1e1109100b111c5a97666c19e7f60c47413f5c6cbb8ebd8c52bef0d994235086e83bf9af9502abb4121d871323398b741e8de8b914752ae88cd8c314989490915c2805746e6b55a9f511a6e1ec951e02c1d23412789ef00ad5cd2895cc920a300a60614ecb263fccce5154a5c1cd622e20534385b25c228b7e168b3fdcbd587a840c15aba63f42d6afec95f6a8008da61fe036483ddc8ee07806076f491e882ab51373cb7767ad4eed24d4e1a2e61117c35ac48051c13f6f48e7256bd8c959f06f2be6b6a9c4c2d597c08539af27c3568e4b6057c83b24c50bde3bacf669c6966fc8f3e1fd618671207f374f3971f22bf098af795e2b2dfe71880e38c4497fed53138e8e9de1c4265ab6b8af98587226bca9f5b1d148c70913cc339edd59442d9e6a3c91964a4322c2584ae31f317aa501914295637c881ec1b928c1a6a67f8978c224fa1c02882088a6eab49a3933ba414778d131216641eb299e59f9fd59176581f5b481979a5dcb0624d09e31a98638b697b493757a8f3c23fb20d718b8144d4d76f6b6d5b291347d138abae658c988f69a94cb87b4b2d87dc913c149d7b0594ec157c3a5912600d23033ea760172b6cf8f79bfbd6cfa4dcb387cfa72465a220d9b4ee163819bd68c2f522f2c5bb984ea117404d567067da783451ddea5c46b0b136110b8f33b6edcde2e99e1d76d8721a7d5b0c7dac1c53f61ec14e2e43d5fef6b5a8116bbd76a86aa849c0bc137817f959e5caf3b98ed8a622e4e272cfd7a1addebcb0bb1177be506c315ba6af174ac5151887aabd82966edfbe082fff58cb9a47394d1a2fc4b5275157caca28d0900ccf6028eee067dd8763f05f68551cc4a5783e24d7bfea85742864f05459b57c1eeb0423f24ed1cbbdfb9f4efb892c232662cb73e2a8dadc4371e5a628dd6a135078b6ce0be3e6af792ac1e4b77b4f28e6a09002131aac37f5fb5a9e04b99828e613af5b4b067f42967fdc6f5a70cd3181e5b9fff893a4ba271f9495ca066ad65934dab04efffb161cc0b0f88a6dfc59996b8b447ab16f3139d2b46ab85c4a4a254503e9f986c41764c284d220c8d80fbed1e3c5e15c7e59a2103d226faa7972470bd1cc08504bf90f2824ef5fc316267353e621e85d35872c41256117eba49db72a527efd0bcf6b691fc2ddb51d9ba688e4eb20eebcc5761b5276cd3aeef8e3c32029ec1d014845a8b3a5efb99f6a1988f6ad7c6b448bc36880f97781d42fbc2fc29cca9578fcadbf620df9433e405935284fb8662e646669fffea6e94ba2304c8caa8405deb47d686ddc4daeb0598c630248df50046e454ac2de55205b9fb6a5f9b2a66621cd361d859b302f7b11a7842e2d190117b6e19f9062f6f7bdfc26acdb1d0198ec65e46c348120271eeb4235c49235d95237dc5ec86f168512fd5602d623f69f98493bc275f741e5bde1366fa18f6d0c6983e72aa379e4f95c35c1074acdba85863931d161b7619801cb5337351209d5b5c90eee221afa9ae801b74dc3914ca25037adcb8e1f1fbd5e9c65c3d835d1a2a3f99d4e52bde0448d9fb623d3f158cd0b00cb94eca0a51110edff996b3195a993b9b2ede274620321b753737eb19135fa1d31f65d636c476985dd9adc7347dc0d274d19f0bdb4a85a89156e4dbfea75e8c4d33628082e9642073c8785c9b4b3ca83ebceb028a6768f50665bd32b27bfb7d1f5b94b2246ba4d10453ed41e9a6650a7416e7275ff99e4e7208288421f67e2e374ed2eef5e7023d12289684f0faa73b8b96651dab9fd81223bbaec92ae19b001b0f710bd1691d43bd406a2e837113bc03f371d03fc0b7de6c74a0f0cca637bac2a66f702c465b68db7a6b14ac65e3a30504176078167f2e8149811e56109c0dbd5dfaf2aa55897419b22c9080bfe018161708fe8c77c07a8c1bad7b23f6876cb5e6fd334deb92c9d5e8817a9d2b54b54b2dbd21f104f9a8324fb7b3749f5e58cb8db12d1c42519582aa759a0a9ee6b7149831bbe8b47fbf74cf7ed4b6043ab68906cecce62c23401020a597e9ea73b6ed035bcf5330d9f25ca6ca161e6b5fc003c9f749fd245e0a8e95cf95f966c4b8b4a86a2b2a41aea093007cbaea40352fe66b36c7bc92dda3e2c58d230b83ddc495d64ebc5c89a22542daf23ec44de6ee11117429f897a471d953df3cbe2a288055c73d575dd62319ad1cdb9494e58ee71edb4c25d33671d157af567281de21a6d3bcac9ee0a8251ed2a82b3b2d3a2c41e9c84d2a62e9053352de93a47bec331ad3aae3eb5bfb855fd447146cfa7a4474d53d777c1ce855d3e08633a34ce98fc5de5f1e9c82e3aeeed949955d22f58ee7d36149333a7220afdca6a1d850cffbef46adaf60d6cac36d0a5fe489642fa16193cc7922b6be9e451bb152dcefe143d48b6e31acd12f061fa24d5fbb23b99b80703ccd6520653eb8ecf359e471b7a6faefe1f03d692f3fd341c681e8a8580898d7197fa1f0a0d90b7941c8b037ab12a90186761111423a6ffac7a08cca690f2af8f757d0a6c0aa16edba378e8901f625abfc13ff91618cabd6968691b8baa848dbe97961c302a8286d9b5dc43bf9f003fd0603ab1e7185e4da7f337869ff0c59f4a5aaa186e2e53846692d1c36d576b7d84fe6f9c93bfc28ef01a7bd8617ec4e2a45b5b555783f429f3e7597de0d374767470db63dd3c7c2478076004983a3516c4ed04ae2dd4b8a69445d41c3069993ecebc2c24abaa1a2f85dc4f8e8edddb94c40a059b6603fdc1f36f065494548b8799bcb069977382a61c82d76d3774ef9ba88a17f9863f8db0723c7fce6776fe6ad2d5dbf69190e7108a3a6cd83d00f7188a10f0d80bac5c27eb6608b878f101c3009d467566f5f4edbf8167fb572629cafcf535d3e35824a8f9f5e8a763e20fd2d53c6aa017fb306bcb8d155f9e9c2f9eea2461023ef6b1b40a62c80f87d725df04615a4a371a33b29e95548057029d76e34cdc03dfc1468a967a33ffc46c4a2304262062b2908281239a8f16a1dc388c84c78df906eacd67cce3e66e8ae974116679c138c7892ed5e7bd30a7d6cf55523b46ce0edaea51e719ef3f8de6b2a770d18ecb0f308fb1e3295808b7cef48835c391524ac4feef3808c023fe41b07b063302cfb553bbf142433a3eadf8dba1df5f018e7efef4a18b1946b795f623c2c58d82524624752d1259d81eaf2745e4348f761983189c9ea17aa7cf79d7fbf561f3701e5d84327cf216240c5ba29f0a4e9aa2c8b25f4b57bff2ed50661f946ee0ae17c258c44542598ee5b814411be9039fbb8e71040389ffa169d420ca0e4b1dbdfe0af4063c3ace1c18fd4d801154a766fe705457d7d1c7df19a8df4181a2b5ee545de02786b0f2f4af36ea80b70bc99871308c7d53ff6e24ac732f260426f85dc4b0a401c19836d0360f72091f6722b8fc8601534a0ff89bc400f046e70f25c275f8b527392809ea5175cf7ebc51e1cb7ba7393d94042885fb1b761f2a720d24232df60a878ddf4284a8856d16a32f618e58274947e5f5399cb82f817d4226403a655bbb6b292992894b5fd03b3a97b29230702aed1bb1683de44f18b084b2e0ab9ac53d22cc147dca264e47b380c97bf90b846171f470611c7890b02e1693fb4b0c6025d1f16432ca4a87daff201"}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r10, &(0x7f00000059c0)={&(0x7f0000005780), 0xc, &(0x7f0000005980)={&(0x7f0000005880)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0xaf, 0x1f, "385a299983597493eee7b840346cd1b970c9e9de0545802e46de2629e79d8867db3ce841e413a3bb8df5617fbee59c9b01537b30511bd4247b706d4b21c34e0d7ff4ac338e3237ed138199922c71fb0681dcda27a449efed6cf8d6d0e4940461d524318c207321277ac0c167d9160ffecc0450970e5a34390e6485442f65fc41c6ac4e4a1b8680ec2c9c3cc4bae6f4052b447baafca717c520d75a589c9fb64d76d1abafa6030abadc4bda"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8000}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008090}, 0x880) 2m44.00495588s ago: executing program 0 (id=394): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)='lM', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty}}}], 0x20}}], 0x1, 0x24048894) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1d, &(0x7f0000001500)=@string={0x1d, 0x3, "053af42fe056535abc144ece4347be3d0cbc3dfa1e1c42eaff0b0c"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000002580)={0x40, 0xc, 0xbb, {0xbb, 0x24, "00ac532cba3197a37276c775658362f4bab4bc57b2146da72d6eacc843100bf7089fa0efae45c1aa1bc46408395ec7335ab15db8867fe800104eb34f97dc95e5dc255c4e8bd0bc152bdea3a943a49b1cb8e74d0b3d6f2ada498d98d4cb14376e909411dd97b03bfd1677d48bd14e4858cc44b8ae268a19d818ed1676804aba78bae09b95ebff403d976dadbf9558cc09b91ac266f04c1477c169607b3a292e3168eae55c5bef8cd4af54267a656bdb5bc4f4dd529797b30788"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003800)={0x44, &(0x7f0000000500)={0x0, 0x11, 0x12, "26792af7cf3438a8012176a9ed82861e2056"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000014c0)={0x20, 0x80, 0x1c, {0x8, 0x9b, 0x4, 0x5, 0xd, 0x1, 0x0, 0x8, 0x6e9f, 0x6, 0x1000, 0x100}}, &(0x7f0000002680)={0x20, 0x85, 0x2, 0x9}, &(0x7f00000026c0)={0x20, 0x83, 0x2}, &(0x7f0000002700)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000002740)={0x20, 0x89, 0x2, 0x1}}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000440)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="5fdab21b4c03a51d6045373787f2078b0b10923c040bc24a2730da059865f947a14a18a6c3bb2ed0479bb28f", 0x2c}], 0x1, &(0x7f0000002900)=[{0xc8, 0x115, 0x2, "5cefdd3988a3a1d3da81d4361d5ec8e7aaf2de47f8ebd86fab4744d15f982b763bdde20bd11766a9818d3ba507454e054c9b471010f8d2860db59476c4283d3c6f5b8aad322b7d170bcae09486fb2cb25dbb4cc3485774639e62f2a5e99b7b4f418daa4d0bd049dcde490384547121dd0050463131cbad855e995ed8d2d6b542ba6f6040a268cde8e53c23b63e31ef788fe7aa17a1988cbba8185949dcab93b6741787b21eb9d2d8c3c90aaf3959fcdc971d7e9d8761"}, {0xc0, 0x117, 0x1, "4de6510f9f8e11cd5e231fd4e60af5e0edc7137a452c076420ba136fe97fde0d7ffefd3d4c7b7793390ae6144a03254adff58dd208bc3a70a3cbc1f99d2188bb33661a5d7283552b55ff75c28300d79544cfe2bf02c529f8bd3f341dfabb3a95bf417b1442d397217bf0aa6f467c5f531c655cc2a97f14b5d5a512fd69613ee65c715585f3751e309991054cf4efb0b64d79aaee3a4ab97a413cfaed460de88a42c61b2ae57078e6926a0a1f6af912ec"}, {0xc0, 0x0, 0x8, "94fc3112ad49a07a2e8805f718c89bd659fdfe47c0a5e0348d57c25ef3d90b974c93e023a047c51c2b9375a521d04aebb2f3aacce0b3fd67a3c997c8294d16609a1d98e445d7694e7754a0b75f0a249f01e86947f98a5378297bab437116a2787fb1f7763caa1acdf234532f96979a16e65583addf98dfd63b5d4d65d6cf0e97ad72683896b45f3fd3475f3927429e5b005b17ab892d00000000000017000000000000000000000000f1ff00"}, {0xd8, 0x10a, 0xa60, "171b7fccf7c86e1bcddfa8b4b7f5b53190a3902e21fdc1bbf1205ece7b68cd2b3aa9d998eb894ad153f7dcc82b9c2cd62ba60da52bb23391dc1e93fb1572184c0ff4937c200e1415bddf242dd73c69b7956f4dc94de4348512d43229cfa13857fc4fed15759916f0d94fa88bed74c306e21ca3e9e270911e5722a2177375aa9c747779e6df39ed7845ad8a15e64fb57c2f4da93173e4d3fa97f33ee3201c38b7f9474ec89bd1e9791d23cd7d2c5c3ccf3f963298dcebe5d9e38b5ebbd5aeb46e9a93"}, {0x110, 0x112, 0x3, "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"}, {0x10, 0x111, 0x4}], 0x440}}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)="fdd42197aa8a843bdfb350e27fde082ede4846cfee0c2cd1a0b564c0e19722269b48f8ac3a20af2de0e382f45fd0c71002f6eabe5544a1c68084bf1d5dd53d", 0x3f}, {&(0x7f0000000c80)="ff346f5fee740f9ffdcdbc9928305eb26fd537aa8e0c14f47d016b7eb79924e7e720a87da3f3e6fd7091bbeaf711a3a8f3c87da4c34a9f1064c6ed76f25af4703f9869aa43ad102acb68ab09970b3572309acc309b4ce6082d14504f73cf4bcac679848d1f96b557efb51914693557da16d25c9765bebf2145037efe9219da72c1c5731a9d46984e66420845bc9f60cb5644ee6e7de17a741d28cf757a9627157c1ddc4abd4c77360122e30dd01313863761596c45c55c4cdd64931e7f5b", 0xbe}, {&(0x7f0000003880)="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", 0x100f}, {&(0x7f0000000d40)="810a6ca2dff020db4b764b260a693f186dc5fc6caf46a96f7336c87cec650c8de07923eaf61f4a39b49938546dfc708fec1472bfd8ad6bc672a9490033b6f62e4f372617f36505a2314e3144ab473e92cd7454a0b2b760c37dace7dae42409f2b5787d837129cb621b92077521a2c2c2372aac19d770ba8b0ed410ad3af87ad091fd74650162bfe87f", 0x89}], 0x5, &(0x7f0000002800)=[{0xd0, 0x6, 0x0, "79bdbbf639315bc00bf22f797a51fcbf9c0f6959ae47604af3be0fa583c88971e9581964ca74de9d727d3f0b87466ea2e8ddd5915c3c33836cad4fdaaefe9d357b0b03b6a2fdbd649954cf7892a936e37fc0b509f0033ed80079e9c97ad3e63a5735d0b3006ee03643028e287c1def35cf6715ee9cef302ee1b888a73138972fbcd216412f2a6094589e4631474d9b543b6826314a0a81109240869aea0ba38c091afee66dd1e7c4dea8a6300784b434bf71a1ac3efc5c9cfbf2"}], 0xd0}}, {{&(0x7f0000000e80)=@hci={0x1f, 0xff7f}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f00)="b53d39", 0x3}, {&(0x7f0000000f40)="2717cc08dbc3afa599ed3c45043b747831003985b38292e61471ca5d80b926091841e673afd7b126215db782c8b60cfabbeb8156222cc79ca2e8be3984751d000a82d688509b8ce2457d2a0ab73d31531689b41ad88818f83d2b5f7f8545a4307f08bdd754c4c6d7a4962c44388bee9fc199599ac54c3e6858eaa0c8fe2c26b4a7fec829a13d94653a2056586ee9eea734891f0885b1fa5ab9abf194f921914f481181a9f88d996379b53d6ce897384a034f26a7e857dce93360819851aedbb132c8d7552c48760b1c3c", 0xca}, {&(0x7f0000001040)="ce279f28b487c082f85d0c51b310244a9c995b9b7804dd1cb2f7101448de4bcc0ef181fd5e6bc97aabcb7ebc6f58af23775ea4e42224fec0883fb67c87a14eab84b0a86229b398f6d2fc76e5ceac6412afc3297e74e1e869321aa5989226c136923a5b71029ad2ac4ea76827c12e7f39d6ef4f3e60193bfc2650718b8f01b47b8bbb6b645f08b017deea57c6d017ad9de2cedf525b02052021c2099d58b813d2e17ede3b6fe5217c24a97570467e41", 0xaf}, {&(0x7f0000001100)="f4c028b95d53c2b1fbf2d9f40c6bdd1d4690f374134faca6d47da8e653c51e309816a8bfe884711706e79a24147ef041", 0x30}], 0x4, &(0x7f0000001180)=[{0xd0, 0x0, 0xa7, "45a41076f870a81b0ed3188397a8b04513e15364170899d790b59deab12cb161868862a6606e9b671d66ff062c8da8bbc565bdb70a0b533e55b9d24c738a64a37eab0c0b327c76b4a3464f4d6dcd1524da1e8d636cb6d2df8e288011ce106d8ba629651e1fedc952920870144726b60e6f5f38e7ce8f30ca7c0d63a8388c8abf03e32ca41f70232224efb14e3b5e7482acd32f41165675e9da2299a25b0a8fb93b6018529c4db452526388c6099d601f75b4f3c3255fc67b287ba586c939cdf8"}], 0xd0}}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000001300)=[{&(0x7f0000005500)="46f74fc2ebe0417fdb8a1a5f54e3b112798289de27c9667bc4aedc8eec52a7b29e91f7714621cbc298719c6a55314719aa592320c1e445d4007dc43e2ea11faa023b1960073d6a10bebce68466bdb84c96d4d6f9bbdf1b8db8452e3dcad6f4421f159f09ba1181aee62095c1d612f09a26af390b0d773e600398eda1ce6f10b85b229dee82fa33b31ad3539ed7a6d1e6be7cf0d50de664b998ff48eaaa6557217ddf942acfddeddea2e5275ee4bc803992c24f690ad83cc5eb4227da915641f3049a7b410141986d9a1ceea0e15e0afd5fd6d32690f5533fd6dfb49f57a93af0078f3f619d89ccea9220b1c83831342b1c4c2449f329d4ac8f91e120c00ecb48ffcb08545d99baf48fe4a095728c01a6011ce69e004cf97d7b02db8beae4e5658e043df44286d11693a3993455bc69544f805fd6c4a123d1e2ba33a608adea5beb8cd8025b31ca6750242739ae741f61ecc96b0d202ff6c764816ee27640b2c5b774f21d8aaf542fdc64ec02ba72bc48083e46382062d1693358379ba97037041916f015930923f75e6a22f7953439c0e31b6741fff8f3a45b36e226b65b3e79960390d12971fd6c52708ffd88941684d2df651c8c753e5b790a028e5eeae80ee14d88b526c2e348182997e1adddc9cb58a819274e0c7314e34fc035f02fccd71384b1f1b4f4620a11b66ddc1f68774b5d923569c7bba9b9b4e4b3b9384d795be12abb8381dbf764dc5a0dee84694758d3bfcfec8001b92b17b1098f46c0c8601b84c9b9ce416250f265dcfd248c40f0f4473f9e0d95231fcbe5f6fcbc1cc606b56ff613ca87c783975ee2af4c8e762329e4776f217d145f5f7d6ff20dd53d65593c8b57ed62afd2527ee0c3c627522b48415219e6f12b18deb9f3d95562255ad900b08c59eb2569dbd0c28cccf08ae15e3c36b2fad9dd237522a85098b5de3bfbfd7b6e7f6909b26142ba48e36fa8d44e6dfd4cb145feb6b280ad59d37dd7369972e9202e0e24247b0eccd9a04e850fbd1b58952d6522e6e105cb6651be9624edf6969b2182c08ee836ee98dbc1158a54035abfd818adfa095aa01841778af52af2bc0446b49a4c9fdb439775b9860b1d3193c65bbda0e2a704359f45c55d4bf24f00d02d186e54470652eaee51be2837efaa5aaf21813830a70433a75f7d477f34a9dd28d97fb5407cae2e2df147e253d9b8e93d9e345714797fa3be17d776ef3138d509dc71a3440013e17f0f7c3f823fdb8ba4e7df2ad52d09caa8ab8de12f863595a0b808bebc77ed4895beb774db38d7742e7dbc08240f77ca39b74c766d363e92e3c4402e489c5c57c5b716cb05670a9c9e75316d33d025318896356049408a88fb0574db1b9e8367cc90c5e074dfaa0983ff78577db2aa754ad7539f25ae31ec9f505d805103fd609a8a7f79405537959315261bc5ca5ca5f3193bac8ee4d58331d685006a995729ad58fb5cd5900f497a85101457a169a1825ec76859a6e7ba883e06b90c3fe6e27c0e91b5f30c764fdda12d52a4083b431aba29d1ace9e05f4f112c93ee9d83249c1faadbdab59d7098d193339af336e67ba74c290c0f5d3ac5340210b12268030d056fab35be1eb8d6c30888554d905aa2486f98c34cf9a9cd0638d28fb12a2e57e89c81286f24422ac3d8d3a4b273aa645cc56de4d14ca1fcf500546606bfc359b0da755ae5a6600ff724a0acb78f692d021d6f0891bff8ff4d4883eb1493eb59dbc27da19b5a717a261e53950e78d8caf1eb9ee0246c04f4a86953283f3f7766d5b8b1dc5c602bc67d74d2a2f953951679c67b76bcc3b6ff9dc7875d801340149bee8a198c3187c82f8c378017f32ba7848e95cfbeb13d579faa8b23237a09f0086d8583b23c1420ab25e7bfd7a537a112337fab89a797d19d30158892a017052f457dd506a8b977fd0c36ed8fb5c59b2615d5cd96bae425331e320fde8baca001b26a5ba0d6b9f86517aa15e6c1adc96a5162fa368e4bd14517508fa8387eab6170a7876ea6a9cb4e3f687a94e5d28ed52f1bb6d14c4c1caa79185052e0a19bac3e19479dbb8a3f304c14cde6aa7dda3126c9a792baaf3d809b69a1bf990e78aa41a0afe31d63e0de781db0f5df3b97e6bcf203d631fb2a82e5daca82570d978166c6d7b7999a81b1b18d629f0a792eb34b26e81bef43ef07abbc6ffe51184d2c45cbe28158622c300afb5783b19bd74afb37cba4142c8d3d0ba7d6047fbfbb6c65037579c7343dcff7273ecd99c5e143a89333b59edb657d2b76eabc3840c2208c73d4e31f3aadf8b9f5e0e537943040dcd362aa8ad98ffcfd76cf45b9621d9783ea66dde03569354875d4787f0e0a676a0b10425b5ef8fe1f23e9fcc93ebc5b20446e70856cedff98bc58caeb5238d4321d9068cdf6bbf7e12d05fdb882f139b009d15442e51eb0de130c86385c48e8d64b28a4d880be4241fe3735e9b7834adc5c88c54b91734509f1b6311a3c56e84204eca98cea6a18b108cfdb2437243368e46128195cbe0256898d3d2dbc6a5cee4a982458958f81051794216264290829a60b8f7cfe3b14a75774ff687e1b6b9c4d5da27a57af75b4f510eb6e0a7799c79cd325158e53ab90a0b64edc4ab0a60b4628e17ebcdda7221f677d44009a9af584ef94e06459d950ce703e524eba889b032f989a1ed774801775f3264c2f1fcbf55f933253091c347e8ec27060e7ab2c52a9171a37d414c16b994f82701778edeebd4c577c091de5defb8e336a51efdacbce1608570a1e14214ef8e1f0827e520824392144f3c72ecfbdbbc354a8070e7ea08b3868183de2edf29832d85dfa5231ecfe5dd0e6d6ec57e4f9e2b321d4add79317111dd78a959899efafc59dc78fc97293535739a9802b9cb5aeb20c534f1eb6ad743606371aa6db6ddec968a97535e854ae98c6dc96d3fd3f9f3d9650d2d039c63eb97fd77d49170e0de0285c0b4c307a065a36289264ebef2705f1338bcb730520401139865b230e5c73cb166de3fdc17bff6e8e3585be71f673b3e5c0de9fded8d06c0495c0ccc257a07bff547e8488fbc74ee270d89a278efd962b57969a74c0bf9115c30b820e812ccd4dafa2cc714b5807cb3bff38321464b4bf0b20a35c28bcf93594d09b33cff58bdd63afafed51b550c313f406858d12315e51b4b2ae13b041f03efd14771ee0eb2cf1755b81c0a29d60b2b66672a63c40c8066373485d56ce05fad653ad379e0e41181c471883ff1d6f47ee638542e89ad0e4203240890e4f1bd686295537a0ebbd5d2072f89293e6e44b272c14c927b13ef59edac0d46ddb07dacd08e7f6228873ad5a968558b2ff89c8347a314a64c86a61f7f5bd657073e83062400f274b395918ecf38d61df4267c2139851cac6d0ba61050756570b8073a5caa621d6207cdc8ccc6d1cdd14e5135c0abf3440720b184db121ffe0ab3c02d880c3083206975dc82bbcb003146b21b67a5a5e5832d3d893d7834a2d29ff2aeaa27c7d32aefeaa44fbb584c181964a03050fed82897e27e19348490b292ad0db89e82dd2bc32fc54b148e5021ccc766fccc085d7068c187f9b8c76b894b65fcc4b06e9e2beb52db6c4b0cbc46774b4e4f5648618888ee90de73250708e1d319095e74575c466ecd8095953847cd67dea9442eca9dfa7fa3cfeacab60abd0c9d23dbf5eed27220470e19c3891bb43c85ebfc6eb9a18f7364a4072a8a32f3d952262232af7e72b5734d48a49149e19f314cc17eec2339f8878cf9a68c367175d0e9e81771a337045f04a59b6ef1de81647a309465e6c714eadc592acd55deb625c7318cc1569cf17647e2b275917d3cf67c370eb0e233a22293c30ddf0154df27cda88b6d2234840bb9199ff4a9cb734afa91473f0e594bf88e4da8d542d862c0ad0c7678efe89d2a5651c44115a0b9aa875b1762a68e88992ee2609a493329081f1db42b1a4533bba4c0cd8cec060f15e057e1a4d967dc14e5a21d988be9c08857f29337ca466f199bdd48305c0513126971b7458a623b8a18bb76c04c66d147bff0b61cd950c996f977f6c4efe0c838039af669b2df02868e42af98e60c13e9eb26dfe8aa85a0f529159f5a7c09f848386e7651291b810786714145764b9f07a3e214e8eadf1fca9ebc82dfcaa4c62843ab24b9ecb7265e3ca0b2e24ca25c3e44f8b0068e6df1ea9444aea5ed4e6b496d7a46230ddd4300f5a3b9097ccff0331a8d39737487d530f1cc991bc327d1005152b537da2deaa46c3e7f00bca105dfe56caea936dc2208cf500b7a13941e236c90508da9a16d683c665fcef4d5de31b6c7ee37dc1c6b1b44f9e291d0fb4e80bdb503374847de6133e973a01ceea4a94da83b0c84c40c2bc03dee25b1f089f0d956dabbdfacb4785e107e0ac30902dba0ec5ed318aa3786aea70ba89d13cdce13b84e36759ad8b34fc0e3801055dd9cf86229224505ba6ed18afef600214a53303388686189268f785e1c983c5f130196acb5d2a797e9019d1ba99902de1a484bd2acb2e35a82dfb559729d9cc731fa043999f72c0cfe24780029cea68938483aa3b25185f1c295e1ceced1a9b6a0917ba019b4a5c3509059aa3502fb0c014d0499695cbd6d1f622a9858df9d3908bae878d4586ede8cef49f7ad70ef4e15700089c285704bb6fe61ea2d5158d9c9e554e961a71a9b17b54afeebf13c21dc5a78b578d07b7e4efede52c8f3f6b0131c294922357bdc53977ac3ee1d6b80299f4a84d74965d0bc9a697913210e14b126fd5fcfcaa46cc70ada125183bb8cb39a36c85f0561a14366790f3144dbb62becdbc7e3587bb9468d740d4dcf861f7bbde4da06f29a112aa000ef238aefc0b9a255c37b52aed0a2b25cc08e78ad5f618c835df24044e32201bd13dbf5ffd425ca3901ef7603ace17c57ac2e627e650f45850aa34cd62e937c6717991fcaba63136f0a8c5ce736f6fbbb81194adb91fed8ffe20142d026cae7019aefab4e9a03b52f2982543bcd37ae2ead78137463614c661d22b10f952cc98ffce9ea233b8c5a78c08050f372365b3300900aafc413275fab1c7f845dac1d59040858b13c64e6d7a238ed5850af30cb677e8c1bc7b0747ede70fc535680bfd5f9d49abe61501f0be92e1e1587d97bea64e336c51c482dc75ddd696c11d5037129d1566999be6a5214f03b11ccbc98505ba112402a36e991eeff3ba05a2a7a66e7ad6aae2ac8b9661fe69bb6964ceaedef14d57b69c192f9308f4b0f5358f0c2cacb5171b03b1278d2211afa7c69c0a8c8bc7919cd92398277386510dc60213d3b2c4eb85bf1f7a7ae2ce852909d7507661da941151d9346f762fde60db66f49d8195599fea39585b5b4b8eab93857f2bb23e28968d25f87dbdc65bece9ced07a13b04eab66d7585f0145ece0db994c9b9cb80735b73b70e2b121652c618281a01e249c150558ed7696fc232e4edf5b78e070364c2796980410ee65a77b2d9d924371bc51482a8fd4326efdae035dab7737ab3e8d3d160a8de7eae69cc763b6617c64c008ef1ad1728f4e7f473c720025d1b1d7835e4372fcaf57ba960cb8aeb195f97c263466022c4147b07f3e1a54e44f518ead7ca033e4d594c6c7330a664011012fa2c90cee2b8fb33b7d65e2303245e86de254a61dad7d792bc3dd2d2cfea1d882f45aa7e0165dfb41e5769d43e8afaa25e2419d6d1bea0c7098d40ae542ae0fd79fab76366b24a01de98b0132fd840c6b4fb8b26e38806099c0ccae57bdea123b6bf331b517751d012a03ae4993603b969e9fbf280294cfa8d618a20bc6", 0x1000}], 0x1, &(0x7f0000006500)=ANY=[@ANYBLOB="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"], 0x1120}}], 0x5, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x7, 0x0, &(0x7f0000000080)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a0001a05c191780fbdbdf250a8080000080"], 0x24}}, 0x20000050) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xa) 2m40.871338629s ago: executing program 0 (id=409): unshare(0x8000000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000140)) r0 = semget$private(0x0, 0x4000, 0x121) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/225) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x42, 0x1000}], 0x1, 0x0) unshare(0x8000000) 2m40.705274274s ago: executing program 0 (id=410): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x1a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x10000c, 0x9, 0x600000}, 0x10, 0x0, r0, 0x0, &(0x7f0000000740), 0x0, 0x10, 0xff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRESHEX=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x60001, 0x0) 2m39.598455149s ago: executing program 0 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r1, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2m39.362701506s ago: executing program 0 (id=420): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$usbfs(&(0x7f0000000140), 0xf, 0x80800) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)='9\x00\x00', 0x3}], 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000200)={0x0, 0x51b6, 0x4, 0x0, 0x69}, &(0x7f0000000080), &(0x7f0000000180)) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x1040024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m36.510339543s ago: executing program 2 (id=427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x64f}], 0x1, 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x65d, 0x1}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r7]) 2m36.298509444s ago: executing program 2 (id=430): set_mempolicy(0x8000, &(0x7f0000000100)=0x5, 0xffffffffffffffa7) syz_usb_connect(0x0, 0x1ae, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 2m34.933793345s ago: executing program 2 (id=439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000050618500", [0x0, 0xffffffff9673e35d]}}) 2m34.853043772s ago: executing program 2 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0xa00, 0xa, 0x40, 0x100, 0xf}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xd2b, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xfff0}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x24040084) 2m34.534198504s ago: executing program 2 (id=443): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r10, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8080) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$netlink(0x10, 0x3, 0xc) getsockopt$netlink(r11, 0x10e, 0x9, 0x0, &(0x7f00000004c0)) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.361926438s ago: executing program 2 (id=449): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0), 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r3, r4, 0x0, 0x2000, 0x0, @value, @void, @void, @void, r6}, 0x20) 2m23.707232116s ago: executing program 32 (id=420): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$usbfs(&(0x7f0000000140), 0xf, 0x80800) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)='9\x00\x00', 0x3}], 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000200)={0x0, 0x51b6, 0x4, 0x0, 0x69}, &(0x7f0000000080), &(0x7f0000000180)) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x1040024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m18.118820033s ago: executing program 33 (id=449): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0), 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r3, r4, 0x0, 0x2000, 0x0, @value, @void, @void, @void, r6}, 0x20) 1m51.703460953s ago: executing program 1 (id=559): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) mmap$qrtrtun(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x100010, r0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) pread64(0xffffffffffffffff, &(0x7f0000002200)=""/4093, 0xffd, 0xd33) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/48, 0x30) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) fcntl$notify(0xffffffffffffffff, 0x402, 0x21) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m51.526953986s ago: executing program 1 (id=560): syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045a000144000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312689c292f0f994d9c52794649ca8b7d49000084a36b1330b362e198a87c112606227a04ccc783245519751f5d4e5772163dca93b5a83bfbbad9d0e94382e3e1c455a723e104ae8c5351d6c94d7fa4693cb010b11f082af140ea6c251105cb70c58a3591f90a6f08104fa826c4f5790a71abc45557888794"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xfa, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "3bbb08"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x7, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xf7, 0x5d, 0x1, 0x40, 0x6}, 0x35, &(0x7f0000000280)=ANY=[@ANYBLOB="050f350002f91002088500002910039cb188f1d23bafc8ebda71b319ab4d189b61e0b592c7e037084b779f9c39ab7812f9178f201795000000000053ac4f21c6037ece9e081cae3a5ebbfbd7"], 0x2, [{0x41, &(0x7f0000000180)=@string={0x41, 0x3, "a95d7ebdc1e90de278ad5b8e4209e5368ea2a795074a712bf3a98c10f453f4d4d3727b07ee905179607c5a72a609b76e078e6ae35e2378f218c8117abc93b9"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000680)=""/187, &(0x7f0000000100)=0xbb) syz_usb_connect$cdc_ecm(0x2, 0x11f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x1, 0x1, 0xdb, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x1b, {{0x6, 0x24, 0x6, 0x0, 0x0, "91"}, {0x5, 0x24, 0x0, 0x3cbf}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x7a, 0x1000, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x3ff, 0x8, 0x6, 0x4, 0x3c8, 0x51}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x31, 0x4, 0x7}, @mdlm_detail={0x95, 0x24, 0x13, 0x1, "1d4fde0611320c47af697d34f9cfeb1572170e577c715dbc0357785b4b65d4588418ddc527d4f6a91b70c33f166a9f0d3e45f205bb833aa44c4c821d6db368ec957cbff7543d61a08379d396c5d08ca69d4f2c10b6c14e4b49e20c6dcff661d39b1a909791ac794a25fe01166f4170b6803e8ffefeaa1827ff5aba04ad827ac8e883a163c32512945dff6f6ad2114173d3"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x67, 0x7, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x56, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x5, 0x7b, 0x20, 0x9}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x4, [{0xa0, &(0x7f0000000480)=@string={0xa0, 0x3, "71e408dc6ac56c2a6641dc489871015a173db3000063995ec3cd76597ee4940d30b9fba86825225e54918fcb1c67b1ebfcbd298bc90e2faaa59560cb30fd103952b002d35f702914f3c749c43f81f4e4518d2847f47501a1e564935997914d5d71e506c119d1495f4be9aaf039a15ab04217aaf830c39f994faa60632f5bb064d8ca1d90b691298985ee25be9194998626e7f7a6e1ce7f7efcfa3deb85d8"}}, {0x3d, &(0x7f0000000540)=@string={0x3d, 0x3, "4ed260ec27608a555b6bb36b562724bc18d09463fd51f213d729aecc9a948610add7ffc3053435e337f4c17a73e209ca809b6738a0142048f03353"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x812}}]}) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045a000144000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312689c292f0f994d9c52794649ca8b7d49000084a36b1330b362e198a87c112606227a04ccc783245519751f5d4e5772163dca93b5a83bfbbad9d0e94382e3e1c455a723e104ae8c5351d6c94d7fa4693cb010b11f082af140ea6c251105cb70c58a3591f90a6f08104fa826c4f5790a71abc45557888794"], 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xfa, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "3bbb08"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x7, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xf7, 0x5d, 0x1, 0x40, 0x6}, 0x35, &(0x7f0000000280)=ANY=[@ANYBLOB="050f350002f91002088500002910039cb188f1d23bafc8ebda71b319ab4d189b61e0b592c7e037084b779f9c39ab7812f9178f201795000000000053ac4f21c6037ece9e081cae3a5ebbfbd7"], 0x2, [{0x41, &(0x7f0000000180)=@string={0x41, 0x3, "a95d7ebdc1e90de278ad5b8e4209e5368ea2a795074a712bf3a98c10f453f4d4d3727b07ee905179607c5a72a609b76e078e6ae35e2378f218c8117abc93b9"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000680)=""/187, &(0x7f0000000100)=0xbb) (async) syz_usb_connect$cdc_ecm(0x2, 0x11f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x1, 0x1, 0xdb, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x1b, {{0x6, 0x24, 0x6, 0x0, 0x0, "91"}, {0x5, 0x24, 0x0, 0x3cbf}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x7a, 0x1000, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x3ff, 0x8, 0x6, 0x4, 0x3c8, 0x51}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x31, 0x4, 0x7}, @mdlm_detail={0x95, 0x24, 0x13, 0x1, "1d4fde0611320c47af697d34f9cfeb1572170e577c715dbc0357785b4b65d4588418ddc527d4f6a91b70c33f166a9f0d3e45f205bb833aa44c4c821d6db368ec957cbff7543d61a08379d396c5d08ca69d4f2c10b6c14e4b49e20c6dcff661d39b1a909791ac794a25fe01166f4170b6803e8ffefeaa1827ff5aba04ad827ac8e883a163c32512945dff6f6ad2114173d3"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x67, 0x7, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x56, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x5, 0x7b, 0x20, 0x9}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x4, [{0xa0, &(0x7f0000000480)=@string={0xa0, 0x3, "71e408dc6ac56c2a6641dc489871015a173db3000063995ec3cd76597ee4940d30b9fba86825225e54918fcb1c67b1ebfcbd298bc90e2faaa59560cb30fd103952b002d35f702914f3c749c43f81f4e4518d2847f47501a1e564935997914d5d71e506c119d1495f4be9aaf039a15ab04217aaf830c39f994faa60632f5bb064d8ca1d90b691298985ee25be9194998626e7f7a6e1ce7f7efcfa3deb85d8"}}, {0x3d, &(0x7f0000000540)=@string={0x3d, 0x3, "4ed260ec27608a555b6bb36b562724bc18d09463fd51f213d729aecc9a948610add7ffc3053435e337f4c17a73e209ca809b6738a0142048f03353"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x812}}]}) (async) 1m48.085154629s ago: executing program 1 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r3, r3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r4 = signalfd(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000d0000006b1128000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0xfffffffffffffe18, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xa}}], 0x1, 0x4048000) write(r5, &(0x7f0000000000)="09000000010000", 0x7) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000480)={0x8, 0x800000000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x399200, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r10, 0x800c5011, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 1m43.309710122s ago: executing program 1 (id=593): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x400703) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x81, 0x0, "eae1ce24c4c9d88836c1ac2f09dfd4735a9c3f", 0x7, 0xdf}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfbfffffffbfffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0xd, 0xfffffffffffffffc, 0x402, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2080c0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009d, 0xbc9faef6, 0xc2}]}) r5 = socket$inet(0x2, 0x800, 0x9) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xbb2, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.706055878s ago: executing program 1 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x20008040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000d090e9fb585d28160000"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 1m40.4091232s ago: executing program 1 (id=604): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES8]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x490500, 0x61) getdents(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xffff, @private=0xa010102}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x80002, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) exit(0x9) unshare(0x42000000) 1m24.928565302s ago: executing program 34 (id=604): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES8]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x490500, 0x61) getdents(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xffff, @private=0xa010102}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x80002, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) exit(0x9) unshare(0x42000000) 9.774459672s ago: executing program 7 (id=954): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x884) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340), 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x4, 0x0, 0x0, 0xb49, 0x200000000002, 0x3, 0x8, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$batadv(0x0, r1) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf", @ANYRESHEX=r6, @ANYBLOB="14140000212000001c001280090001007866726d000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000102) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) socket(0x1, 0xa, 0x5) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="24000000200001032cbd7000fddb07000200000000000005853f7e5b05db31745e4a0616"], 0x24}}, 0x8800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 9.10218821s ago: executing program 4 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000100", [0x0, 0xffffffff9673e35d]}}) 8.70180109s ago: executing program 6 (id=958): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x2, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x167) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x1, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.296171207s ago: executing program 4 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000099, 0x0, 0x40}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x37a, 0x0, 0x4000000000004}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc14000000", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x0, 0x7f, 0x2e, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x2, 0xd}}) 7.534963461s ago: executing program 7 (id=961): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x8, 0x800) r5 = fanotify_init(0x200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2d0, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x284, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @remote, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1872d826626968b73a849aae5d589e2685ef573d06ed67a39441e0c0e4599f00"}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3099ace9f33b89487dd6902e2affad7fcfdf1fa9cd361539fd39689b86522f04"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}]}]}, {0x4}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 7.433507881s ago: executing program 6 (id=962): setreuid(0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000580)={0x5}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f000000e000/0x3000)=nil, 0x3000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setfsuid(r4) r5 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000091}, 0x40845) r6 = io_uring_setup(0x4102, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000028d, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x81471b6da8214198, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff75, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x24048805) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(0x4) r8 = dup(0xffffffffffffffff) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f00000002c0)={r9}) 6.333809017s ago: executing program 7 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x9, 0x131182) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x100010, r6, 0x100000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x10, @void}, 0x10) r13 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@set_irq_handler={0xc8, 0x20, {0x18, 0x1}}, @nested_load_code={0x12e, 0x55, {0x1, "b9560900000f320f3036f30f01f8b9800000c00f3235008000000f300f09470f494007b805000000b9003800000f01d90fbd629fc463f960d7000f01cb"}}, @rdmsr={0x66, 0x18, {0x8cb}}, @set_irq_handler={0xc8, 0x20, {0xb0, 0x1}}, @wrmsr={0x65, 0x20, {0x9c4, 0x1}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x8}}], 0xfd}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 6.185278806s ago: executing program 6 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) finit_module(r3, 0x0, 0x3) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x10, 0x2, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x8, 0x8, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x10, 0x7, 0xffffff2f, 0x2, {{0x37, 0x4, 0x2, 0x25, 0xdc, 0x67, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x9a, [@multicast2]}, @noop, @rr={0x7, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x1e}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0xc4, 0x3, 0x7, [{@multicast2, 0x9}, {@empty, 0x7}, {@private=0xa010100, 0x6}, {@private=0xa010102, 0x3}, {@remote, 0x6}, {@remote}, {@broadcast, 0x7}, {@loopback, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@remote, 0x5}]}, @timestamp_addr={0x44, 0x4c, 0x57, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4}, {@private=0xa010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x10001}, {@remote, 0x101}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}]}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x3, [{@remote, 0x1}, {@rand_addr=0x64010101, 0x1}]}]}}}}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0xd, 0xf9, 0x100, 0x8, @loopback, @local, 0x7800, 0x20, 0x2, 0x77}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x15c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80805}, 0x800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r13, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) r14 = syz_usb_connect$hid(0x1, 0xffffffffffffff64, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x6997fde03e47a50a, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io(r14, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.208942716s ago: executing program 4 (id=968): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) (async) syz_usb_connect(0x2, 0x58, &(0x7f0000000040)=ANY=[], 0x0) 4.64711424s ago: executing program 5 (id=972): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6782646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.u,\x00']) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r2}, 0x10) (async) r3 = syz_open_dev$video(&(0x7f00000000c0), 0xfff, 0x50800) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240)={0x0, {0x7800, 0x4}}) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn']) (async) r4 = syz_open_pts(r0, 0x143) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000040)) 4.509536862s ago: executing program 5 (id=973): r0 = socket$inet(0x2, 0x6, 0x7f) r1 = getpid() setpriority(0x2, r1, 0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000640)={r9, 0x1ff, 0xbee, 0x1, 0x3, [], [0x800020, 0x401], [0xfffffffd, 0x1001000, 0x8000001], [0xfffffffffffffffd, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000002c0)={r10, 0x40, 0xba, 0x3, 0x0, [], [0x5e8, 0x1, 0xffffffff], [0x8, 0xd8a8, 0x4, 0x7fff], [0xab01, 0xb9da, 0x40, 0xe]}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000000c0)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r12, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d2e3a005adac30d22c9db4164fe84db75f5b29ece271e884ae271ad9c3f4ff6dfe6cf32de3adc78a04069f52c2ab7e2e7f3ff7a40d04f76b7a7c42b5671f50be69320405262638f"], &(0x7f0000000100)=':\x00', 0xfffffd0a, 0x3) 4.400466758s ago: executing program 5 (id=974): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)=0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', 0x0, 0xf080bb36de490f88, 0x6, 0x10, 0x0, 0x3, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x0, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0xfd, 0x8dfb, 0x21, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x80, 0x0, 0x7522}}) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="051cb7b71b3260aba1e7f019463b694c341daf2f0586a96ed463b17f1fcfb611271fd1279c38df3f8654ac37c8ff89e5cbba3a2a0651a17608154b4763c9ab57b10817b78c502d373d8eb1fed81d4148424e216dc918fc041f93fecd2e519f5c61051511018ce71b954d93cb3b926c1487421cc51343c27cd7a4ed1331c3c6198d7eff400964c686f100c4a34b5f7c3344e0a8b7608939de09eb9b8b8ab9b69fbf48121ca6a48128a7723413d11db0a39a376a494aabc3063c225ff7738bc51040d84a1d1a42b65c8f32f6739dc06c967731a64ec639df2151eaa08e413497a92d2b3794e3d99462fa418cf217", 0xed}, {&(0x7f00000001c0)="b2998ded2430a3f00468ac2ecdaaed1b7e7b8c40d216c0e6f045af0b75189f", 0x1f}, {&(0x7f0000000200)="fbad92c33a89060d759c70c3b4fe8db9609490780edc0966041203a7bccb3e96b4e378ff4ae14f14e68143beccffc1357baf1c", 0x33}, {&(0x7f0000000240)="562737da6d8c79665c884a3c18832b1c5b4846e6a433008a955aacb979f37d89ea94bb39359da993952efa77b63bf90e0e4c7733d9a41b9def0ac581f7a2c87741e2e8d5f0c935cbf95b3122f99f02957c8aab07d919ac3948f852a71fba", 0x5e}, {&(0x7f00000002c0)="006a57bb6cbf2bd85ae67cd077a9021765355859a803c6356218a7ee752bdb607140f717fb59bdad3d8a87e6cedb6ba3e15995a166acd5e7c96e35189b2d386e21d4a7d81e3e2476825f7106f17aec26e26f630644ff53ed209535760c7e2d1b6fadc41b854a8841273cd49081032c83441dc773b2ddfba8aae9bbb604cf088dfc17d2d2e9abf1af334ef320e611235021dd778e437fa4720be7f89822df935a126a56e8a2c16505ba99f7", 0xab}, {&(0x7f0000000380)="e7b5a8711b0a62797e83143f656e792fcd044b618d210d7f35a74589b23f236151ec9b14db09ebafd1b2665697af967a7f62bb843f32628ae6582934cbd39818d08c", 0x42}, {&(0x7f0000000400)="9f9b21e6d41013be7327d63f242e8884251a61ef886a651bc01cbf60b9aacd98a85bc92131ed6ce808b7923e4faa3171ebc5bd8a0951282beab1f202804e8572bade15e63cad7d93ecad55cc", 0x4c}, {&(0x7f0000000480)="a5f51d99f1b58f80cebf5179372409ac5f618ebdfd6d889f05168819225f5af64180b6e89a8a5769dfe03912bb507a66214fe1968b608b45561747dd935e7ab8bb87df48552c4ff8aff4952621f22d8a58076993d91de7c732ccb5490b65dd14f482ea63313dfff90c283b13e4fb07403700d5bd3fe092fa6c0d7974332c64b4e634aa2c2b", 0x85}, {&(0x7f0000000540)="d229a80235db79e8d250d60b0cee08d9192a4eff6bb8f1ae1882c5b7ed68664ace96fa77ca94493cc7feff624b1bd3d9501a88f76ff8c46797d818027d6f1f4c2b429f4331886b142db725a5f6493523df0f3ea5a9f575e4033652ee5e4f2c65232302c5a18bc6dd0a150663ac95ced31fceb32833e56824753befa90e426ed07732ee43d256176f5ebea257e1e90837a089007725378e6168cb20b995585305707cbf8b318794b34fe9847d1dfca3fe58550c14732d91717e1da99e43c8eb122b", 0xc1}], 0x9}}, {{&(0x7f0000000700)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000740)="458e095b7c59cd2447a26feed4411b39823d5151d2346f18a7692e53a9cb5bbd4a5efe671c678bee11a6f877492b279812a5d4d69a3978d7f9b19031f24bbabbfcc7bb3f3dfbfa003b71508d95693c5c016929f84f5fe3f0768dd2dcfe9f256abf656805b5cb92de5d6fad1869df71fa52968591ae85bb", 0x77}, {&(0x7f00000007c0)="477de9f8363a365a4d3bd2e76302708f92450a50edeee524a0c5a5c315b99e82285c0f06106da0edbbd5c99aa6b8e784b5c00fb5c3115dd67e1f552c439f092e6700df9c94791f91e04c4f24f8bc486131cf042709c39441eb83c43c0e270ffedadbb8059e15a70f876f24cfe9", 0x6d}, {&(0x7f0000000840)="94c1b2032b5c328fdbf0467fffd97b", 0xf}, {&(0x7f0000000880)="f95d0577ba256abf9f694463c458f29eef2636f13442fb92fb826f563e6901cae516c2d2211cc8a9bbb215a82a63b9a8b9ca1b3d53d5bf89ac737ed2cba404733004b307e068d223cf4a2e0dfe1aa4bdbc4b53244fd5e5a3076fc7af4947d62ea189eb26c032a729f15b881f035a89da1d369ffa27ff45fa0022d90c53909b11cc4f141c267e48035381ae64a7a748c066bc480c4643495515ec11b102dc4783f322d2b3a6d38c0710735a0f3168167199d7040fcfec088fae1ab42eb0577c7927a78edb13da459d6c816fe3e23bb6d2150c54ba1f16db156f2e333661f157a7b3085d5bb2f39117e9e7", 0xea}, {&(0x7f0000000980)="b089a1b9c31ba47953a55543449d9c327af4fde5283f1b0641d149c1beb2ed1d4d153659581ba8ce9c0e73f740f345dae990810058f256abca9a4f986bff2ee16ff0957d3400474f3e196ba8140821bd9d904b1938e7c4db979eaa9cd89870854d19bd838925e7bc10876da8e0944fdc925d6b931ec298b2583162fcd5930f51b935ab6fbdc26e6411847a5d61732f8831ae32a579f4ea59256762618b10eab24c08e43df4e826c1fa54e23dcb58a81537d93a0c207844d4028286500fec4d235369ddec2f7fd41dcfccdb66f364d19c04451511be41c47438f1be5a41f8129e5d6fe55999a1e072996cf42227", 0xed}], 0x5, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast2}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xc0, [@private=0xa010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x7, "3594f9810a"}, {0x7, 0x2}, {0x7, 0x11, "de624bb1b969c4ba32f2e0334e4ca2"}]}]}}}], 0xa8}}], 0x2, 0x8000) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000e40)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0xfffffffe, 0x4, 0x0, 0x10000, r1, 0x9, '\x00', r3, r1, 0x4, 0x1, 0x1, 0xd, @void, @value, @value=r4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', r2, 0x29, 0x9, 0x58, 0xfffffff9, 0x6d, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x8, 0x8, 0xfff}}) (async) r7 = accept$inet(r1, &(0x7f0000000f40)={0x2, 0x0, @private}, &(0x7f0000000f80)=0x10) r8 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x120, 0x87, r2, r8}, {0x8, 0x3, 0x5, 0xbf, 0xfffffffffffffbff, 0x5, 0x80000001, 0x7}, {0xa, 0x6, 0x1, 0x9}, 0x3, 0x6e6bbf, 0x2, 0x0, 0x2, 0x1}, {{@in=@private=0xa010102, 0x4d5, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x3, 0x1, 0xc6, 0x3a8b, 0x10001, 0xfffffff8}}, 0xe8) ioprio_set$uid(0x3, r8, 0x2000) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000010c0)=0x0) prlimit64(r9, 0x2, &(0x7f0000001100)={0x3ff, 0x6}, 0x0) (async) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000001140)) (async) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa8, r10, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x41}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x5}, {0x12, 0x1}, {0x18, 0x1}, {0x16}, {0x4, 0x1}, {0xf}, {0x24, 0x1}, {0x6, 0x1}, {0x36}, {0x3, 0x1}, {0x18, 0x1}, {0x5, 0x1}, {0x60}, {0x5, 0x1}, {0x24}, {0x4}, {0x5, 0x1}, {0x6}, {0x36, 0x1}, {0x13, 0x1}, {0x16}, {0x12}, {0x60}, {0x36}, {0x2, 0x1}, {0x5, 0x1}, {0x1b}, {0x16}, {0x24}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3e}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x96}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x18, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x543d}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x48, 0x1}, {0x9}, {0x36}, {0x4}, {0x9, 0x1}, {0xc, 0x1}, {0x1, 0x1}, {0xc}, {0x30, 0x1}, {0x30}, {0x1b, 0x1}, {0x6c, 0x1}, {0xc}, {0x9bbb127f05ed115a}, {0xc}, {0x3, 0x1}, {0x6c, 0x1}]}]}, 0xa8}}, 0x4000000) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000001340)={r0, 0x7, 0x8000, "297d1339e8175c2a549ffe5f6f4002"}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r12, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x20400c1) unlinkat(r1, &(0x7f00000014c0)='./file0\x00', 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x2f, 0x6, 0x2, 0xffffff36, 0x20, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x80, 0x7, 0x5, 0x5}}) (async, rerun: 64) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000015c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r8}) r14 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001600), 0x400082, 0x0) (async, rerun: 64) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x73, 0x73, 0x6, [@var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict={0x2}, @datasec={0xc, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x800, 0x52}, {0x3, 0x24, 0x4}, {0x2, 0x3, 0x1}], "a36c25"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x4}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x2}]}, {0x0, [0x61, 0x30, 0x30, 0x24e672772d71536a]}}, &(0x7f00000017c0)=""/4096, 0x92, 0x1000}, 0x28) (rerun: 64) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x2, &(0x7f0000002880)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000028c0)='syzkaller\x00', 0x9c6b, 0xbe, &(0x7f0000002900)=""/190, 0x41100, 0x4, '\x00', r13, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002a00)={0x1, 0x0, 0x8, 0x1}, 0x10, 0x0, r1, 0x2, &(0x7f0000002a40)=[0x1], &(0x7f0000002a80)=[{0x4, 0x4, 0xf, 0x9}, {0x5, 0x1, 0x2, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c00)=@bpf_tracing={0x1a, 0xd, &(0x7f0000001640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}], &(0x7f00000016c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x6c, '\x00', r6, 0x17, r15, 0x8, &(0x7f0000002800)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002840)={0x2, 0xa, 0x1, 0x400}, 0x10, 0x1d7c3, r16, 0x3, &(0x7f0000002b80)=[r1, r5, r5, r5, r5, r5], &(0x7f0000002bc0)=[{0x0, 0x1, 0x3, 0x4}, {0x1, 0x3, 0x10}, {0x3, 0x1, 0xc}], 0x10, 0x2}, 0x94) 4.301060468s ago: executing program 5 (id=975): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6666, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x4a, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6666, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x4a, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x20, 0xb, 0x6, {0x6, 0x24, "271d70fe"}}, 0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0x400000b1, 0x0, 0x8}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x28, r4, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) 3.842852737s ago: executing program 3 (id=977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x1}, 0x50) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)='Y') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x150, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e2868d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x17ee4c00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x66b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xc054}, 0x20048000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) 3.317793641s ago: executing program 3 (id=978): r0 = syz_open_dev$MSR(&(0x7f0000000640), 0x8d, 0x0) lseek(r0, 0x7, 0x4) syz_usb_connect(0x3, 0x7d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cfadcb403d1bda0168790102030109026b0001000000100904630002fc3eaa000b24060001d615817b6fb6052c0000000d240f01800000008200ff010806241a0200060724148000390007241402000600122407060000090004000700bd40010004000424020009058602ff0300000009058202"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x55, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x35, 0x120, 0x8, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10cb33b6, 0xb3, 0x2f, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x7, 0xf7}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x81, 0x4, 0x8, 0x80}, 0x45, &(0x7f00000000c0)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x6e, 0x1c, 0x800, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xfd, 0x9, 0x0, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x0, 0xf00f, 0x0, [0xf, 0x0, 0x7e30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x2, 0x85, 0x8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0x7, 0x6}]}, 0x5, [{0x5a, &(0x7f0000000140)=@string={0x5a, 0x3, "1e60e5a9b5e352e4d91c719d7f1fb85bf99f02748471a2bd615b80c936591217fe71c8235a179bf28d50ad7a65687fce94357379d6278c9c0a0eda7795f9f65564a2b5032d34cd49d2042a617cdae02f91910a0de9fa97d1"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c09}}, {0x47, &(0x7f00000002c0)=@string={0x47, 0x3, "7ff220bbadd7e662f3a5adf266aa87a3f8a4c6baa6428654f6b172bbf62c4b25eeee2297fc86872e7973d8d08103bb5b5c664a72f1012cfec55eb440b978951fb8aefc7e2b"}}, {0x62, &(0x7f0000000340)=@string={0x62, 0x3, "b788108c364f730b5ccb46559ffe59ef8433697e8de0f85e0442629179e574f2483bdb693c5cb12aec0cc18ee1549729c41b97eb19699387bca7cebd13fff5fb4b49ce77c44fcbd8c00e5eabd4f9eeca5d6b87f16fbf4e9e3cf59cf1c5a9b4fa"}}]}) 3.113351938s ago: executing program 6 (id=979): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x10000010, 0x8001, 0x0, 0x5, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x329b, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x177}, 0x0, &(0x7f0000000140)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r3 = getpid() r4 = syz_open_dev$dri(&(0x7f0000000100), 0xa7, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f00000004c0)={r7, 0x1, 0x2, 0x1, &(0x7f0000000380)=[{0x4, 0xfffe, 0x2, 0x3}]}) syz_pidfd_open(r3, 0x0) io_uring_setup(0x80070c5, &(0x7f00000002c0)={0x0, 0xf370, 0x100, 0x2, 0x212}) r8 = socket(0x23, 0x6, 0xffffffff) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, 0x0) 3.028573911s ago: executing program 7 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000000000850000002300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 2.912137838s ago: executing program 7 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r6, 0x8b2d, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r8}, 0x18) socket(0x2000000000000021, 0x2, 0x10000000000002) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="00001100"/20, @ANYRES32=r9, @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.56565301s ago: executing program 3 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000440)=0x0, &(0x7f0000000880)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x3543, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001c0001002cbd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e0a0a000200aaaaaaaaaa0a00c7a9c206a34e3d0008000f0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4040000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x60}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) socket$netlink(0x10, 0x3, 0xe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="360f01cb0f01c936260fc71d0f20d86635200000000f22d86666f30f1ef8baf80c66b84d90118e66efbafc0cb000ee66b9800000c00f326635008000000f30ba6100b006ee2e0f01c90f20e06635000200000f22e0", 0x55}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg(r1, &(0x7f0000000900)={&(0x7f0000000180)=@nfc={0x27, r10, 0x4, 0x3}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000200)="999c91e8be1f5321fcab410af7aa8fd0e9880dae2beede5dd7de5aab467a8dad699f219c7729cd069d0bc13ef83a7366964e", 0x32}, {&(0x7f0000000280)="fa43f964", 0x4}, {&(0x7f00000002c0)="c3ecc9eb480c400c367e708a5ade15706705566cbfdb94ffa8b3309c7b0441c6d66c422908a525413b1f3adf2522e810e091392b35c88f740cc4ab73ead965a214ecfb0aeda9e2a2e0b1", 0x4a}, {&(0x7f0000000340)="543bdec159842557e4f9a3158a160314ec41070ed6d510b769edf4ffe75b759d4921a52a3770065703f8caf684ace780678bb6d6fda8c5dcd1552bead457585412203d84bfd2556b639016a924d570", 0x4f}], 0x5, &(0x7f0000000480)=[{0xb0, 0x116, 0x5, "7120ddbe48e51af784fd2817a94693d613f164babb6ef025932a3d5745e9527dd392f99f534e4298db2d9a7ca711381aec07e3fffa1d6bb0aacc1ed18d55b427a32d0c25fd3c202b9c9a6178b39902120cc038eb75df5cd98b190477467dee6048954cb6b58b46e2779e23cefe5a79fe3c0a624bad0fb7af876bc91290ce786afe768425716d236f875be373ee9b99783b52e9ce1531fecce4"}, {0xd0, 0x111, 0x7f, "b9ac3bf70c1a70afc874ef2cbd145891e4919e33a035adf84ddbf7c0448c139ceb015fe0992322515d08857871e8ca76aef49cf138b91e6349ed7eea17455124adc80d4c86c7d498ef8adccc0d4c4409e62739f35074f6125171a2a579d57a3898984216b05395f525a47aa8b52752d364f4c0b6aff376bbe5268680730a49fce4604857e173bb8674ff57a23ac542b419e8c8e2e85545fa38f1691c0269de06a4ba18cc98d3291046f8a9c5c66985f2d164b131df0648924f8d2c6884"}, {0x90, 0x84, 0x8, "b30b1beb2503b55e60e7aef19daa37c060e71899525e060e8cb806623f575451203efa66495b4e637f1db39efc35c482948b12c34641eff490532a38404b89e0fcee5d94620caeb649087d9905e25527b0bbfff25fb618f26e024c97f59f5f1141f7f68f275cbf905562c16da20aa2c947929927bf57970ab3868f85d5"}, {0xc8, 0xff, 0x10, "c7c1b508577470b63bcf3be3015da17fe8a781bd18a759f0b666fcb9a88ec1bc3fa76f182767bc83e9258bd51e527174788e2c31bd06f76f85dcaa3268f371d5b2ba5df11cbe4411b25fd3aefa8ed862f19da79b3854b8d511e2153f8d42f7e3b5601bbbdc7f492670e069c9a284b16a0cc8e8ae59f7af8e2526a01dcd3f852e62a0e265f2f545670589ee7e1fa209aca27f891e3727dfd1980205a1365e002bf868b02e5d29e2a6d5659d9455814b9fa0494f395ead77"}, {0x100, 0x103, 0x6, "2db65244c2cf5deb4fa629afc263428feaf53729b154812aba3bfcc202c60126b1d302beb1efdfb962f406ab8131fd78d149c8857d9164e10ad57aa826ad3cb1537378677fe2db47f768fc4d66bed86402b9c223c823392b2bfbf9f75aee851186da21f3c59fa6ccad274045bc2aadbd9f88093c49b81a8b6f9dfdbde8c91f68158064eadb69405c04c7c177b9181f9ebf07e4b9f156339b8e2be1fb3e97bf8a2b91f8102f660947b3878f14087a907cf877cb0e71756fcaea891ef1f558155fcd7f97a2d0b295b5aba61327173b698eabf7c4d8ad7cb9675d2b2944615722956b6272737d2117c3021f070a"}], 0x3d8}, 0x43158664a4105a49) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x54}}, 0x0) chroot(&(0x7f0000000080)='./file0\x00') r12 = inotify_init() inotify_add_watch(r12, &(0x7f0000000000)='.\x00', 0x400017e) 2.09196134s ago: executing program 5 (id=983): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.077201376s ago: executing program 6 (id=984): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200480) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port1\x00', 0x62, 0x10cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xee}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x8010000, 0x0, 0x9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x8, 0x7, 0xffffffff}) readv(r2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/192, 0xc0}], 0x1) readv(r5, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000a40)=0x42) close(r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.004161016s ago: executing program 4 (id=985): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x200000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=@ipv6_newroute={0x30, 0x18, 0xa01, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x10, 0xff, 0xfc, 0x0, 0xc8, 0x0, 0x3000}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x2, 0x0, 0x20008000}, 0x10) 1.549216167s ago: executing program 4 (id=986): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x81) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r2, 0x0, 0xf}, 0x18) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0xffffffffffffdffd, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r3, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x8201) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r11 = socket$kcm(0x29, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r13 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r13, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)={r13, r12}) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)={r10, r9}) close_range(r8, 0xffffffffffffffff, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.139682986s ago: executing program 5 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0xd72c49cc6db81ae4, 0x6, 0x6fe, 0xe5, 0x0, 0xfe, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xf}, @TCA_CT_MARK={0x8, 0x5, 0x60000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) 925.518013ms ago: executing program 3 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7ff) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x90) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) (async) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a911f1e1c000000000000070000000900010073797a30000000"], 0xb0}}, 0x0) 713.241329ms ago: executing program 6 (id=989): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x171) mknod(0x0, 0x6000, 0x77b) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x20007) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x29, 0x2, 0x3, "1bd9b8c535b560c5b0fedaffb7d7e75f9637fa1e632e18f548df557c7d646dc5", 0x36355d63}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0xffffffffffffffff, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0xa000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ptrace$setregset(0x4205, r5, 0x202, &(0x7f0000000180)={&(0x7f0000000280)="37e7da952b9eefa14b1f74059c314cd112ed1c3d5fd723a7e2c704c91a7207002f132981208e62ba2c86d9cc898f30cad1d566d55439ac8340253cc4bc59abd505dd7586df7b1606a698220505dc9f75e103f02db9fa2954402060611166bf337dacb1bebdf2600e366ffbd6e807cdf3443d2ebbde7e090156362583881f0bbfecc9c07ad87632f813a5d49deb3b9159b3921843d45f4f121af17e76db3aca18", 0xa0}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0}, 0x18) unshare(0x22020600) 621.952589ms ago: executing program 7 (id=990): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setgroups(0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x61) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xe9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000140)) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x45, 0x1d, 0x93, 0x10, 0x14aa, 0x301, 0x1e08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x0, 0x40, 0x40, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x8b, 0xbe, 0x86}}]}}]}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100ff8000", 0x1c) 457.412464ms ago: executing program 3 (id=991): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[], 0x9) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 128.88775ms ago: executing program 4 (id=992): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_io_uring_setup(0x4000049f, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x285, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)='./file1\x00', 0x400, 0x2000, 0x1}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000080)='1', 0x1) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random='\x00\x00\b\x00\x00`'}) r10 = creat(&(0x7f0000000300)='./file1\x00', 0xf3) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) fallocate(r11, 0x0, 0x5, 0x3) 0s ago: executing program 3 (id=993): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') write$cgroup_int(r3, &(0x7f0000000040)=0x1f13, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000040)=0x1f13, 0x12) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0xfffffff9, 0xa, 0x1, 0x3, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x3, 0x1, 0x5, 0x4, 0xe05, 0xffffffff, 0x1, 0x1a449, 0x103, 0x7fff, 0x40000089, 0x2, 0xf27, 0xfffffffb, 0x8, 0x1, 0x5, 0x58b, 0x2, 0x10000, 0xfffffff7]}) kernel console output (not intermixed with test programs): [ 192.514464][ T5811] Bluetooth: hci6: command tx timeout [ 192.590657][ T6006] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.013414][ T6006] usb 6-1: Using ep0 maxpacket: 16 [ 193.055361][ T6006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.087977][ T6006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.123592][ T6006] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 193.162542][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.268380][ T6006] usb 6-1: config 0 descriptor?? [ 193.297835][ T30] audit: type=1400 audit(1766686620.696:499): avc: denied { ioctl } for pid=8118 comm="syz.4.504" path="socket:[18403]" dev="sockfs" ino=18403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.830336][ T6006] apple 0003:05AC:0247.000F: unexpected long global item [ 193.888794][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.899600][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.977729][ T90] usb 2-1: config 0 descriptor?? [ 194.003354][ T6006] apple 0003:05AC:0247.000F: parse failed [ 194.026489][ T49] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 194.074513][ T6006] apple 0003:05AC:0247.000F: probe with driver apple failed with error -22 [ 194.094722][ T49] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 194.107353][ T6006] usb 6-1: USB disconnect, device number 2 [ 194.126963][ T49] usb 5-1: USB disconnect, device number 15 [ 194.596281][ T5811] Bluetooth: hci6: command tx timeout [ 194.927405][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.056633][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.100337][ T7894] bridge_slave_0: entered allmulticast mode [ 195.267386][ T7894] bridge_slave_0: entered promiscuous mode [ 195.296205][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.303407][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.331946][ T7894] bridge_slave_1: entered allmulticast mode [ 195.447769][ T7894] bridge_slave_1: entered promiscuous mode [ 195.942784][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.005188][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.130321][ T7944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.213313][ T30] audit: type=1400 audit(1766686623.666:500): avc: denied { kexec_image_load } for pid=8185 comm=2321202E2F66696C65300A scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 196.379223][ T7944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.705832][ T5818] Bluetooth: hci6: command tx timeout [ 196.726308][ T7963] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.992539][ T30] audit: type=1400 audit(1766686624.076:501): avc: denied { write } for pid=8248 comm="syz.5.508" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.180344][ T90] usbhid 2-1:0.0: can't add hid device: -71 [ 197.187444][ T90] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 197.302732][ T90] usb 2-1: USB disconnect, device number 22 [ 197.877884][ T7894] team0: Port device team_slave_0 added [ 197.928721][ T7894] team0: Port device team_slave_1 added [ 198.003198][ T7944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.040212][ T8276] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 198.090790][ T8280] netlink: 'syz.1.511': attribute type 13 has an invalid length. [ 198.098681][ T30] audit: type=1800 audit(1766686625.546:502): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.512" name="bus" dev="overlay" ino=501 res=0 errno=0 [ 198.177208][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.201005][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.261865][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.534403][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 198.549688][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 198.569076][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.585660][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.646264][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.662287][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.670744][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.697400][ T7944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.755759][ T5818] Bluetooth: hci0: command 0x1003 tx timeout [ 198.762673][ T5811] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.880168][ T7894] hsr_slave_0: entered promiscuous mode [ 198.918847][ T7894] hsr_slave_1: entered promiscuous mode [ 198.927720][ T7894] debugfs: 'hsr0' already exists in 'hsr' [ 198.937058][ T7894] Cannot create hsr debugfs directory [ 199.329836][ T30] audit: type=1400 audit(1766686626.786:503): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 199.379000][ T8379] fuse: Bad value for 'fd' [ 199.452124][ T30] audit: type=1400 audit(1766686626.886:504): avc: denied { watch } for pid=8385 comm="syz.1.517" path="/108/file1" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.552014][ T30] audit: type=1400 audit(1766686626.886:505): avc: denied { watch_sb watch_reads } for pid=8385 comm="syz.1.517" path="/108/file1" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.664825][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 199.717016][ T7944] bridge_slave_1: left allmulticast mode [ 199.739807][ T7944] bridge_slave_1: left promiscuous mode [ 199.748702][ T30] audit: type=1400 audit(1766686627.206:506): avc: denied { accept } for pid=8415 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 199.750076][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.924155][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 200.055845][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.085103][ T10] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 200.085107][ T30] audit: type=1400 audit(1766686627.546:507): avc: denied { create } for pid=8412 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.237039][ T7944] bridge_slave_0: left allmulticast mode [ 200.275798][ T10] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 200.285044][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.293092][ T10] usb 2-1: Product: syz [ 200.303387][ T10] usb 2-1: Manufacturer: syz [ 200.318006][ T10] usb 2-1: SerialNumber: syz [ 200.335825][ T7944] bridge_slave_0: left promiscuous mode [ 200.342820][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.725627][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 201.183882][ T8440] netlink: 'syz.4.520': attribute type 39 has an invalid length. [ 201.511499][ T5873] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 201.539014][ T30] audit: type=1400 audit(1766686628.996:508): avc: denied { accept } for pid=8437 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.077413][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.108742][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.329566][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.363444][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.517089][ T7944] bond0 (unregistering): Released all slaves [ 202.596162][ T10] usb 2-1: USB disconnect, device number 23 [ 202.668593][ T8479] netlink: 84 bytes leftover after parsing attributes in process `syz.1.526'. [ 202.945461][ T30] audit: type=1400 audit(1766686630.406:509): avc: denied { read open } for pid=8498 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.018781][ T7894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.076330][ T7894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.103421][ T7894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.137660][ T7894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.154915][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.164347][ T5950] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 203.343376][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.358892][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.396851][ T5950] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.425564][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.444906][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.478233][ T5950] usb 2-1: config 0 descriptor?? [ 203.497692][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.545579][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.552666][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.603454][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.610573][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.258965][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.467986][ T8556] can0: slcan on ttyS3. [ 204.570552][ T6006] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 204.686740][ T8559] can0 (unregistered): slcan off ttyS3. [ 204.806852][ T6006] usb 6-1: config index 0 descriptor too short (expected 65155, got 72) [ 204.819968][ T6006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.835810][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.924450][ T6006] usb 6-1: Product: syz [ 204.933576][ T6006] usb 6-1: Manufacturer: syz [ 204.946060][ T6006] usb 6-1: SerialNumber: syz [ 204.968831][ T6006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.989036][ T49] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.330440][ T7894] veth0_vlan: entered promiscuous mode [ 205.526826][ T30] audit: type=1400 audit(1766686632.986:510): avc: denied { accept } for pid=8587 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 205.559735][ T7894] veth1_vlan: entered promiscuous mode [ 205.667824][ T7894] veth0_macvtap: entered promiscuous mode [ 205.696315][ T7894] veth1_macvtap: entered promiscuous mode [ 205.702232][ T8607] xt_cgroup: xt_cgroup: no path or classid specified [ 205.770602][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.810954][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.851501][ T7954] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.863962][ T7954] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.894592][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 205.907020][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 205.917676][ T7954] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.932472][ T5950] usb 2-1: USB disconnect, device number 24 [ 205.954616][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.965197][ T7954] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.124811][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 206.136798][ T10] usb 5-1: config 0 has an invalid interface number: 153 but max is 1 [ 206.160284][ T10] usb 5-1: config 0 has no interface number 0 [ 206.174010][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=28.3e [ 206.194970][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.215660][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.243143][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.274831][ T49] usb 6-1: Service connection timeout for: 256 [ 206.292169][ T7964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.303205][ T49] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 206.326410][ T7964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.327452][ T10] usb 5-1: config 0 descriptor?? [ 206.376520][ T49] ath9k_htc: Failed to initialize the device [ 206.421371][ T49] usb 6-1: ath9k_htc: USB layer deinitialized [ 206.628268][ T30] audit: type=1400 audit(1766686634.066:511): avc: denied { read } for pid=8656 comm="syz.6.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 207.698745][ T5917] usb 5-1: USB disconnect, device number 17 [ 207.879777][ T6006] usb 6-1: USB disconnect, device number 3 [ 208.104600][ T30] audit: type=1400 audit(1766686635.566:512): avc: denied { setopt } for pid=8644 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.886623][ T6006] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 209.655922][ T6006] usb 2-1: device descriptor read/all, error -71 [ 210.261039][ T8721] netlink: 'syz.5.545': attribute type 10 has an invalid length. [ 210.275123][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.285320][ T8721] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.304681][ T8721] netlink: 'syz.5.545': attribute type 10 has an invalid length. [ 210.312734][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.545'. [ 210.322316][ T8721] batadv0: entered promiscuous mode [ 210.327571][ T8721] batadv0: entered allmulticast mode [ 210.395073][ T8721] bond0: (slave batadv0): Releasing backup interface [ 210.497349][ T8721] bridge0: port 3(batadv0) entered blocking state [ 210.514807][ T8725] kAFS: unable to lookup cell '({^@' [ 210.645555][ T8721] bridge0: port 3(batadv0) entered disabled state [ 210.761421][ T7195] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 210.770857][ T7195] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 212.154123][ T6006] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 212.301460][ T30] audit: type=1400 audit(1766686639.756:513): avc: denied { create } for pid=8753 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 212.353495][ T6006] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.405503][ T6006] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 212.697106][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.718626][ T6006] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 213.551078][ T8741] macvtap2: entered promiscuous mode [ 213.574269][ T8741] macvtap2: entered allmulticast mode [ 213.601903][ T8741] veth1_vlan: entered allmulticast mode [ 214.128898][ T6006] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 214.182568][ T6006] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 214.198163][ T6006] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 214.211588][ T6006] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 214.294411][ T6006] usb 5-1: USB disconnect, device number 18 [ 215.174161][ T5873] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 215.309205][ T6006] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.334163][ T5873] usb 2-1: device descriptor read/64, error -71 [ 215.507422][ T6006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.537385][ T6006] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.584189][ T5873] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 215.592136][ T6006] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 215.611255][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.631509][ T6006] usb 5-1: config 0 descriptor?? [ 215.748035][ T5873] usb 2-1: device descriptor read/64, error -71 [ 215.992701][ T5873] usb usb2-port1: attempt power cycle [ 216.054165][ T5880] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 216.241367][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.561'. [ 216.269381][ T5880] usb 7-1: config 2 has an invalid interface number: 219 but max is 0 [ 216.284137][ T5880] usb 7-1: config 2 has no interface number 0 [ 216.290254][ T5880] usb 7-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 216.344143][ T5873] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 216.464114][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.490548][ T5880] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 216.509288][ T5873] usb 2-1: device descriptor read/8, error -71 [ 216.697569][ T8869] netlink: 48 bytes leftover after parsing attributes in process `syz.5.566'. [ 216.775207][ T5880] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 216.783224][ T5880] pac7311 7-1:2.219: probe with driver pac7311 failed with error -71 [ 216.820457][ T5880] usb 7-1: USB disconnect, device number 2 [ 216.836776][ T5873] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 216.885395][ T5873] usb 2-1: device descriptor read/8, error -71 [ 216.956764][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.567'. [ 217.021872][ T5873] usb usb2-port1: unable to enumerate USB device [ 218.684495][ T5873] usb 5-1: USB disconnect, device number 19 [ 218.898003][ T30] audit: type=1400 audit(1766686646.356:514): avc: denied { mount } for pid=8936 comm="syz.3.575" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 218.959876][ T30] audit: type=1400 audit(1766686646.396:515): avc: denied { create } for pid=8938 comm="syz.5.574" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.164191][ T30] audit: type=1400 audit(1766686646.396:516): avc: denied { read } for pid=8938 comm="syz.5.574" name="file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.375897][ T30] audit: type=1400 audit(1766686646.396:517): avc: denied { open } for pid=8938 comm="syz.5.574" path="/21/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.399490][ T30] audit: type=1400 audit(1766686646.396:518): avc: denied { ioctl } for pid=8938 comm="syz.5.574" path="/21/file0" dev="tmpfs" ino=130 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.443460][ T30] audit: type=1400 audit(1766686646.436:519): avc: denied { unlink } for pid=7790 comm="syz-executor" name="file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.497666][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 219.569024][ T30] audit: type=1400 audit(1766686646.516:520): avc: denied { getopt } for pid=8936 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.759015][ T30] audit: type=1400 audit(1766686646.606:521): avc: denied { remount } for pid=8936 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 219.780700][ T30] audit: type=1400 audit(1766686646.936:522): avc: denied { open } for pid=8946 comm="syz.5.577" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 219.970907][ T30] audit: type=1400 audit(1766686646.936:523): avc: denied { ioctl } for pid=8946 comm="syz.5.577" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 221.153715][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.178183][ T8981] bond0: (slave rose0): Enslaving as an active interface with an up link [ 221.205896][ T8987] bond0: (slave rose0): Releasing backup interface [ 221.688975][ T117] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.964131][ T117] usb 6-1: Using ep0 maxpacket: 8 [ 222.224234][ T117] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 222.224618][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 222.589845][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.616535][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.646177][ T117] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 222.653826][ T117] usb 6-1: can't read configurations, error -61 [ 222.903494][ T117] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 223.406926][ T117] usb 6-1: Using ep0 maxpacket: 8 [ 223.421922][ T117] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 223.450761][ T117] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 223.471968][ T117] usb 6-1: can't read configurations, error -61 [ 223.493790][ T117] usb usb6-port1: attempt power cycle [ 223.509431][ T9033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.541634][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.554807][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.645840][ T9026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.924376][ T117] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 224.201213][ T117] usb 6-1: device descriptor read/8, error -71 [ 225.477164][ T9075] macvtap1: entered allmulticast mode [ 225.482573][ T9075] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 225.500204][ T9075] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 225.690954][ T9086] binder: BINDER_SET_CONTEXT_MGR already set [ 225.697230][ T9086] binder: 9085:9086 ioctl 4018620d 200000004a80 returned -16 [ 225.706273][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 225.706295][ T30] audit: type=1400 audit(1766686653.146:538): avc: denied { ioctl } for pid=9085 comm="syz.5.602" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 225.934782][ T30] audit: type=1400 audit(1766686653.146:539): avc: denied { set_context_mgr } for pid=9085 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 226.295579][ T30] audit: type=1400 audit(1766686653.146:540): avc: denied { map } for pid=9085 comm="syz.5.602" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 226.529276][ T9104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.539435][ T30] audit: type=1400 audit(1766686653.436:541): avc: denied { ioctl } for pid=9091 comm="syz.6.603" path="socket:[20882]" dev="sockfs" ino=20882 ioctlcmd=0x4111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 227.304143][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 227.509559][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 227.548748][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.616311][ T10] usb 7-1: Product: syz [ 227.644232][ T10] usb 7-1: Manufacturer: syz [ 227.648854][ T10] usb 7-1: SerialNumber: syz [ 227.811844][ T9168] Cannot find add_set index 0 as target [ 227.904839][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.609'. [ 228.084374][ T117] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 228.487730][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 228.503102][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 228.520988][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 228.550043][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 228.578728][ T10] usb 7-1: USB disconnect, device number 3 [ 228.679867][ T9226] netlink: 'syz.4.614': attribute type 16 has an invalid length. [ 228.702276][ T9226] usb usb1: usbfs: process 9226 (syz.4.614) did not claim interface 0 before use [ 229.321345][ T9249] FAULT_INJECTION: forcing a failure. [ 229.321345][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 229.391148][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.5.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.391177][ T9249] Tainted: [L]=SOFTLOCKUP [ 229.391183][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.391193][ T9249] Call Trace: [ 229.391200][ T9249] [ 229.391206][ T9249] dump_stack_lvl+0x16c/0x1f0 [ 229.391233][ T9249] should_fail_ex+0x512/0x640 [ 229.391259][ T9249] ? kmem_cache_alloc_noprof+0x62/0x770 [ 229.391280][ T9249] should_failslab+0xc2/0x120 [ 229.391302][ T9249] kmem_cache_alloc_noprof+0x83/0x770 [ 229.391319][ T9249] ? __anon_vma_prepare+0xae/0x5e0 [ 229.391342][ T9249] ? __anon_vma_prepare+0xae/0x5e0 [ 229.391359][ T9249] __anon_vma_prepare+0xae/0x5e0 [ 229.391375][ T9249] ? __pfx___pte_alloc+0x10/0x10 [ 229.391392][ T9249] __vmf_anon_prepare+0x11c/0x240 [ 229.391417][ T9249] do_anonymous_page+0x59b/0x2190 [ 229.391442][ T9249] ? do_raw_spin_unlock+0x172/0x230 [ 229.391467][ T9249] ? __pmd_alloc+0x6aa/0x9c0 [ 229.391484][ T9249] __handle_mm_fault+0x1ecf/0x2bb0 [ 229.391505][ T9249] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.391530][ T9249] ? find_vma+0xbf/0x140 [ 229.391548][ T9249] ? __pfx_find_vma+0x10/0x10 [ 229.391571][ T9249] handle_mm_fault+0x3fe/0xad0 [ 229.391600][ T9249] do_user_addr_fault+0x7a6/0x1370 [ 229.391621][ T9249] ? rcu_is_watching+0x12/0xc0 [ 229.391633][ T9249] exc_page_fault+0x64/0xc0 [ 229.391647][ T9249] asm_exc_page_fault+0x26/0x30 [ 229.391659][ T9249] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 229.391677][ T9249] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 229.391693][ T9249] RSP: 0018:ffffc9000f367cd0 EFLAGS: 00050202 [ 229.391707][ T9249] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 229.391718][ T9249] RDX: fffff52001e6cfae RSI: ffffc9000f367d48 RDI: 0000200000000180 [ 229.391728][ T9249] RBP: 0000200000000180 R08: 0000000000000000 R09: fffff52001e6cfad [ 229.391738][ T9249] R10: ffffc9000f367d6f R11: ffff88807d342ff0 R12: ffffc9000f367d48 [ 229.391748][ T9249] R13: 00002000000001a8 R14: 00007ffffffff000 R15: 0000000000000000 [ 229.391766][ T9249] _copy_to_user+0xbb/0xd0 [ 229.391789][ T9249] semctl_info.constprop.0+0x338/0x450 [ 229.391803][ T9249] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 229.391817][ T9249] ? __mutex_unlock_slowpath+0x161/0x790 [ 229.391845][ T9249] ksys_semctl.constprop.0+0x14a/0x2f0 [ 229.391864][ T9249] ? __fget_files+0x20e/0x3c0 [ 229.391887][ T9249] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 229.391920][ T9249] do_syscall_64+0xcd/0xf80 [ 229.391934][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.391945][ T9249] RIP: 0033:0x7f0dcb58f749 [ 229.391954][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.391964][ T9249] RSP: 002b:00007f0dcc490038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 229.391976][ T9249] RAX: ffffffffffffffda RBX: 00007f0dcb7e5fa0 RCX: 00007f0dcb58f749 [ 229.391987][ T9249] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 229.391997][ T9249] RBP: 00007f0dcc490090 R08: 0000000000000000 R09: 0000000000000000 [ 229.392006][ T9249] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 229.392015][ T9249] R13: 00007f0dcb7e6038 R14: 00007f0dcb7e5fa0 R15: 00007fffd57857e8 [ 229.392039][ T9249] [ 230.146553][ T30] audit: type=1400 audit(1766686657.606:542): avc: denied { getopt } for pid=9266 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.154792][ T9273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9273 comm=syz.5.621 [ 230.195404][ T5820] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 230.294894][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'. [ 230.344253][ T5820] usb 7-1: device descriptor read/64, error -71 [ 230.456905][ T9287] input: syz0 as /devices/virtual/input/input21 [ 230.580434][ T9296] netlink: 116 bytes leftover after parsing attributes in process `syz.3.626'. [ 230.613911][ T9296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.626'. [ 230.624298][ T5820] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 230.785688][ T5820] usb 7-1: device descriptor read/64, error -71 [ 231.062612][ T5820] usb usb7-port1: attempt power cycle [ 231.081863][ T9306] FAULT_INJECTION: forcing a failure. [ 231.081863][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 231.114278][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.4.629 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.114313][ T9306] Tainted: [L]=SOFTLOCKUP [ 231.114319][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.114330][ T9306] Call Trace: [ 231.114336][ T9306] [ 231.114342][ T9306] dump_stack_lvl+0x16c/0x1f0 [ 231.114371][ T9306] should_fail_ex+0x512/0x640 [ 231.114397][ T9306] ? kmem_cache_alloc_noprof+0x62/0x770 [ 231.114418][ T9306] should_failslab+0xc2/0x120 [ 231.114442][ T9306] kmem_cache_alloc_noprof+0x83/0x770 [ 231.114460][ T9306] ? __anon_vma_prepare+0x344/0x5e0 [ 231.114492][ T9306] ? __anon_vma_prepare+0x344/0x5e0 [ 231.114517][ T9306] __anon_vma_prepare+0x344/0x5e0 [ 231.114542][ T9306] ? __pfx___pte_alloc+0x10/0x10 [ 231.114566][ T9306] __vmf_anon_prepare+0x11c/0x240 [ 231.114590][ T9306] do_anonymous_page+0x59b/0x2190 [ 231.114617][ T9306] ? do_raw_spin_unlock+0x172/0x230 [ 231.114643][ T9306] ? __pmd_alloc+0x6aa/0x9c0 [ 231.114669][ T9306] __handle_mm_fault+0x1ecf/0x2bb0 [ 231.114701][ T9306] ? __pfx___handle_mm_fault+0x10/0x10 [ 231.114741][ T9306] ? find_vma+0xbf/0x140 [ 231.114767][ T9306] ? __pfx_find_vma+0x10/0x10 [ 231.114790][ T9306] handle_mm_fault+0x3fe/0xad0 [ 231.114819][ T9306] do_user_addr_fault+0x7a6/0x1370 [ 231.114843][ T9306] ? rcu_is_watching+0x12/0xc0 [ 231.114856][ T9306] exc_page_fault+0x64/0xc0 [ 231.114871][ T9306] asm_exc_page_fault+0x26/0x30 [ 231.114882][ T9306] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 231.114900][ T9306] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 231.114917][ T9306] RSP: 0018:ffffc900103efcd0 EFLAGS: 00050202 [ 231.114932][ T9306] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 231.114943][ T9306] RDX: fffff5200207dfae RSI: ffffc900103efd48 RDI: 0000200000000180 [ 231.114953][ T9306] RBP: 0000200000000180 R08: 0000000000000000 R09: fffff5200207dfad [ 231.114963][ T9306] R10: ffffc900103efd6f R11: ffff8880569b2ff0 R12: ffffc900103efd48 [ 231.114974][ T9306] R13: 00002000000001a8 R14: 00007ffffffff000 R15: 0000000000000000 [ 231.114994][ T9306] _copy_to_user+0xbb/0xd0 [ 231.115014][ T9306] semctl_info.constprop.0+0x338/0x450 [ 231.115028][ T9306] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 231.115042][ T9306] ? __mutex_unlock_slowpath+0x161/0x790 [ 231.115068][ T9306] ksys_semctl.constprop.0+0x14a/0x2f0 [ 231.115092][ T9306] ? __fget_files+0x20e/0x3c0 [ 231.115116][ T9306] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 231.115145][ T9306] do_syscall_64+0xcd/0xf80 [ 231.115160][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.115170][ T9306] RIP: 0033:0x7fc3db58f749 [ 231.115179][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.115190][ T9306] RSP: 002b:00007fc3dc3f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 231.115202][ T9306] RAX: ffffffffffffffda RBX: 00007fc3db7e5fa0 RCX: 00007fc3db58f749 [ 231.115212][ T9306] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 231.115222][ T9306] RBP: 00007fc3dc3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 231.115232][ T9306] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 231.115243][ T9306] R13: 00007fc3db7e6038 R14: 00007fc3db7e5fa0 R15: 00007ffef7e5d4d8 [ 231.115267][ T9306] [ 231.734282][ T5820] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 231.754864][ T5820] usb 7-1: device descriptor read/8, error -71 [ 231.804129][ T5880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 231.894147][ T6006] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.954177][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 231.960959][ T5880] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 231.972588][ T5880] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 231.986557][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.993175][ T5880] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 232.002307][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.004145][ T5820] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 232.019899][ T5880] usb 5-1: config 0 descriptor?? [ 232.027046][ T6006] usb 6-1: device descriptor read/64, error -71 [ 232.035662][ T5820] usb 7-1: device descriptor read/8, error -71 [ 232.144853][ T5820] usb usb7-port1: unable to enumerate USB device [ 232.274251][ T6006] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 232.354889][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.385739][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.405374][ T6006] usb 6-1: device descriptor read/64, error -71 [ 232.515528][ T6006] usb usb6-port1: attempt power cycle [ 232.639073][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 232.652532][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.672432][ T5880] usb 5-1: USB disconnect, device number 21 [ 232.784145][ T5820] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 232.894120][ T6006] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 232.914656][ T6006] usb 6-1: device descriptor read/8, error -71 [ 232.956557][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.967502][ T5820] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.976563][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.986831][ T5820] usb 7-1: config 0 descriptor?? [ 233.157574][ T6006] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 233.206833][ T6006] usb 6-1: device descriptor read/8, error -71 [ 233.269065][ T30] audit: type=1400 audit(1766686660.726:543): avc: denied { bind } for pid=9366 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.290261][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 233.300906][ T9370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9370 comm=syz.3.638 [ 233.315821][ T6006] usb usb6-port1: unable to enumerate USB device [ 233.345069][ T9373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9373 comm=syz.4.636 [ 233.397129][ T5820] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 233.416335][ T5820] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0010/input/input22 [ 233.525614][ T5820] keytouch 0003:0926:3333.0010: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 233.606483][ T5880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.637253][ T5820] usb 7-1: USB disconnect, device number 8 [ 233.784586][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 233.993893][ T5880] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 234.100645][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.110815][ T5880] usb 5-1: config 0 descriptor?? [ 234.337501][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 234.374943][ T5880] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 234.408428][ T9439] FAULT_INJECTION: forcing a failure. [ 234.408428][ T9439] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.425809][ T30] audit: type=1400 audit(1766686661.886:544): avc: denied { firmware_load } for pid=5880 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 234.446351][ T5880] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 234.497294][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.6.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.497325][ T9439] Tainted: [L]=SOFTLOCKUP [ 234.497332][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.497342][ T9439] Call Trace: [ 234.497349][ T9439] [ 234.497356][ T9439] dump_stack_lvl+0x16c/0x1f0 [ 234.497387][ T9439] should_fail_ex+0x512/0x640 [ 234.497417][ T9439] should_fail_alloc_page+0xe7/0x130 [ 234.497443][ T9439] prepare_alloc_pages+0x401/0x670 [ 234.497469][ T9439] ? stack_trace_save+0x8e/0xc0 [ 234.497492][ T9439] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 234.497511][ T9439] ? kasan_save_stack+0x33/0x60 [ 234.497531][ T9439] ? kasan_save_track+0x14/0x30 [ 234.497555][ T9439] ? kasan_save_stack+0x42/0x60 [ 234.497578][ T9439] ? __lock_acquire+0x436/0x2890 [ 234.497601][ T9439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.497629][ T9439] ? __lock_acquire+0x436/0x2890 [ 234.497654][ T9439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.497677][ T9439] ? policy_nodemask+0xea/0x4e0 [ 234.497703][ T9439] alloc_pages_mpol+0x1fb/0x550 [ 234.497728][ T9439] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.497754][ T9439] ? __anon_vma_prepare+0x2db/0x5e0 [ 234.497791][ T9439] folio_alloc_mpol_noprof+0x36/0x2f0 [ 234.497820][ T9439] vma_alloc_folio_noprof+0xed/0x1e0 [ 234.497847][ T9439] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 234.497872][ T9439] ? __anon_vma_prepare+0x2e2/0x5e0 [ 234.497909][ T9439] do_anonymous_page+0xc81/0x2190 [ 234.497947][ T9439] __handle_mm_fault+0x1ecf/0x2bb0 [ 234.497983][ T9439] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.498025][ T9439] ? find_vma+0xbf/0x140 [ 234.498045][ T9439] ? __pfx_find_vma+0x10/0x10 [ 234.498069][ T9439] handle_mm_fault+0x3fe/0xad0 [ 234.498101][ T9439] do_user_addr_fault+0x7a6/0x1370 [ 234.498127][ T9439] ? rcu_is_watching+0x12/0xc0 [ 234.498147][ T9439] exc_page_fault+0x64/0xc0 [ 234.498169][ T9439] asm_exc_page_fault+0x26/0x30 [ 234.498186][ T9439] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 234.498214][ T9439] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 234.498231][ T9439] RSP: 0018:ffffc9000eae7cd0 EFLAGS: 00050202 [ 234.498247][ T9439] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 234.498258][ T9439] RDX: fffff52001d5cfae RSI: ffffc9000eae7d48 RDI: 0000200000000180 [ 234.498270][ T9439] RBP: 0000200000000180 R08: 0000000000000000 R09: fffff52001d5cfad [ 234.498281][ T9439] R10: ffffc9000eae7d6f R11: ffff88803f0bd4b0 R12: ffffc9000eae7d48 [ 234.498292][ T9439] R13: 00002000000001a8 R14: 00007ffffffff000 R15: 0000000000000000 [ 234.498317][ T9439] _copy_to_user+0xbb/0xd0 [ 234.498346][ T9439] semctl_info.constprop.0+0x338/0x450 [ 234.498367][ T9439] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 234.498392][ T9439] ? __mutex_unlock_slowpath+0x161/0x790 [ 234.498422][ T9439] ksys_semctl.constprop.0+0x14a/0x2f0 [ 234.498443][ T9439] ? __fget_files+0x20e/0x3c0 [ 234.498468][ T9439] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 234.498509][ T9439] do_syscall_64+0xcd/0xf80 [ 234.498534][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.498552][ T9439] RIP: 0033:0x7f28e218f749 [ 234.498566][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.498582][ T9439] RSP: 002b:00007f28e3108038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 234.498598][ T9439] RAX: ffffffffffffffda RBX: 00007f28e23e5fa0 RCX: 00007f28e218f749 [ 234.498609][ T9439] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 234.498619][ T9439] RBP: 00007f28e3108090 R08: 0000000000000000 R09: 0000000000000000 [ 234.498629][ T9439] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 234.498640][ T9439] R13: 00007f28e23e6038 R14: 00007f28e23e5fa0 R15: 00007ffeed8f35d8 [ 234.498665][ T9439] [ 234.534484][ T9368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9368 comm=syz.4.636 [ 234.955772][ T5811] Bluetooth: hci6: link tx timeout [ 234.961388][ T5811] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 234.975964][ T30] audit: type=1400 audit(1766686662.436:545): avc: denied { setopt } for pid=9456 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.068365][ T9461] netlink: 14 bytes leftover after parsing attributes in process `syz.5.645'. [ 235.287306][ T7051] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 235.404164][ T5950] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 235.564103][ T5950] usb 7-1: Using ep0 maxpacket: 16 [ 235.581707][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.621431][ T5950] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.633439][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.661395][ T5950] usb 7-1: Product: syz [ 235.665951][ T5950] usb 7-1: Manufacturer: syz [ 235.670601][ T5950] usb 7-1: SerialNumber: syz [ 235.699547][ T5950] usb 7-1: config 0 descriptor?? [ 235.764680][ T5950] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.774473][ T5950] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 236.057294][ T5950] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 236.200993][ T5950] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 236.232529][ T5950] em28xx 7-1:0.0: board has no eeprom [ 236.232940][ T30] audit: type=1400 audit(1766686663.686:546): avc: denied { create } for pid=9506 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.312752][ T30] audit: type=1400 audit(1766686663.686:547): avc: denied { setopt } for pid=9506 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.324154][ T5950] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 236.369908][ T5950] em28xx 7-1:0.0: dvb set to bulk mode. [ 236.375633][ T30] audit: type=1400 audit(1766686663.686:548): avc: denied { read } for pid=9506 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.385323][ T5820] em28xx 7-1:0.0: Binding DVB extension [ 236.580265][ T5950] usb 7-1: USB disconnect, device number 9 [ 236.745945][ T30] audit: type=1400 audit(1766686663.686:549): avc: denied { write } for pid=9506 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.796870][ T5950] em28xx 7-1:0.0: Disconnecting em28xx [ 236.846377][ T30] audit: type=1400 audit(1766686663.736:550): avc: denied { create } for pid=9506 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 236.894605][ T30] audit: type=1400 audit(1766686663.736:551): avc: denied { ioctl } for pid=9506 comm="syz.6.649" path="socket:[21933]" dev="sockfs" ino=21933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 236.922301][ T5820] em28xx 7-1:0.0: Registering input extension [ 236.954624][ T5950] em28xx 7-1:0.0: Closing input extension [ 236.995512][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 237.022551][ T5950] em28xx 7-1:0.0: Freeing device [ 238.101362][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.652'. [ 238.110635][ T9566] netlink: 'syz.5.652': attribute type 11 has an invalid length. [ 238.171052][ T9566] vxlan0: entered promiscuous mode [ 238.193626][ T7954] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.223284][ T7954] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.259543][ T7954] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.296637][ T7954] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.840965][ T9583] FAULT_INJECTION: forcing a failure. [ 238.840965][ T9583] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 238.880143][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.4.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.880173][ T9583] Tainted: [L]=SOFTLOCKUP [ 238.880179][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.880188][ T9583] Call Trace: [ 238.880193][ T9583] [ 238.880199][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 238.880227][ T9583] should_fail_ex+0x512/0x640 [ 238.880257][ T9583] _copy_to_user+0x32/0xd0 [ 238.880285][ T9583] simple_read_from_buffer+0xcb/0x170 [ 238.880311][ T9583] proc_fail_nth_read+0x197/0x240 [ 238.880330][ T9583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.880350][ T9583] ? rw_verify_area+0xcf/0x6c0 [ 238.880370][ T9583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.880388][ T9583] vfs_read+0x1e4/0xcf0 [ 238.880411][ T9583] ? __pfx___mutex_lock+0x10/0x10 [ 238.880437][ T9583] ? __pfx_vfs_read+0x10/0x10 [ 238.880465][ T9583] ? __fget_files+0x20e/0x3c0 [ 238.880497][ T9583] ksys_read+0x12a/0x250 [ 238.880517][ T9583] ? __pfx_ksys_read+0x10/0x10 [ 238.880546][ T9583] do_syscall_64+0xcd/0xf80 [ 238.880571][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.880589][ T9583] RIP: 0033:0x7fc3db58e15c [ 238.880604][ T9583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.880621][ T9583] RSP: 002b:00007fc3dc3f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.880639][ T9583] RAX: ffffffffffffffda RBX: 00007fc3db7e5fa0 RCX: 00007fc3db58e15c [ 238.880651][ T9583] RDX: 000000000000000f RSI: 00007fc3dc3f80a0 RDI: 0000000000000003 [ 238.880662][ T9583] RBP: 00007fc3dc3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 238.880673][ T9583] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 238.880683][ T9583] R13: 00007fc3db7e6038 R14: 00007fc3db7e5fa0 R15: 00007ffef7e5d4d8 [ 238.880708][ T9583] [ 239.307115][ T9603] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 239.384934][ T6169] IPVS: starting estimator thread 0... [ 239.432835][ T9603] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 239.534190][ T9608] IPVS: using max 46 ests per chain, 110400 per kthread [ 240.605023][ T6169] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 240.769047][ T6169] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.791355][ T6169] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 240.811609][ T6169] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 240.851330][ T6169] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 240.900153][ T6169] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 240.923979][ T6169] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 240.961099][ T6169] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.981825][ T6169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.010979][ T6169] usb 7-1: SerialNumber: syz [ 241.028752][ T9633] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.036830][ T9633] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.057112][ T6169] rndis_host 7-1:1.0: probe with driver rndis_host failed with error -22 [ 241.270838][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.285737][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.357108][ T6169] usb 7-1: USB disconnect, device number 10 [ 241.719318][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.728853][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.738168][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.749935][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.761893][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.892829][ T7051] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 241.950131][ T7051] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 242.078854][ T9748] fido_id[9748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.189409][ T9684] chnl_net:caif_netlink_parms(): no params data found [ 242.251846][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.300306][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.414423][ T9813] netlink: 44 bytes leftover after parsing attributes in process `syz.5.667'. [ 242.430299][ T30] audit: type=1400 audit(1766686669.886:552): avc: denied { getopt } for pid=9839 comm="syz.6.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.475556][ T9813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.524473][ T6006] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.658229][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.671276][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.690357][ T9684] bridge_slave_0: entered allmulticast mode [ 242.812948][ T9684] bridge_slave_0: entered promiscuous mode [ 242.821747][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.828958][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.836229][ T9684] bridge_slave_1: entered allmulticast mode [ 242.844011][ T9684] bridge_slave_1: entered promiscuous mode [ 242.868543][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.908714][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.994209][ T30] audit: type=1400 audit(1766686670.416:553): avc: denied { append } for pid=9884 comm="syz.5.673" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.112718][ T9684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.151199][ T9684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.441813][ T7051] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 243.794949][ T5818] Bluetooth: hci0: command tx timeout [ 243.796312][ T9684] team0: Port device team_slave_0 added [ 243.816475][ T9684] team0: Port device team_slave_1 added [ 243.877108][ T7051] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.895758][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.896445][ T7051] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.908115][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.911655][ T7051] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 244.273588][ T9684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.286416][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.293353][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.320161][ T7051] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.320954][ T9684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.338057][ T7051] usb 7-1: Product: syz [ 244.347936][ T7051] usb 7-1: Manufacturer: syz [ 244.361420][ T7051] usb 7-1: SerialNumber: syz [ 244.372100][ T7051] usb 7-1: config 0 descriptor?? [ 244.384798][ T9684] hsr_slave_0: entered promiscuous mode [ 244.390994][ T9684] hsr_slave_1: entered promiscuous mode [ 244.398873][ T9684] debugfs: 'hsr0' already exists in 'hsr' [ 244.404785][ T9684] Cannot create hsr debugfs directory [ 244.412659][ T30] audit: type=1400 audit(1766686671.866:554): avc: denied { map } for pid=9981 comm="syz.5.677" path="socket:[22262]" dev="sockfs" ino=22262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 244.575223][ T9684] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.586467][ T9684] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.596341][ T9684] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.610038][ T9684] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.717756][ T9684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.775192][ T9684] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.808641][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.815820][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.470286][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.478924][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.516646][ T7051] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 245.536860][ T7051] imon 7-1:0.0: unable to initialize intf0, err -19 [ 245.543529][ T7051] imon:imon_probe: failed to initialize context! [ 245.549928][ T7051] imon 7-1:0.0: unable to register, err -19 [ 245.576952][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.584197][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.608179][ T7051] usb 7-1: USB disconnect, device number 11 [ 245.655682][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.665399][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.874352][ T5818] Bluetooth: hci0: command tx timeout [ 246.085600][ T9684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.682403][T10116] Bluetooth: MGMT ver 1.23 [ 246.924512][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 247.177022][T10142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10142 comm=syz.3.684 [ 247.841966][ T9684] veth0_vlan: entered promiscuous mode [ 247.865960][ T9684] veth1_vlan: entered promiscuous mode [ 247.915367][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.951973][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.970236][ T5818] Bluetooth: hci0: command tx timeout [ 247.990024][ T9684] veth0_macvtap: entered promiscuous mode [ 248.001103][ T9684] veth1_macvtap: entered promiscuous mode [ 248.024664][T10166] SELinux: Context ? is not valid (left unmapped). [ 248.057960][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.093340][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.151975][ T7941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.196139][ T7941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.228761][ T7941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.273701][ T7941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.502075][ T7941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.539068][ T7941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.654403][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.662323][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.914189][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 249.134148][ T6006] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 249.169226][T10219] binder: 10218:10219 ioctl c018620c 200000000000 returned -1 [ 249.270134][T10219] binder: 10218:10219 ioctl c0306201 200000000640 returned -14 [ 249.315500][ T6006] usb 8-1: Using ep0 maxpacket: 16 [ 249.353083][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.573838][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.624660][ T6006] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.645546][ T6006] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.655361][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.667047][ T6006] usb 8-1: config 0 descriptor?? [ 249.837085][T10231] netlink: 277 bytes leftover after parsing attributes in process `syz.5.690'. [ 250.044251][ T5818] Bluetooth: hci0: command tx timeout [ 250.074228][ T6169] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 250.117951][ T6006] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 250.269358][ T6169] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.320109][ T6169] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.427019][ T6169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.560460][ T6169] usb 7-1: config 0 descriptor?? [ 250.681173][ T6169] pwc: Askey VC010 type 2 USB webcam detected. [ 250.957209][ T6006] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 250.958322][ T6006] microsoft 0003:045E:07DA.0012: report is too long [ 250.958348][ T6006] microsoft 0003:045E:07DA.0012: item 0 4 0 8 parsing failed [ 250.959727][ T6006] microsoft 0003:045E:07DA.0012: parse failed [ 250.959827][ T6006] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 250.986784][ T6006] usb 8-1: USB disconnect, device number 2 [ 251.065329][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 251.172070][ T30] audit: type=1400 audit(1766686678.626:555): avc: denied { create } for pid=10230 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.230399][ T30] audit: type=1400 audit(1766686678.656:556): avc: denied { bind } for pid=10230 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.392127][T10271] netlink: 'syz.4.701': attribute type 39 has an invalid length. [ 251.562027][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.582364][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.609077][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.634957][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.994313][ T90] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 252.018009][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 252.089172][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 252.140288][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 252.161343][ T90] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 252.175738][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.250625][ T90] usb 6-1: config 0 descriptor?? [ 252.527774][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 252.601219][ T30] audit: type=1400 audit(1766686680.056:557): avc: denied { mounton } for pid=10311 comm="syz.7.708" path="/5/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.643330][ T30] audit: type=1400 audit(1766686680.096:558): avc: denied { unmount } for pid=9684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 252.743073][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 252.985716][ T30] audit: type=1400 audit(1766686680.436:559): avc: denied { connect } for pid=10314 comm="syz.7.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.043696][ T90] usb 6-1: Cannot read MAC address [ 253.059987][ T90] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 253.107378][ T90] usb 6-1: USB disconnect, device number 14 [ 253.126781][ T6169] pwc: send_video_command error -71 [ 253.141887][ T6169] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 253.152137][ T6169] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 253.178297][ T6169] usb 7-1: USB disconnect, device number 12 [ 253.312207][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 253.574188][ T6169] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 253.804177][ T6169] usb 7-1: Using ep0 maxpacket: 16 [ 253.810947][ T6169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.821961][ T6169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.833724][ T6169] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.848453][ T6169] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.860816][ T6169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.871857][ T6169] usb 7-1: config 0 descriptor?? [ 254.290580][ T6169] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 254.300675][ T6169] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 254.310445][ T6169] microsoft 0003:045E:07DA.0013: report is too long [ 254.317208][ T6169] microsoft 0003:045E:07DA.0013: item 0 4 0 8 parsing failed [ 254.326185][ T6169] microsoft 0003:045E:07DA.0013: parse failed [ 254.333020][ T6169] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 254.408741][ T30] audit: type=1400 audit(1766686681.866:560): avc: denied { create } for pid=10355 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 254.413068][T10362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.612915][ T6006] usb 7-1: USB disconnect, device number 13 [ 254.875143][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.903441][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.247625][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.253958][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.467263][ T6169] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.517478][ T30] audit: type=1400 audit(1766686682.976:561): avc: denied { bind } for pid=10409 comm="syz.3.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.736918][ T6169] usb 6-1: Using ep0 maxpacket: 32 [ 255.744805][ T6169] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 255.764095][ T6169] usb 6-1: config 0 has no interface number 0 [ 255.804566][ T6169] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 255.813720][ T6169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.821820][ T6169] usb 6-1: Product: syz [ 255.828260][ T6169] usb 6-1: Manufacturer: syz [ 255.832866][ T6169] usb 6-1: SerialNumber: syz [ 255.855237][ T6169] usb 6-1: config 0 descriptor?? [ 255.906070][ T6169] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 255.929433][ T6240] udevd[6240]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 256.123894][ T6169] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 256.154817][ T6169] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 256.371336][ T30] audit: type=1400 audit(1766686683.826:562): avc: denied { shutdown } for pid=10449 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.517365][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 256.543124][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 256.543361][ T5947] usb 6-1: USB disconnect, device number 15 [ 256.591841][ T5947] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 256.625010][ T5947] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 256.656675][ T5947] quatech2 6-1:0.51: device disconnected [ 256.854995][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 256.906170][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.732'. [ 256.928662][T10484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.028440][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.051114][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.413386][ T30] audit: type=1400 audit(1766686684.866:563): avc: denied { create } for pid=10500 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 257.490954][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.737'. [ 258.022490][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.196824][T10509] loop2: detected capacity change from 0 to 7 [ 258.204670][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.239126][ T5802] Dev loop2: unable to read RDB block 7 [ 258.244913][ T5802] loop2: unable to read partition table [ 258.255967][ T5802] loop2: partition table beyond EOD, truncated [ 258.269251][T10509] Dev loop2: unable to read RDB block 7 [ 258.296339][T10509] loop2: unable to read partition table [ 258.322303][T10509] loop2: partition table beyond EOD, truncated [ 258.336443][T10509] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 258.352204][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/95.tmp-b7:2' failed: Read-only file system [ 258.467890][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/95.tmp-b7:2' failed: Read-only file system [ 258.513008][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/95.tmp-b7:2' failed: Read-only file system [ 258.786694][T10536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input24 [ 259.071528][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.746'. [ 259.427526][ T30] audit: type=1400 audit(1766686686.836:564): avc: denied { bind } for pid=10559 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 259.849501][T10573] tipc: Enabled bearer , priority 0 [ 259.900249][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 260.136776][T10573] syzkaller0: entered promiscuous mode [ 260.144966][T10573] syzkaller0: entered allmulticast mode [ 260.151132][T10573] tipc: Resetting bearer [ 260.814153][ T90] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 260.938867][ T6240] udevd[6240]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 261.005171][ T30] audit: type=1400 audit(1766686688.466:565): avc: denied { ioctl } for pid=10595 comm="syz.7.752" path="socket:[24266]" dev="sockfs" ino=24266 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.068721][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.125389][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.130976][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 261.217754][T10568] tipc: Resetting bearer [ 261.240018][T10606] loop2: detected capacity change from 0 to 7 [ 261.255987][ T5802] Dev loop2: unable to read RDB block 7 [ 261.268801][ T5802] loop2: unable to read partition table [ 261.286993][ T5802] loop2: partition table beyond EOD, truncated [ 261.315880][T10606] Dev loop2: unable to read RDB block 7 [ 261.327768][T10606] loop2: unable to read partition table [ 261.351073][T10606] loop2: partition table beyond EOD, truncated [ 261.379074][T10606] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 261.425766][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/97.tmp-b7:2' failed: Read-only file system [ 261.480964][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/97.tmp-b7:2' failed: Read-only file system [ 261.561068][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/97.tmp-b7:2' failed: Read-only file system [ 261.699051][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 261.890719][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 262.415423][ T5950] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 262.606080][ T5950] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.617996][ T5950] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.629689][ T5950] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 262.641271][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.654661][ T5950] usb 8-1: SerialNumber: syz [ 262.706139][ T30] audit: type=1400 audit(1766686690.166:566): avc: denied { write } for pid=10627 comm="syz.4.757" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 262.911248][ T5950] usb 8-1: 0:2 : does not exist [ 263.012017][ T5950] usb 8-1: USB disconnect, device number 3 [ 263.363859][T10568] tipc: Disabling bearer [ 263.818285][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 263.864482][ T30] audit: type=1400 audit(1766686691.316:567): avc: denied { append } for pid=10664 comm="syz.5.759" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 263.904615][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 263.907735][ T30] audit: type=1400 audit(1766686691.326:568): avc: denied { open } for pid=10664 comm="syz.5.759" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 263.948231][T10668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.043661][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 264.153894][T10685] loop2: detected capacity change from 0 to 7 [ 264.161766][T10685] Dev loop2: unable to read RDB block 7 [ 264.167414][T10685] loop2: unable to read partition table [ 264.174366][T10685] loop2: partition table beyond EOD, truncated [ 264.183189][T10685] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 264.192843][ T30] audit: type=1400 audit(1766686691.646:569): avc: denied { connect } for pid=10680 comm="syz.6.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 264.584167][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/99.tmp-b7:2' failed: Read-only file system [ 264.930219][T10704] syz.7.768 (10704): /proc/10702/oom_adj is deprecated, please use /proc/10702/oom_score_adj instead. [ 265.215369][T10718] tipc: Started in network mode [ 265.230144][T10718] tipc: Node identity d250033ce22b, cluster identity 4711 [ 265.271634][T10718] tipc: Enabled bearer , priority 0 [ 265.510796][T10729] syzkaller0: entered promiscuous mode [ 265.542547][T10729] syzkaller0: entered allmulticast mode [ 265.574575][T10729] tipc: Resetting bearer [ 265.827377][T10706] tipc: Resetting bearer [ 265.914242][ T6006] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 265.994292][ T7051] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 266.112397][ T6006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.134437][ T6006] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 266.148138][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.162114][ T7051] usb 8-1: device descriptor read/64, error -71 [ 266.203190][ T6006] usb 6-1: config 0 descriptor?? [ 266.282389][T10751] loop2: detected capacity change from 0 to 7 [ 266.297454][ T5802] Dev loop2: unable to read RDB block 7 [ 266.309578][ T5802] loop2: unable to read partition table [ 266.325292][ T5802] loop2: partition table beyond EOD, truncated [ 266.341003][T10751] Dev loop2: unable to read RDB block 7 [ 266.348192][T10751] loop2: unable to read partition table [ 266.367958][T10751] loop2: partition table beyond EOD, truncated [ 266.387901][T10751] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 266.399980][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 266.418607][ T7051] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 266.451913][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 266.497346][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 266.531329][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.535960][ T5802] udevd[5802]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 266.544984][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.561600][T10759] input: syz1 as /devices/virtual/input/input25 [ 266.574220][ T7051] usb 8-1: device descriptor read/64, error -71 [ 266.700070][ T7051] usb usb8-port1: attempt power cycle [ 266.785437][ T6006] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 266.874573][ T6006] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 266.898626][ T6006] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 267.041497][ T6006] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 267.057788][ T6006] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 267.564085][ T7051] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 267.596172][ T6006] prodikeys 0003:041E:2801.0014: hidraw1: USB HID v0.02 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 267.625735][ T7051] usb 8-1: device descriptor read/8, error -71 [ 267.639573][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.655642][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.740351][ T30] audit: type=1400 audit(1766686695.196:570): avc: denied { block_suspend } for pid=10773 comm="syz.3.780" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.864147][ T7051] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 267.934934][ T7051] usb 8-1: device descriptor read/8, error -71 [ 268.049973][ T7051] usb usb8-port1: unable to enumerate USB device [ 268.276044][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 268.583528][ T7051] usb 6-1: USB disconnect, device number 16 [ 268.828650][T10706] tipc: Disabling bearer [ 268.847094][ T6169] tipc: Node number set to 813368124 [ 269.233598][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 269.478437][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 270.324963][ T7051] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 270.549766][ T7051] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 270.609246][ T7051] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.665220][ T7051] usb 8-1: config 0 has no interface number 0 [ 270.699698][ T7051] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 270.727511][ T7051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.774187][ T7051] usb 8-1: Product: syz [ 270.788773][ T7051] usb 8-1: Manufacturer: syz [ 270.793851][ T7051] usb 8-1: SerialNumber: syz [ 270.810800][ T7051] usb 8-1: config 0 descriptor?? [ 270.837963][ T7051] ims_pcu 8-1:0.41: Missing CDC union descriptor [ 270.923669][ T7051] ims_pcu 8-1:0.41: probe with driver ims_pcu failed with error -22 [ 271.057776][ T7051] usb 8-1: USB disconnect, device number 8 [ 271.197512][ T30] audit: type=1400 audit(1766686698.656:571): avc: denied { shutdown } for pid=10862 comm="syz.5.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.921324][ T5802] udevd[5802]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 272.759659][T10889] 9p: Bad value for 'rfdno' [ 272.764572][ T30] audit: type=1400 audit(1766686700.206:572): avc: denied { write } for pid=10880 comm="syz.6.795" path="socket:[25234]" dev="sockfs" ino=25234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 272.830491][T10882] tipc: Started in network mode [ 272.837206][T10882] tipc: Node identity 029247729482, cluster identity 4711 [ 272.844971][T10882] tipc: Enabled bearer , priority 0 [ 272.937842][T10882] syzkaller0: entered promiscuous mode [ 272.962553][T10882] syzkaller0: entered allmulticast mode [ 272.971100][T10882] tipc: Resetting bearer [ 273.016682][T10876] tipc: Resetting bearer [ 273.545856][T10905] tmpfs: Bad value for 'mpol' [ 275.342463][ T5917] IPVS: starting estimator thread 0... [ 275.434121][T10916] IPVS: using max 44 ests per chain, 105600 per kthread [ 275.665352][ T30] audit: type=1400 audit(1766686703.116:573): avc: denied { mount } for pid=10919 comm="syz.4.802" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 276.480410][T10938] fuse: Bad value for 'fd' [ 276.845091][T10876] tipc: Disabling bearer [ 276.851721][ T10] tipc: Node number set to 2517649266 [ 276.928613][ T30] audit: type=1400 audit(1766686704.386:574): avc: denied { setattr } for pid=10947 comm="syz.5.807" name="file1" dev="overlay" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 276.928689][T10948] evm: overlay not supported [ 276.954461][ T30] audit: type=1400 audit(1766686704.386:575): avc: denied { rename } for pid=10947 comm="syz.5.807" name="#9" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 276.956130][ T30] audit: type=1400 audit(1766686704.416:576): avc: denied { link } for pid=10947 comm="syz.5.807" name="00fb21000172a315e3420e46acab452432d72c6be2b1717d338901000000000000" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 277.246410][ T30] audit: type=1400 audit(1766686704.696:577): avc: denied { ioctl } for pid=10949 comm="syz.5.809" path="socket:[25721]" dev="sockfs" ino=25721 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.785402][ T30] audit: type=1400 audit(1766686705.246:578): avc: denied { write } for pid=10942 comm="syz.6.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.389750][T10927] udevd[10927]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 278.670518][T10969] sp0: Synchronizing with TNC [ 278.709420][T10969] [U] ` [ 279.746553][T11003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11003 comm=syz.6.815 [ 279.857346][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 280.291432][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 280.932640][T11029] tipc: Enabled bearer , priority 0 [ 281.141053][T11033] syzkaller0: entered promiscuous mode [ 281.201821][T11033] syzkaller0: entered allmulticast mode [ 281.217160][T11033] tipc: Resetting bearer [ 281.230209][T11021] tipc: Resetting bearer [ 281.319864][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 281.357542][ T30] audit: type=1400 audit(1766686708.816:579): avc: denied { accept } for pid=11043 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.381683][T11030] fuse: Bad value for 'fd' [ 281.394239][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 281.544154][ T10] usb 6-1: device descriptor read/64, error -71 [ 281.787577][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 281.907368][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 281.936596][ T10] usb 6-1: device descriptor read/64, error -71 [ 282.046630][ T10] usb usb6-port1: attempt power cycle [ 282.385655][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 282.420998][ T10] usb 6-1: device descriptor read/8, error -71 [ 282.667472][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 282.694942][ T10] usb 6-1: device descriptor read/8, error -71 [ 282.715222][T11021] tipc: Disabling bearer [ 282.826379][ T10] usb usb6-port1: unable to enumerate USB device [ 282.866675][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 283.214521][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.826'. [ 283.270761][T11076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=11076 comm=syz.6.826 [ 283.534842][ T5820] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 283.685106][ T5820] usb 8-1: Using ep0 maxpacket: 32 [ 283.691891][ T5820] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.702143][ T5820] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.713155][ T5820] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 283.722331][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.731138][ T5820] usb 8-1: Product: syz [ 283.735393][ T5820] usb 8-1: Manufacturer: syz [ 283.740135][ T5820] usb 8-1: SerialNumber: syz [ 283.746723][ T5820] usb 8-1: config 0 descriptor?? [ 284.385971][ T5820] usb 8-1: USB disconnect, device number 9 [ 284.741812][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 285.000878][ T30] audit: type=1400 audit(1766686712.456:580): avc: denied { listen } for pid=11137 comm="syz.7.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.064180][ T30] audit: type=1400 audit(1766686712.486:581): avc: denied { accept } for pid=11137 comm="syz.7.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.491975][ T30] audit: type=1400 audit(1766686712.486:582): avc: denied { write } for pid=11137 comm="syz.7.833" path="socket:[25884]" dev="sockfs" ino=25884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.515517][ T30] audit: type=1400 audit(1766686712.946:583): avc: denied { shutdown } for pid=11137 comm="syz.7.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.806488][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 285.818312][T11160] tipc: Enabling of bearer rejected, failed to enable media [ 286.039722][ T30] audit: type=1400 audit(1766686713.446:584): avc: denied { setopt } for pid=11167 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 286.113364][ T30] audit: type=1326 audit(1766686713.476:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db58f749 code=0x7ffc0000 [ 286.201008][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 286.206982][ T30] audit: type=1326 audit(1766686713.466:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db58f749 code=0x7ffc0000 [ 286.215084][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 286.248384][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.262209][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 286.271911][ T10] pvrusb2: ********** [ 286.276328][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 286.307293][ T10] pvrusb2: Important functionality might not be entirely working. [ 286.315008][ T30] audit: type=1326 audit(1766686713.476:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3db58f749 code=0x7ffc0000 [ 286.334097][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 286.390511][ T30] audit: type=1326 audit(1766686713.476:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db58f749 code=0x7ffc0000 [ 286.394211][ T10] pvrusb2: ********** [ 286.465906][ T30] audit: type=1326 audit(1766686713.476:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db58f749 code=0x7ffc0000 [ 286.472048][ T2337] pvrusb2: Invalid write control endpoint [ 287.145040][ T2337] pvrusb2: Invalid write control endpoint [ 287.168747][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 287.198951][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 287.394183][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 287.470668][ T5820] usb 8-1: USB disconnect, device number 10 [ 287.505750][ T2337] pvrusb2: Device being rendered inoperable [ 287.544949][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 287.552423][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 287.624186][ T2337] pvrusb2: Attached sub-driver cx25840 [ 287.635003][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 287.698095][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 288.588010][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 288.645897][T11235] netlink: 'syz.7.849': attribute type 1 has an invalid length. [ 288.765224][ T5917] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 288.888564][T11235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.977510][ T5917] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.993305][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.016434][T11255] bond1: (slave veth3): Enslaving as an active interface with a down link [ 289.025095][ T5917] usb 7-1: Product: syz [ 289.030147][ T5917] usb 7-1: Manufacturer: syz [ 289.037708][ T5917] usb 7-1: SerialNumber: syz [ 289.091266][ T5917] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.179682][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.198274][T10927] udevd[10927]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 289.227668][T11279] tipc: Enabling of bearer rejected, failed to enable media [ 289.275844][ T5818] Bluetooth: hci6: link tx timeout [ 289.281021][ T5818] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.404188][ T117] usb 7-1: USB disconnect, device number 15 [ 289.464795][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 289.784657][T11310] netlink: 'syz.7.854': attribute type 4 has an invalid length. [ 290.274120][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 290.294897][ T10] ath9k_htc: Failed to initialize the device [ 290.312650][ T117] usb 7-1: ath9k_htc: USB layer deinitialized [ 290.784784][T10927] udevd[10927]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 291.066001][ T90] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 291.282522][ T90] usb 8-1: Using ep0 maxpacket: 16 [ 291.293854][ T90] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.302625][ T90] usb 8-1: config 0 has no interface number 0 [ 291.312158][ T90] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.323406][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 291.329808][ T90] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.394903][ T90] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 291.404512][ T90] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.417962][ T90] usb 8-1: config 0 descriptor?? [ 291.962800][ T5917] IPVS: starting estimator thread 0... [ 291.975574][T11330] netlink: 'syz.7.858': attribute type 10 has an invalid length. [ 292.026199][T11365] netlink: 'syz.7.858': attribute type 10 has an invalid length. [ 292.160752][T11366] IPVS: using max 40 ests per chain, 96000 per kthread [ 293.013137][T11330] team0: Port device dummy0 added [ 293.041591][T11365] team0: Port device dummy0 removed [ 293.068930][T11365] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 293.069724][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 293.197614][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 293.207386][ T90] usbhid 8-1:0.1: can't add hid device: -71 [ 293.213366][ T90] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 293.251754][ T90] usb 8-1: USB disconnect, device number 11 [ 293.513534][T11378] wg1: entered promiscuous mode [ 293.530073][T11378] wg1: entered allmulticast mode [ 293.863420][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 293.933466][T11414] Bluetooth: MGMT ver 1.23 [ 295.061092][T11414] pim6reg: entered allmulticast mode [ 295.107284][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 295.107300][ T30] audit: type=1400 audit(1766686722.566:697): avc: denied { setopt } for pid=11412 comm="syz.7.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.337396][T11445] Bluetooth: hci7: Frame reassembly failed (-84) [ 295.351071][ T7964] Bluetooth: hci7: Frame reassembly failed (-84) [ 295.821148][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 295.963405][ T30] audit: type=1800 audit(1766686723.416:698): pid=11455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.873" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 296.021286][ T30] audit: type=1400 audit(1766686723.446:699): avc: denied { getopt } for pid=11451 comm="syz.7.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 296.198894][ T5880] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 296.239555][ T5880] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 296.286114][ T5880] usb 5-1: USB disconnect, device number 22 [ 296.336719][T11471] kAFS: No cell specified [ 296.723511][ T30] audit: type=1400 audit(1766686724.166:700): avc: denied { listen } for pid=11477 comm="syz.6.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.110977][ T30] audit: type=1400 audit(1766686724.166:701): avc: denied { mounton } for pid=11477 comm="syz.6.877" path="/63/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 297.136433][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 297.249029][ T30] audit: type=1400 audit(1766686724.176:702): avc: denied { remount } for pid=11477 comm="syz.6.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 297.364551][T11496] netlink: 'syz.5.880': attribute type 19 has an invalid length. [ 297.372277][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 297.390155][T11496] netlink: 'syz.5.880': attribute type 19 has an invalid length. [ 297.398213][ T5818] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 297.444209][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 297.480181][T11500] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 297.874244][ T5950] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 297.910307][T11532] Cannot find set identified by id 0 to match [ 298.173724][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.235471][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.253465][ T5950] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 298.272154][ T5880] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 298.275282][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.376577][ T5950] usb 8-1: config 0 descriptor?? [ 298.444248][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 298.453320][ T5880] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 298.465996][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.475097][ T5880] usb 7-1: Product: syz [ 298.480651][ T5880] usb 7-1: Manufacturer: syz [ 298.493399][ T5880] usb 7-1: SerialNumber: syz [ 298.548617][ T5880] usb 7-1: config 0 descriptor?? [ 298.787747][ T5880] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.827437][ T5880] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 298.876911][ T5880] usb 7-1: USB disconnect, device number 16 [ 298.909991][ T5950] bigben 0003:146B:0902.0015: unexpected rdesc, please submit for review [ 298.957670][T11562] udevd[11562]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.019816][ T5950] bigben 0003:146B:0902.0015: hidraw1: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.7-1/input0 [ 299.089151][ T5950] bigben 0003:146B:0902.0015: missing HID_OUTPUT_REPORT 0 [ 299.121319][ T5950] bigben 0003:146B:0902.0015: no output report found [ 299.911295][ T5880] usb 8-1: USB disconnect, device number 12 [ 300.370989][T11599] 9p: Bad value for 'rfdno' [ 300.888187][ T30] audit: type=1400 audit(1766686728.336:703): avc: denied { mount } for pid=11627 comm="syz.6.893" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 301.353567][ T30] audit: type=1400 audit(1766686728.336:704): avc: denied { mounton } for pid=11627 comm="syz.6.893" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 301.473536][ T30] audit: type=1400 audit(1766686728.926:705): avc: denied { unmount } for pid=7894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 301.553999][T10993] udevd[10993]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 301.593690][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 302.131170][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 302.144851][ T5950] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 302.991224][ T5950] usb 7-1: device descriptor read/64, error -71 [ 303.314475][ T5950] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 303.412382][T11693] input: syz1 as /devices/virtual/input/input27 [ 303.517441][ T5950] usb 7-1: device descriptor read/64, error -71 [ 303.685697][ T5950] usb usb7-port1: attempt power cycle [ 303.735827][T11698] 9pnet_virtio: no channels available for device syz [ 303.745459][ T30] audit: type=1400 audit(1766686731.206:706): avc: denied { mount } for pid=11690 comm="syz.3.902" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 304.156041][T11708] netlink: 'syz.7.903': attribute type 1 has an invalid length. [ 304.193953][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 304.266494][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.903'. [ 304.366872][T11708] bond2: entered promiscuous mode [ 304.395747][T11708] bond2: entered allmulticast mode [ 304.434435][T11708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.444525][ T5950] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 304.467911][T11716] erspan1: entered allmulticast mode [ 304.509503][ T5950] usb 7-1: device descriptor read/8, error -71 [ 304.518763][T11716] bond2: (slave erspan1): making interface the new active one [ 304.536155][T11716] erspan1: entered promiscuous mode [ 304.550720][T11716] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 304.636736][ T5820] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 304.666080][T11764] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 304.697612][T11764] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 304.724135][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.908'. [ 304.764272][ T5950] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 304.795265][T11729] bond2 (unregistering): (slave erspan1): Releasing active interface [ 304.808036][ T5820] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 304.822593][ T5950] usb 7-1: device descriptor read/8, error -71 [ 304.832790][ T5820] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 304.841452][T11729] erspan1: left promiscuous mode [ 304.857184][ T5820] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 304.867256][ T5820] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 304.880175][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 304.894905][T11729] bond2 (unregistering): Released all slaves [ 304.919653][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 304.940924][ T5820] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 305.014340][ T5950] usb usb7-port1: unable to enumerate USB device [ 305.089029][ T5820] usb 8-1: language id specifier not provided by device, defaulting to English [ 305.150865][ T5820] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 305.228362][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.367298][ T5820] usb 8-1: Manufacturer:  [ 305.525270][ T5820] usb 8-1: config 0 descriptor?? [ 305.593271][ T5820] hub 8-1:0.0: bad descriptor, ignoring hub [ 305.618113][ T5820] hub 8-1:0.0: probe with driver hub failed with error -5 [ 305.642972][ T5820] input:  as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input28 [ 305.895041][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.903'. [ 305.921338][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.903'. [ 306.003422][ T10] usb 8-1: USB disconnect, device number 13 [ 306.642553][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 306.677986][ T30] audit: type=1400 audit(1766686734.136:707): avc: denied { module_load } for pid=11862 comm="syz.7.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 306.841220][ T30] audit: type=1400 audit(1766686734.176:708): avc: denied { map } for pid=11853 comm="syz.6.914" path="socket:[27653]" dev="sockfs" ino=27653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 306.879570][ T5820] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 306.899311][T11871] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 306.998379][ T30] audit: type=1400 audit(1766686734.176:709): avc: denied { read } for pid=11853 comm="syz.6.914" path="socket:[27653]" dev="sockfs" ino=27653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 307.441323][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 307.459262][ T30] audit: type=1400 audit(1766686734.916:710): avc: denied { write } for pid=11896 comm="syz.5.923" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 307.489840][ T30] audit: type=1400 audit(1766686734.916:711): avc: denied { open } for pid=11896 comm="syz.5.923" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 307.602404][T11900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11900 comm=syz.5.923 [ 307.864335][ T5950] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 307.872164][ T5917] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 308.027915][ T5950] usb 6-1: Using ep0 maxpacket: 8 [ 308.035163][ T5950] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.062525][ T5950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 308.081153][ T5950] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 308.096852][ T10] usb 8-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 308.103504][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.107554][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 308.124428][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 308.129622][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.144835][ T10] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 308.157475][ T5917] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 308.169185][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.180616][ T5917] usb 5-1: config 0 descriptor?? [ 308.287366][ T5950] usb 6-1: config 0 descriptor?? [ 308.366348][ T7051] libceph: connect (1)[c::]:6789 error -101 [ 308.376835][ T7051] libceph: mon0 (1)[c::]:6789 connect error [ 308.387376][ T5917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 308.402673][T11926] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 308.411277][T11926] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 308.419990][T11926] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 308.427951][T11926] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 308.446338][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.461188][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 308.464800][ T30] audit: type=1400 audit(1766686735.916:712): avc: denied { ioctl } for pid=11908 comm="syz.6.924" path="socket:[27687]" dev="sockfs" ino=27687 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 308.468422][ T5917] usb 5-1: media controller created [ 308.527026][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 308.541930][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.647468][ T7051] libceph: connect (1)[c::]:6789 error -101 [ 308.657782][ T7051] libceph: mon0 (1)[c::]:6789 connect error [ 308.708607][ T5950] hid-u2fzero 0003:20A0:4287.0016: item fetching failed at offset 0/5 [ 308.723347][ T5950] hid-u2fzero 0003:20A0:4287.0016: probe with driver hid-u2fzero failed with error -22 [ 308.941050][ T30] audit: type=1400 audit(1766686736.396:713): avc: denied { checkpoint_restore } for pid=11896 comm="syz.5.923" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.942203][ T10] usb 6-1: USB disconnect, device number 21 [ 309.014199][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.025249][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.184508][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 309.190536][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 309.242782][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.255329][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.340401][T11981] delete_channel: no stack [ 309.352362][ T30] audit: type=1400 audit(1766686736.806:714): avc: denied { write } for pid=11980 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 309.499725][ T5917] stb0899_attach: Driver disabled by Kconfig [ 309.505928][ T5917] az6027: no front-end attached [ 309.505928][ T5917] [ 309.513283][ T5917] az6027: usb out operation failed. (-71) [ 309.519753][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 309.529852][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 309.533542][T11988] xt_SECMARK: invalid security context 'unconfined' [ 309.564504][ T5917] dvb-usb: schedule remote query interval to 400 msecs. [ 309.571466][ T5917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 309.606293][ T30] audit: type=1400 audit(1766686737.066:715): avc: denied { mounton } for pid=11990 comm="syz.6.934" path="/79/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.613731][ T5917] usb 5-1: USB disconnect, device number 23 [ 309.793477][T11873] ceph: No mds server is up or the cluster is laggy [ 310.007531][ T5950] usb 8-1: USB disconnect, device number 14 [ 310.280937][ T5917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 310.292378][ T30] audit: type=1400 audit(1766686737.736:716): avc: denied { mount } for pid=11982 comm="syz.4.933" name="/" dev="hugetlbfs" ino=27309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 310.333185][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.934'. [ 310.431828][T10927] udevd[10927]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 310.542454][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 311.293729][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 311.352480][T12050] futex_wake_op: syz.7.942 tries to shift op by -1; fix this program [ 313.178908][T12083] dvmrp1: entered allmulticast mode [ 313.187893][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 313.234164][ T10] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 313.676090][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 313.732170][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 313.755262][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.951'. [ 313.804919][T12098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12098 comm=syz.5.951 [ 314.319694][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 314.353545][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.369336][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.951'. [ 314.387465][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 314.450075][ T10] usb 7-1: Product: syz [ 314.462667][ T10] usb 7-1: Manufacturer: syz [ 314.472097][ T10] usb 7-1: SerialNumber: syz [ 314.577624][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 314.703615][ T10] usb 7-1: config 0 descriptor?? [ 314.723993][ T10] usb 7-1: selecting invalid altsetting 0 [ 315.077339][T12128] random: crng reseeded on system resumption [ 315.418791][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 315.418872][ T30] audit: type=1400 audit(1766686742.526:718): avc: denied { write } for pid=12120 comm="syz.7.953" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 315.995023][ T5950] usb 7-1: USB disconnect, device number 22 [ 316.356142][ T30] audit: type=1400 audit(1766686742.536:719): avc: denied { open } for pid=12120 comm="syz.7.953" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 316.425169][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 316.490991][T10923] udevd[10923]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.509483][ T30] audit: type=1400 audit(1766686742.756:720): avc: denied { ioctl } for pid=12120 comm="syz.7.953" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 316.551818][T12159] netlink: 'syz.5.955': attribute type 1 has an invalid length. [ 316.618848][T12164] syz.7.954 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.634615][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.954'. [ 316.681932][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.688470][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.766789][T12159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.883326][ T5950] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 316.902526][T12165] bond1: (slave geneve2): making interface the new active one [ 316.962310][T12165] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 317.044102][ T5950] usb 7-1: Using ep0 maxpacket: 16 [ 317.050766][ T5950] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 317.069502][ T5950] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 317.081044][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.097049][ T5950] usb 7-1: Product: syz [ 317.111882][ T5950] usb 7-1: Manufacturer: syz [ 317.122820][ T5950] usb 7-1: SerialNumber: syz [ 317.139430][ T5950] usb 7-1: config 0 descriptor?? [ 317.142225][T12213] loop2: detected capacity change from 0 to 7 [ 317.256068][T12213] Dev loop2: unable to read RDB block 7 [ 317.261705][T12213] loop2: unable to read partition table [ 317.274278][T12075] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 317.339849][ T5950] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 317.347162][T12213] loop2: partition table beyond EOD, truncated [ 317.353387][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 317.353460][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 317.393782][ T5950] usb 7-1: USB disconnect, device number 23 [ 317.406491][ T5950] mcba_usb 7-1:0.0 can0: device disconnected [ 317.414360][T12213] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 317.433182][T10993] udevd[10993]: symlink '../../loop2' '/dev/disk/by-diskseq/103.tmp-b7:2' failed: Read-only file system [ 317.818714][T11562] udevd[11562]: symlink '../../loop2' '/dev/disk/by-diskseq/103.tmp-b7:2' failed: Read-only file system [ 318.506067][T11562] udevd[11562]: symlink '../../loop2' '/dev/disk/by-diskseq/103.tmp-b7:2' failed: Read-only file system [ 318.604764][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 319.664100][T12258] kthread_run failed with err -4 [ 320.112383][ T30] audit: type=1400 audit(1766686747.566:721): avc: denied { getopt } for pid=12265 comm="syz.6.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 320.859902][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.6.965'. [ 321.129446][T12292] loop2: detected capacity change from 0 to 7 [ 321.138154][T12292] Dev loop2: unable to read RDB block 7 [ 321.143750][T12292] loop2: unable to read partition table [ 321.159948][T12292] loop2: partition table beyond EOD, truncated [ 321.174163][T12292] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 321.206348][T11562] udevd[11562]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 321.254852][T11562] udevd[11562]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 321.266270][ T90] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 321.274201][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 321.306860][T11562] udevd[11562]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 321.378851][ T30] audit: type=1400 audit(1766686748.836:722): avc: denied { map } for pid=12301 comm="syz.5.971" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.403576][ T30] audit: type=1400 audit(1766686748.836:723): avc: denied { map } for pid=12301 comm="syz.5.971" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.427690][ T10] usb 5-1: device descriptor read/64, error -71 [ 321.454108][ T90] usb 7-1: Invalid ep0 maxpacket: 64 [ 321.462763][T12306] 9pnet_fd: Insufficient options for proto=fd [ 321.480442][T12306] afs: Unknown parameter 'dynns' [ 321.502833][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 321.585198][ T90] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 321.610785][ T30] audit: type=1400 audit(1766686749.066:724): avc: denied { append } for pid=12313 comm="syz.5.973" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.664140][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 321.715769][ T30] audit: type=1400 audit(1766686749.176:725): avc: denied { write } for pid=12320 comm="syz.5.974" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.744121][ T90] usb 7-1: Invalid ep0 maxpacket: 64 [ 321.749967][ T90] usb usb7-port1: attempt power cycle [ 321.750624][ T30] audit: type=1400 audit(1766686749.196:726): avc: denied { open } for pid=12320 comm="syz.5.974" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.804098][ T10] usb 5-1: device descriptor read/64, error -71 [ 321.944075][ T30] audit: type=1400 audit(1766686749.196:727): avc: denied { ioctl } for pid=12320 comm="syz.5.974" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 322.006973][T12324] sch_fq: defrate 0 ignored. [ 322.047588][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.122940][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.136470][T12335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'. [ 322.223390][ T10] usb usb5-port1: attempt power cycle [ 322.324333][ T5950] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 322.374093][ T90] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 322.684718][ T90] usb 7-1: Invalid ep0 maxpacket: 64 [ 322.714144][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 322.734446][ T5950] usb 6-1: Using ep0 maxpacket: 32 [ 322.754154][ T5950] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.754639][ T10] usb 5-1: device descriptor read/8, error -71 [ 322.790542][ T5950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.822403][ T5950] usb 6-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 322.834160][ T90] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 322.852604][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.864736][ T90] usb 7-1: Invalid ep0 maxpacket: 64 [ 322.870261][ T90] usb usb7-port1: unable to enumerate USB device [ 322.880407][ T5950] usb 6-1: config 0 descriptor?? [ 323.014982][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 323.044595][ T10] usb 5-1: device descriptor read/8, error -71 [ 323.103966][ T5950] usbhid 6-1:0.0: can't add hid device: -71 [ 323.106521][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/83.tmp-b7:7' failed: Read-only file system [ 323.112542][ T5950] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 323.132219][T12355] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 323.152662][ T5950] usb 6-1: USB disconnect, device number 22 [ 323.166321][ T10] usb usb5-port1: unable to enumerate USB device [ 323.462791][ T30] audit: type=1804 audit(1766686750.916:728): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.981" name="/newroot/50/file0" dev="tmpfs" ino=279 res=1 errno=0 [ 323.805667][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 324.043566][ T30] audit: type=1400 audit(1766686751.336:729): avc: denied { create } for pid=12376 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 324.195880][T12394] Device name cannot be null; rc = [-22] [ 324.237199][ T30] audit: type=1400 audit(1766686751.646:730): avc: denied { call } for pid=12387 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 325.221487][T12405] loop7: detected capacity change from 0 to 7 [ 325.291531][T12405] loop7: [CUMANA/ADFS] p1 [ADFS] p1 [ 325.354213][T12405] loop7: partition table partially beyond EOD, truncated [ 325.391377][T12405] loop7: p1 size 487441168 extends beyond EOD, truncated [ 325.455253][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 325.532331][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 325.596202][T11562] udevd[11562]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 325.905385][ T90] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 325.969604][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 326.084436][ T90] usb 8-1: Using ep0 maxpacket: 16 [ 326.109827][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 326.110643][ T90] usb 8-1: config 10 has an invalid interface number: 93 but max is 0 [ 326.137125][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 326.169238][ T90] usb 8-1: config 10 has no interface number 0 [ 326.188893][ T90] usb 8-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 326.277573][ T31] INFO: task syz.2.449:7725 blocked for more than 143 seconds. [ 326.509118][ T31] Tainted: G L syzkaller #0 [ 326.524285][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.533695][ T31] task:syz.2.449 state:D stack:24184 pid:7725 tgid:7719 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 326.562278][ T90] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.570965][ T31] Call Trace: [ 326.570978][ T31] [ 326.570988][ T31] ? __schedule+0x10b9/0x6150 [ 326.571013][ T31] __schedule+0x1139/0x6150 [ 326.571048][ T31] ? __pfx___schedule+0x10/0x10 [ 326.614212][ T31] ? find_held_lock+0x2b/0x80 [ 326.632593][ T31] ? schedule+0x2d7/0x3a0 [ 326.633064][ T90] usb 8-1: Product: syz [ 326.641350][ T31] schedule+0xe7/0x3a0 [ 326.651330][ T90] usb 8-1: Manufacturer: syz [ 326.651591][ T31] schedule_timeout+0x257/0x290 [ 326.665154][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 326.670815][ T31] ? mark_held_locks+0x49/0x80 [ 326.670826][ T90] usb 8-1: SerialNumber: syz [ 326.683715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.690684][ T31] __wait_for_common+0x2fc/0x4e0 [ 326.711172][ T90] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 326.735508][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 326.745842][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 326.753873][ T90] dvb-usb: bulk message failed: -22 (2/0) [ 326.776445][ T30] audit: type=1400 audit(1766686754.236:731): avc: denied { unmount } for pid=12434 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 326.806272][ T90] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 326.806340][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 326.822233][ T31] disable_device+0x16f/0x280 [ 326.828065][ T31] ? __pfx_disable_device+0x10/0x10 [ 326.835041][ T31] ? finish_task_switch.isra.0+0x207/0xbd0 [ 326.841462][ T31] __ib_unregister_device+0x2b4/0x480 [ 326.841556][ T90] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 326.847262][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 326.886133][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 326.893761][ T31] nldev_dellink+0x21f/0x320 [ 326.894741][ T90] usb 8-1: media controller created [ 326.904812][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 326.911551][ T31] ? rcu_is_watching+0x12/0xc0 [ 326.913050][ T90] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.951904][ T31] ? cap_capable+0x10d/0x3f0 [ 326.963255][ T31] ? bpf_lsm_capable+0x9/0x10 [ 326.970880][ T31] ? security_capable+0x7e/0x260 [ 326.982261][ T31] ? ns_capable+0xd7/0x110 [ 326.989228][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 326.996090][ T90] usb 8-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 326.996562][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 327.012145][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 327.022165][ T31] ? __lock_acquire+0x436/0x2890 [ 327.032086][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 327.033778][ T90] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 327.040041][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 327.084153][ T31] netlink_unicast+0x5aa/0x870 [ 327.090265][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 327.097352][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 327.105052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.111553][ T31] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 327.118082][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 327.129074][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 327.142177][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.153732][ T31] ___sys_sendmsg+0x134/0x1d0 [ 327.158785][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.163994][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 327.173988][ T31] __sys_sendmsg+0x16d/0x220 [ 327.174087][ T90] rc_core: IR keymap rc-dtt200u not found [ 327.184092][ T90] Registered IR keymap rc-empty [ 327.184496][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.195805][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 327.195879][ T90] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 327.200780][ T31] do_syscall_64+0xcd/0xf80 [ 327.234809][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.234987][ T90] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input31 [ 327.240739][ T31] RIP: 0033:0x7f141858f749 [ 327.258914][ T31] RSP: 002b:00007f14167f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.268895][ T90] dvb-usb: schedule remote query interval to 300 msecs. [ 327.269450][ T31] RAX: ffffffffffffffda RBX: 00007f14187e6180 RCX: 00007f141858f749 [ 327.283617][ T90] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 327.300810][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 327.326910][ T31] RBP: 00007f1418613f91 R08: 0000000000000000 R09: 0000000000000000 [ 327.335550][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.339531][ T90] usb 8-1: USB disconnect, device number 15 [ 327.343553][ T31] R13: 00007f14187e6218 R14: 00007f14187e6180 R15: 00007ffdab4a2468 [ 327.384252][ T31] [ 327.397667][ T31] [ 327.397667][ T31] Showing all locks held in the system: [ 327.412993][ T31] 1 lock held by khungtaskd/31: [ 327.426379][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 327.440471][ T31] 6 locks held by kworker/0:2/90: [ 327.448812][ T31] 2 locks held by getty/5575: [ 327.452243][ T90] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 327.456743][ T31] #0: ffff88814e36d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 327.474162][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 327.522156][T11562] udevd[11562]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 327.535816][ T31] 2 locks held by kworker/u8:17/6139: [ 327.541221][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 327.561770][ T31] #1: ffffc9000c6efc90 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 327.579837][ T31] 2 locks held by syz.2.449/7725: [ 327.586432][ T31] #0: ffffffff9af7abd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 327.602193][ T31] #1: ffff88807a884700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 327.613872][ T31] 4 locks held by kworker/u8:36/7944: [ 327.620198][ T31] #0: ffff88801badc948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 327.630822][ T31] #1: ffffc9000437fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 327.641288][ T31] #2: ffffffff9012b3d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 327.652336][ T31] #3: ffff88807a884700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 327.669017][ T31] 2 locks held by syz.1.604/9105: [ 327.674311][ T31] #0: ffffffff9012b3d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 327.686400][ T31] #1: ffff88807a884700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 327.698551][ T31] 2 locks held by syz.5.987/12417: [ 327.707173][ T31] [ 327.710461][ T31] ============================================= [ 327.710461][ T31] [ 327.722817][ T31] NMI backtrace for cpu 1 [ 327.722833][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 327.722860][ T31] Tainted: [L]=SOFTLOCKUP [ 327.722865][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.722874][ T31] Call Trace: [ 327.722879][ T31] [ 327.722885][ T31] dump_stack_lvl+0x116/0x1f0 [ 327.722911][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 327.722941][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.722963][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 327.722994][ T31] sys_info+0x133/0x180 [ 327.723019][ T31] watchdog+0xe66/0x1180 [ 327.723045][ T31] ? rcu_is_watching+0x12/0xc0 [ 327.723063][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.723081][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.723106][ T31] ? __kthread_parkme+0x19e/0x250 [ 327.723126][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.723146][ T31] kthread+0x3c5/0x780 [ 327.723168][ T31] ? __pfx_kthread+0x10/0x10 [ 327.723190][ T31] ? rcu_is_watching+0x12/0xc0 [ 327.723207][ T31] ? __pfx_kthread+0x10/0x10 [ 327.723230][ T31] ret_from_fork+0x983/0xb10 [ 327.723251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 327.723272][ T31] ? __switch_to+0x7af/0x10d0 [ 327.723296][ T31] ? __pfx_kthread+0x10/0x10 [ 327.723319][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.723357][ T31] [ 327.723382][ T31] Sending NMI from CPU 1 to CPUs 0: [ 327.863889][ C0] NMI backtrace for cpu 0 [ 327.863906][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.863930][ C0] Tainted: [L]=SOFTLOCKUP [ 327.863935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.863945][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 327.863970][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 327.863987][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 327.864004][ C0] RAX: 000000000105586b RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 327.864015][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 327.864025][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 327.864036][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 327.864047][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 327.864057][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 327.864074][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.864085][ C0] CR2: 00007fff0486af88 CR3: 000000007fb41000 CR4: 00000000003526f0 [ 327.864096][ C0] Call Trace: [ 327.864101][ C0] [ 327.864107][ C0] default_idle+0x13/0x20 [ 327.864126][ C0] default_idle_call+0x6c/0xb0 [ 327.864145][ C0] do_idle+0x38d/0x510 [ 327.864166][ C0] ? __pfx_do_idle+0x10/0x10 [ 327.864188][ C0] cpu_startup_entry+0x4f/0x60 [ 327.864208][ C0] rest_init+0x16b/0x2b0 [ 327.864219][ C0] ? acpi_subsystem_init+0x133/0x180 [ 327.864234][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 327.864250][ C0] start_kernel+0x3ef/0x4d0 [ 327.864271][ C0] x86_64_start_reservations+0x18/0x30 [ 327.864292][ C0] x86_64_start_kernel+0x130/0x190 [ 327.864312][ C0] common_startup_64+0x13e/0x148 [ 327.864340][ C0] [ 327.865163][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 327.865180][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 327.865202][ T31] Tainted: [L]=SOFTLOCKUP [ 327.865208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.865217][ T31] Call Trace: [ 327.865223][ T31] [ 327.865229][ T31] dump_stack_lvl+0x3d/0x1f0 [ 327.865252][ T31] vpanic+0x640/0x6f0 [ 327.865272][ T31] panic+0xca/0xd0 [ 327.865288][ T31] ? __pfx_panic+0x10/0x10 [ 327.865304][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.865325][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 327.865350][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 327.865376][ T31] ? watchdog+0xe83/0x1180 [ 327.865393][ T31] ? watchdog+0xe76/0x1180 [ 327.865411][ T31] watchdog+0xe94/0x1180 [ 327.865432][ T31] ? rcu_is_watching+0x12/0xc0 [ 327.865448][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.865465][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.865486][ T31] ? __kthread_parkme+0x19e/0x250 [ 327.865502][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.865520][ T31] kthread+0x3c5/0x780 [ 327.865539][ T31] ? __pfx_kthread+0x10/0x10 [ 327.865559][ T31] ? rcu_is_watching+0x12/0xc0 [ 327.865574][ T31] ? __pfx_kthread+0x10/0x10 [ 327.865598][ T31] ret_from_fork+0x983/0xb10 [ 327.865616][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 327.865635][ T31] ? __switch_to+0x7af/0x10d0 [ 327.865656][ T31] ? __pfx_kthread+0x10/0x10 [ 327.865676][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.865711][ T31] [ 328.208309][ T31] Kernel Offset: disabled [ 328.212619][ T31] Rebooting in 86400 seconds..