last executing test programs: 26m46.966098938s ago: executing program 3 (id=181): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12) 26m45.115192492s ago: executing program 3 (id=184): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000200)) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x80340, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) close(0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r4 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0xa, 0x4, 0x28000000, 0x10, 'syz1\x00', 0x200}, 0x5, 0x20, 0x0, 0x0, 0x2, 0xfaeb, 'syz0\x00', &(0x7f0000000380)=['/dev/snd/controlC#\x00', ')#*\x1c\\[$],\x00'], 0x1d}) 26m43.736613457s ago: executing program 3 (id=186): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000200)) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x80340, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0x3) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfbb) fcntl$setstatus(r5, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 26m43.541476824s ago: executing program 3 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="030000000000") 26m43.187786005s ago: executing program 3 (id=193): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r1, r2, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 26m41.321476735s ago: executing program 3 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='0', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110091edc5402abea7eb339100000050", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000340)={{0xeeee0000, 0xa000, 0xe, 0x6, 0x80, 0xba, 0x5, 0x4, 0x9, 0x0, 0x40, 0x7}, {0x0, 0xeeca8000, 0xe, 0x24, 0x81, 0x6, 0xcf, 0x6, 0x16, 0x0, 0x80, 0x83}, {0x200000, 0xffff1000, 0x4, 0xd0, 0x4, 0x0, 0x6, 0x5, 0x9, 0x0, 0x8, 0x7}, {0x8000000, 0x0, 0x8, 0x81, 0x39, 0x4, 0x6, 0x6, 0x3, 0x0, 0x2, 0x8}, {0xb000, 0x5000, 0x0, 0x57, 0x3, 0x3, 0x2, 0xc, 0xd, 0x3, 0x4, 0x9}, {0xe000, 0xf000, 0xc, 0xf, 0xe, 0x7, 0x5f, 0x9, 0xd9, 0x9, 0x6, 0x7}, {0x1b801, 0x40000, 0xf, 0x40, 0xa, 0x5, 0x1, 0x1, 0xa, 0x8, 0x1, 0x7}, {0x58000, 0x8080000, 0x8, 0x6, 0xe4, 0x9f, 0x7, 0xff, 0xff, 0x4, 0x8, 0x1}, {0x8080000, 0x1}, {0x8080000, 0x9}, 0x40000, 0x0, 0x10000, 0x30, 0x1, 0x1100, 0x8000000, 0x1, [0x7, 0x8, 0x7a5c, 0x4]}) r12 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r12, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000001, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x80) 26m26.222702006s ago: executing program 32 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='0', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110091edc5402abea7eb339100000050", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000340)={{0xeeee0000, 0xa000, 0xe, 0x6, 0x80, 0xba, 0x5, 0x4, 0x9, 0x0, 0x40, 0x7}, {0x0, 0xeeca8000, 0xe, 0x24, 0x81, 0x6, 0xcf, 0x6, 0x16, 0x0, 0x80, 0x83}, {0x200000, 0xffff1000, 0x4, 0xd0, 0x4, 0x0, 0x6, 0x5, 0x9, 0x0, 0x8, 0x7}, {0x8000000, 0x0, 0x8, 0x81, 0x39, 0x4, 0x6, 0x6, 0x3, 0x0, 0x2, 0x8}, {0xb000, 0x5000, 0x0, 0x57, 0x3, 0x3, 0x2, 0xc, 0xd, 0x3, 0x4, 0x9}, {0xe000, 0xf000, 0xc, 0xf, 0xe, 0x7, 0x5f, 0x9, 0xd9, 0x9, 0x6, 0x7}, {0x1b801, 0x40000, 0xf, 0x40, 0xa, 0x5, 0x1, 0x1, 0xa, 0x8, 0x1, 0x7}, {0x58000, 0x8080000, 0x8, 0x6, 0xe4, 0x9f, 0x7, 0xff, 0xff, 0x4, 0x8, 0x1}, {0x8080000, 0x1}, {0x8080000, 0x9}, 0x40000, 0x0, 0x10000, 0x30, 0x1, 0x1100, 0x8000000, 0x1, [0x7, 0x8, 0x7a5c, 0x4]}) r12 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r12, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000001, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x80) 21m52.358709416s ago: executing program 1 (id=1238): sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="083f08000600090000001400000045"], 0xfce) 21m51.764289824s ago: executing program 1 (id=1239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac2(0x5, 0xa4, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x7, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x4, 0x1c, 0x7}, [@multiply_unit={0x7, 0x24, 0xc, 0x4, 0xd, 0x6, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x7, 0x2, 0x0, 0xec, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x24, 0xff, 0xe, {0x8, 0x25, 0x1, 0x81, 0xc, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x82, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/events/sched/sched_set_state/enable\x00', 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000003c0)={'team_slave_1\x00'}) write(r1, &(0x7f0000000400)='1\x00', 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}]}, @NFT_MSG_NEWTABLE={0x80, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7194534d669e9cd3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0xa4, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x400c084) r2 = fsopen(&(0x7f0000000040)='msdos\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x9, 0x9}, 0x90) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) 21m49.715323604s ago: executing program 1 (id=1245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001e80)={0x7c, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x10f}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/11, 0xb, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x2}, @dead_binder_done], 0x1000, 0x0, &(0x7f0000000e80)="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"}) unshare(0x24020400) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) file_setattr(r4, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x800, 0xfffffe01, 0x881}, 0x18, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000400), 0x12) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x4) 21m48.511859956s ago: executing program 1 (id=1248): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x1800) 21m47.75966333s ago: executing program 1 (id=1252): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl(r0, 0x8, &(0x7f0000000140)="1f38d6075cef24ae1207f360517aee8163604578070f9e7be6a6dc") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x4, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r5}}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0)='0000:00:05.0\x00', 0xd) 21m47.283048776s ago: executing program 1 (id=1253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040), 0x18, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x80000008, 0x2, 0x2, 0x0, 0x0, 0x7, 0x7f}) fcntl$setpipe(r0, 0x407, 0x10001) 21m31.510141217s ago: executing program 33 (id=1253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040), 0x18, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x80000008, 0x2, 0x2, 0x0, 0x0, 0x7, 0x7f}) fcntl$setpipe(r0, 0x407, 0x10001) 21m30.059737961s ago: executing program 2 (id=1303): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000380)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000001c0)=0x1) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000540)="00214797357e0e8d442441e9", 0xc}], 0x1, 0x739, 0x3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/10, 0xa}], 0x1, 0x6, 0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) r2 = getuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r2, &(0x7f00000003c0)) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a05050300000000000000000000000904010000010230000904010101010230000905010920000308e20a25250200"], 0x0) 21m27.496072002s ago: executing program 2 (id=1310): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd700004000000020000000400488040180180", @ANYRES32], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800800050001000000050025000100", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_deladdr={0x20, 0x15, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x8, 0x0, 0xfd, r2}, [@IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x20044080) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000fedbdf256700000035c800d6", @ANYRES32=r6, @ANYBLOB="0800c300040000000800c40003000000"], 0x2c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000010c0), 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000001040)={{0x1, 0x1, 0x29}, './file0\x00'}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x80c0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8f64}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xd}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}]}, @NFQA_CT={0x20, 0xb, 0x0, 0x1, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xc79, 0x6, 0xe6, 0x5, 0x1, 0x9]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xdfa}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xfff2}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200000c2) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4080040}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r11}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r12}, 0x38) 21m27.216219109s ago: executing program 2 (id=1312): syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1686dd60f53a0400403a00fe8800000000c0dd71463dd0d71f0001ff020000000000000000000047beb7f102009078000005026050835900000000fc010000000000100000000000000000fe8000000000000000000000000000bb3a000000000000000001000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff0000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538aec6e8fa61af44"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0xf8, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x81}, {0x7}}}, @TCF_EM_META={0xa4, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x35, 0x2, [@TCF_META_TYPE_VAR="b2949989227c24", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c9cc382ab935b6c8", @TCF_META_TYPE_VAR='R', @TCF_META_TYPE_VAR="b5025d2ca20cee", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="fcb9ad0e4710ea7e69", @TCF_META_TYPE_VAR="ffc944fbcaf64eb4c1", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2dd637476789f754894b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='|\n', @TCF_META_TYPE_VAR="d82d9bf00d9fd9869386", @TCF_META_TYPE_VAR="646eb3", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="32dcb7c3a5d2ca7b4d"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="e7bad3d3976b1f", @TCF_META_TYPE_VAR="d26a83"]}]}}]}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='retu 0x01\n\x00', 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="01800000d8040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 21m23.678588893s ago: executing program 2 (id=1318): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r1, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) syz_open_dev$tty1(0xc, 0x4, 0x1) 21m22.535925791s ago: executing program 2 (id=1320): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0) 21m19.83993251s ago: executing program 2 (id=1325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000006680)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x1a641758c35cfced) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x3c0, 0x0) r2 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='@\v\r\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x8000, 0xf473, 0x8, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r3, 0xbc, "704907237e1c1779acb2f09e03eb5e849439d4fe9ed52e4994037abd9967f2c12d8107f4762a8102bafb5f9f7db1f7b710d2f89bc18811e8aa9c834a31531892952f2ada2983cd091aa6ac6173108884cd4cec1f5a8dec7116e2075589ea5cfae903a0121d603d391af837e67291919528771f8cc67e16e3ad49d808178b95cf03cbdf4c0d7a2d9f99f68adf5c2bcece34ffd6b840eda3cbbf89e60c3efe7ec6dc7d763cf9736bfee591cd211a8a363d89e1c7e79a377a62273ff64b"}, &(0x7f0000000180)=0xc4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x10000}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{0x8, 0x10, 0xfff9, 0x2002}, 'syz1\x00', 0x50}) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 21m18.82211718s ago: executing program 34 (id=1325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000006680)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x1a641758c35cfced) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x3c0, 0x0) r2 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='@\v\r\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x8000, 0xf473, 0x8, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r3, 0xbc, "704907237e1c1779acb2f09e03eb5e849439d4fe9ed52e4994037abd9967f2c12d8107f4762a8102bafb5f9f7db1f7b710d2f89bc18811e8aa9c834a31531892952f2ada2983cd091aa6ac6173108884cd4cec1f5a8dec7116e2075589ea5cfae903a0121d603d391af837e67291919528771f8cc67e16e3ad49d808178b95cf03cbdf4c0d7a2d9f99f68adf5c2bcece34ffd6b840eda3cbbf89e60c3efe7ec6dc7d763cf9736bfee591cd211a8a363d89e1c7e79a377a62273ff64b"}, &(0x7f0000000180)=0xc4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x10000}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{0x8, 0x10, 0xfff9, 0x2002}, 'syz1\x00', 0x50}) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 12m45.648617292s ago: executing program 6 (id=3123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000002c0), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x4d2, 0x0, {0x8, 0x2, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r5, 0x3d}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 12m41.043078458s ago: executing program 6 (id=3132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004864}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, &(0x7f00000002c0)="0503222ed3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m40.442569096s ago: executing program 6 (id=3135): syz_usb_connect$uac1(0x3, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x5, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe, 0x2, 0xc7, 0x1, "019b5b"}, @as_header={0x7, 0x24, 0x1, 0x22, 0x47, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x3, 0x7, {0x7, 0x25, 0x1, 0x4, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0x4, 0x1, 0x6}}}}}}}}]}}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40480c5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 12m38.747998721s ago: executing program 6 (id=3141): syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1686dd60f53a0400403a00fe8800000000c0dd71463dd0d71f0001ff020000000000000000000047beb7f102009078000005026050835900000000fc010000000000100000000000000000fe8000000000000000000000000000bb3a000000000000000001000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x3b) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538aec6e8fa61af44"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0xf8, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x81}, {0x7}}}, @TCF_EM_META={0xa4, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x35, 0x2, [@TCF_META_TYPE_VAR="b2949989227c24", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c9cc382ab935b6c8", @TCF_META_TYPE_VAR='R', @TCF_META_TYPE_VAR="b5025d2ca20cee", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="fcb9ad0e4710ea7e69", @TCF_META_TYPE_VAR="ffc944fbcaf64eb4c1", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2dd637476789f754894b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='|\n', @TCF_META_TYPE_VAR="d82d9bf00d9fd9869386", @TCF_META_TYPE_VAR="646eb3", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="32dcb7c3a5d2ca7b4d"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="e7bad3d3976b1f", @TCF_META_TYPE_VAR="d26a"]}]}}]}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='retu 0x01\n\x00', 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="01800000d8040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12m34.826633325s ago: executing program 6 (id=3147): socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180300003f0007012bbd700000000000017c0000e402fc80b00215806a4b4767ef29e5317dbe81cb7de0203ee72ec55ce049121c273120d45f7f360500109f58472b6d5371afc5ca2de5a1c14cbfedfa5363edd2ccc02813c08d1df81c7c15f732285519470ddf35cf5cf5fc8c71b4aa5351828f2f57af12e5d98e2eb4a849e4328e2cb8e61c024296f5ad2d351a5c7960dca8d98cc8fe8e8a48809ea287b746136d79be7cf397275f5d5cddc331f54ff9f7bc97dbc71329085b28dadfd8d25dc1b1f0036e96cef4a01d64e238c23e29774334769f32fe03806535641f5d37003d1d74881c9e9b73792b7c5f5871b49f3dac0ef126e466cb349bf67e5459bb69c601", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r0], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 12m34.637785142s ago: executing program 6 (id=3149): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r3 = socket(0x23, 0x5, 0x0) close(0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCEXCL(r4, 0x540c) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x18, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 12m19.500736299s ago: executing program 35 (id=3149): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r3 = socket(0x23, 0x5, 0x0) close(0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCEXCL(r4, 0x540c) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x18, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 4m7.861919632s ago: executing program 8 (id=5384): r0 = socket$inet(0x2, 0x3, 0x101) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000fc0)={'filter\x00', 0x4, [{0x0, 0xff00}]}, 0x68) 4m7.692173791s ago: executing program 8 (id=5386): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000004c0)=[{}, {}], 0x8, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) r2 = memfd_create(&(0x7f0000000040)='(.$\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) fcntl$setlease(r0, 0x400, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) 4m6.668013512s ago: executing program 8 (id=5388): syz_open_dev$vbi(0x0, 0x2, 0x2) socket(0x1d, 0x800, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xafb2, 0x545902) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000040000900000082b0cfc4337965941538be"], 0x1b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000d2100100", @ANYRES32=0x0, @ANYBLOB="0000000019500000240012800c0001006d6163766c616e0014000280100005800a0004000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) 4m5.997115734s ago: executing program 8 (id=5391): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m4.62218686s ago: executing program 8 (id=5392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30080, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x110) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4m3.618696864s ago: executing program 8 (id=5397): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0x70bd2a, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x8848, 0x141}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m3.055028431s ago: executing program 36 (id=5397): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0x70bd2a, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x8848, 0x141}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7.719970515s ago: executing program 7 (id=6323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x7, 0xffff, 0x7, 0x5}, 0x48, [0x0, 0x7fffffff, 0x26, 0x3, 0x800, 0x1000, 0x6, 0x1, 0x2, 0x9, 0x81, 0xcecd, 0x40, 0xff, 0x0, 0x0, 0xbd7, 0x6, 0x6, 0x101, 0xb6ef, 0x3, 0xfffffffc, 0x1, 0x10000, 0x9, 0x1, 0x7fff, 0x3, 0x7, 0xece, 0x9, 0x9, 0x2, 0x5, 0x5, 0x2, 0x0, 0x1, 0x9, 0x9, 0x0, 0x2, 0x6, 0x0, 0x7, 0x314, 0x8001, 0x0, 0x0, 0x7, 0xffff, 0xfff, 0x4, 0x1c2, 0x7fffffff, 0xfffffff3, 0x1, 0x3, 0x57b, 0xe075, 0x10001, 0x9, 0x81], [0x3, 0x2, 0x200, 0x7f, 0x8000, 0x707d, 0x0, 0xc, 0x7, 0x99, 0xd71, 0x6, 0x1, 0xff, 0x7, 0x4, 0xbc08, 0x3, 0x5, 0x59ac, 0x3, 0x6, 0x9, 0x5, 0x3ff, 0xffffffff, 0x6, 0x3e2, 0x6, 0x3, 0x0, 0x0, 0x8000, 0x3, 0xd, 0x2, 0x7fff, 0x4, 0x5, 0x6, 0x4, 0x0, 0x8001, 0x7000, 0x3dd6, 0x7f, 0x0, 0xb0d, 0x1, 0x7, 0xc, 0x0, 0x1, 0x3, 0x7, 0x5, 0x7ff, 0xd, 0xf5, 0x8, 0x3, 0x6, 0x6, 0xa], [0x7, 0x2, 0x3, 0x2, 0x5, 0x6, 0x2, 0x0, 0x0, 0x7, 0x9, 0x80000001, 0xb, 0x10001, 0x10001, 0x3, 0x3, 0x2, 0x2, 0x7, 0x5, 0xa827, 0x1, 0x4, 0xc, 0x7, 0x2, 0x7fffffff, 0x3, 0x9, 0x4, 0xc, 0xf, 0x800, 0x5, 0x66c, 0x5, 0x0, 0x0, 0x0, 0x9, 0xcfc5, 0x7, 0x3ff, 0xf8, 0x4, 0x2, 0x9, 0xffff7f2b, 0x2, 0xb, 0x7, 0x7, 0x10001, 0xbd5, 0x2, 0x1, 0x8, 0x851, 0x2, 0x1, 0x8, 0xfffffff6, 0x10], [0xc, 0x10000000, 0x6, 0x2, 0x7, 0x2, 0x129, 0x5, 0x0, 0xfffffffd, 0x8, 0x4, 0x8, 0x3904, 0x5, 0xfffffffb, 0x9, 0x6, 0x40, 0xb0, 0x3, 0x5, 0x8d8, 0x4, 0xa5, 0x1, 0x1, 0x5, 0x2400, 0xe, 0x3, 0x80000001, 0xd9, 0xd7, 0x4, 0xd8b6, 0x0, 0x3, 0x8, 0x3a06c090, 0x4, 0x9, 0xfffffff9, 0x3, 0x1, 0x3, 0x7, 0x1, 0x1, 0x8, 0x4, 0x8, 0x926, 0x9, 0x5, 0xffffff80, 0xc, 0x9, 0x2, 0x7, 0xd6, 0x50, 0x9, 0xc85]}, 0x45c) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) umount2(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 7.719039889s ago: executing program 4 (id=6324): r0 = syz_open_dev$sg(0x0, 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r1, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x15c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_DESC={0xec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1733}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x78a1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1f4}}, 0x40000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x57) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) unshare(0x8000000) r7 = semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x3, 0xff81}], 0x1, 0x0) unshare(0x2c040000) recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0x3, 0x4) ioctl$IOC_PR_CLEAR(r9, 0x401070cd, &(0x7f0000000080)={0x8}) r10 = fsmount(0xffffffffffffffff, 0x0, 0x5) fsmount(r10, 0x0, 0x0) 7.573407342s ago: executing program 7 (id=6327): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = fanotify_init(0x1a, 0x800) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}, {@cachetag={'cachetag', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@cache_readahead}, {@afid={'afid', 0x3d, 0x5}}]}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x2800007) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000540)=0x9, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x69) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, r5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000002000000000000000200000d00"/32], 0x0, 0x36, 0x0, 0x1, 0x1ff}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x71e9f16e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r7, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) shutdown(r7, 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="85247fde1f848ef2538d"], 0x6) mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='squashfs\x00', 0x200000, &(0x7f0000000480)='%@!-U.\xde\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2b19004, 0x0) 6.767734619s ago: executing program 4 (id=6329): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x0, 0x1, 0xd55, 0xc}}) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 5.248255921s ago: executing program 7 (id=6333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="f8153e6d54a31d47abc81a9ce047bcea11c6aed2aba74c7a955394f6c2362a5e6f67d8893e20ebcad64470f54beeed4d4294e35473b3ae634253bf3dab6256c9000000000000000000", 0x49}], 0x1}}], 0x1, 0x20008010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) 5.246993302s ago: executing program 4 (id=6335): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x6c042) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/83, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x10008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x8, 0x5, 0x8, 0x4}, 0x9c) fanotify_init(0xa00, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={0x0, 0x6}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r5, 0x3116da9c85e20b2e, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x45844}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x6, 0x5, 0xc, 0x400, r1, 0x3, '\x00', r7, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) 4.799979638s ago: executing program 5 (id=6337): syz_open_dev$vbi(0x0, 0x2, 0x2) socket(0x1d, 0x800, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xafb2, 0x545902) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000040000900000082b0cfc4337965941538be"], 0x1b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) 3.989053603s ago: executing program 7 (id=6338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 3.887577s ago: executing program 5 (id=6339): r0 = memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r0, 0x3, 0x200000, 0xfffffffa) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) readv(r3, &(0x7f0000004500)=[{&(0x7f0000003100)=""/141, 0x8d}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.841094705s ago: executing program 7 (id=6340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}}, 0x84) (fail_nth: 9) 3.760050389s ago: executing program 0 (id=6341): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000040)) 3.018984878s ago: executing program 0 (id=6343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = fsmount(r4, 0x0, 0x2) (rerun: 32) symlinkat(&(0x7f0000000280)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') (async) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async, rerun: 64) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ecryptfs\x00', 0x400, &(0x7f0000000240)=',[.\'%]:\x98\xcf\'*[\x00') (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @device_b, @device_b, @random="9fc68cb591f0", {0x3}}, 0x5f7d6947d0efd05b, 0x6a, @random=0x8, @val, @val={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x41, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x1d9, 0xbb}}}, 0x3c) 3.018616518s ago: executing program 9 (id=6344): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) pwrite64$ublk_ch(r1, 0x0, 0x0, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000082, 0xf) close(0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 2.990739964s ago: executing program 7 (id=6345): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000003500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}]}}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x60, 0x3c, 0x43, {0x43, 0x23, "ff15ba54e62afabc5026d77e3e356baa31e8dae912c0b390aa19951e4aafdc4217f7cb6f83cad7f86da0dc4b48043314596b9fbac4d7491ac2b6ef101933731a47"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x20, 0x11, 0xea, "21ec30135074c8fd245138a646d96db0f8b355b262b0804d3ce3cccb717d0bf979c8adffa3319569075bc003dc00814cf294c3e08712c2ea37d7cadbd1a9df8f004a400f0e9edaf9c089fbe8aac0a944efe9804d41302fc3973892ba088d91e2778bd811fe439506e22755786c9bc88d8dec41f08ad33d37deba1fdfba286ec2ea550f184ad82f544370afb9a9146be213aaa76e3334fa32b47ad2c4a96b99654ca60b0d1c2951d22116790b8da8e5762f47c07fec3ab6469995c8cde51f50a4483894f692c01179953e7b5d475c988efc82fc8713d89b615aa2f32159ab517afb142d9fa16977f2ec59"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b40)={0x20, 0x81, 0x1, "e4"}, &(0x7f0000000b80)={0x20, 0x82, 0x1, "e0"}, &(0x7f0000000bc0)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000c00)={0x20, 0x84, 0x1, 'f'}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "ac1f38"}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)={0x20, 0x12, 0x2, "00a4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x88203, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x0, 0x0, 0x1, 0x4, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) r5 = syz_usb_connect$uac2(0x2, 0xc4, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x9, 0x0, 0xff, {0x8, 0xb, 0x2, 0x0, 0x1, 0xc, 0x20, 0xd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x0, 0x11, 0x3}, [@source_unit={0x8, 0x24, 0xa, 0x54, 0x0, 0xc0, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x16, 0x4, 0x95, 0x2, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x1, 0x0, {0x8, 0x25, 0x1, 0x1, 0xc, 0x12, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x81, "", "bd5096"}, @as_header={0x10, 0x24, 0x1, 0x5, 0x2, 0x0, 0x0, 0x9, 0x4, 0x1}, @as_header={0x10, 0x24, 0x1, 0x4, 0x5, 0x3, 0x0, 0x2b, 0x3630, 0xb}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xd0c, 0x8, "68514bd0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x23, 0x6c, 0x3, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x40, 0x1}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x310, 0x8, 0x0, 0x0, 0xff, 0x7f}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x2, 0x9}]}, 0x5, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42f}}, {0xfd, &(0x7f0000000d80)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x83, {0x83, 0x22, "c8005862ce415f0d13ef1a62622879fed8e77de28ee2bf337f797eaaf4b238c60b7072a86876b260a1868b3c887a05d10b0a68a651cbb6472299dd64c64a0a23f9df517055a41d237e428c0ac7927d5140862ff34224a090f1eb2c8b1c9cdfec486167c41d077e816ee277ce4dc15c20f7df0bb3b9e4c9aa4f0d7aac07f4170c16"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x20, 0x11, 0x20, "a440e480cd0fa2ce574e0e322d73ae9362572ffbfee8c1f78a7061f64e2057ef"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x1, 0x9, 0x2, 0x2, 0x9, 0x57, 0x8, 0x5, 0x5, 0x5, 0x6, 0x2b1}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000800)={0x20, 0x89, 0x2, 0x1}}) syz_usb_disconnect(r5) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.840214137s ago: executing program 9 (id=6346): pread64(0xffffffffffffffff, &(0x7f0000000000)=""/190, 0xbe, 0xa0000000000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) setns(r0, 0x4000000) r1 = socket(0x2a, 0x2, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x8917, 0x0) 2.765645247s ago: executing program 9 (id=6347): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prlimit64(r0, 0x8, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "5ca8795dc77b09ab4dbacba36f96f2156266ec961f1c04d436160e81f15180d85ec1b551ab1ac59d36ba5d52f0995f4dab1d02b2d62800a7e299b0dbccc6a026", 0x2b}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f00000002c0)=""/42, 0x2a) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14}, 0x94) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r5}, &(0x7f0000000f00), &(0x7f0000000f40)=r2}, 0x20) recvfrom(r3, 0x0, 0xb, 0x40, 0x0, 0x0) 2.692015484s ago: executing program 5 (id=6348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="f8153e6d54a31d47abc81a9ce047bcea11c6aed2aba74c7a955394f6c2362a5e6f67d8893e20ebcad64470f54beeed4d4294e35473b3ae634253bf3dab6256c9000000000000000000", 0x49}], 0x1}}], 0x1, 0x20008010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) 2.601841691s ago: executing program 9 (id=6349): syz_open_dev$vbi(0x0, 0x2, 0x2) socket(0x1d, 0x800, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xafb2, 0x545902) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000040000900000082b0cfc4337965941538be"], 0x1b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82d"}, 0x20) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) 2.55778745s ago: executing program 9 (id=6350): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x300000000000000) 2.479666955s ago: executing program 9 (id=6351): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r0, @ANYRES32=r2], 0x80}}, 0x4000050) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r5) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000180)={'pim6reg0\x00'}) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x2}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x13, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x1005, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x3, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) 1.404024349s ago: executing program 0 (id=6352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xd9b3, 0x40242) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x3c, r1, 0x1, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r6}) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r7, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) (async) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r7, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="07f75afa9842a2b175e001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="07f75afa9842a2b175e001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r8) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048085}, 0x8000) 1.388743867s ago: executing program 4 (id=6353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 1.298885245s ago: executing program 4 (id=6354): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000040)) 1.220660968s ago: executing program 4 (id=6355): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80941, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f00001e0000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0xfa67d000) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x5a, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setreuid(0xee00, r3) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 1.16389524s ago: executing program 5 (id=6356): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1.083792511s ago: executing program 0 (id=6357): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='aio\x00', 0x110010, &(0x7f0000000140)='$.@!\x00') 1.06604707s ago: executing program 5 (id=6358): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000300, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 1.019369818s ago: executing program 0 (id=6359): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 15.808344ms ago: executing program 5 (id=6360): syz_open_dev$vbi(0x0, 0x2, 0x2) socket(0x1d, 0x800, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xafb2, 0x545902) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000040000900000082b0cfc4337965941538be"], 0x1b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) 0s ago: executing program 0 (id=6361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): protocol=4 nlmsg_type=1545 sclass=netlink_tcpdiag_socket pid=27526 comm=syz.7.5702 [ 1576.258226][ T1211] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1576.279755][T27526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27526 comm=syz.7.5702 [ 1576.280191][ T1211] uvcvideo 10-1:1.1: Failed to initialize the device (-71). [ 1576.331134][ T1211] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -71 [ 1576.373024][ T1211] usb 10-1: USB disconnect, device number 7 [ 1576.506971][T27548] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5702'. [ 1576.723876][T27557] overlayfs: failed to resolve './file0': -2 [ 1576.776057][T26323] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1576.946423][T26323] usb 6-1: Using ep0 maxpacket: 32 [ 1577.020477][T26323] usb 6-1: config 6 has an invalid descriptor of length 145, skipping remainder of the config [ 1577.077271][T26323] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 1577.277656][T26323] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1577.323778][T26323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.343359][T26323] usb 6-1: Product: syz [ 1577.358256][T26323] usb 6-1: Manufacturer: syz [ 1577.372499][T26323] usb 6-1: SerialNumber: syz [ 1577.388974][T26323] usb 6-1: Fast Track Pro config OK [ 1577.580339][T27569] ALSA: mixer_oss: invalid OSS volume '' [ 1577.697929][T26323] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 1577.729283][T26323] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 1577.749982][T26323] usb 6-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 1577.776429][T26323] usb 6-1: 0:2 : does not exist [ 1577.782803][T26323] usb 6-1: unit 5 not found! [ 1577.793497][T26323] usb 6-1: unit 6 not found! [ 1577.864907][T26323] usb 6-1: USB disconnect, device number 26 [ 1578.130951][T27578] overlayfs: missing 'lowerdir' [ 1578.142517][T27573] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 1578.343962][T27585] syzkaller0: entered promiscuous mode [ 1578.355162][T27587] xt_ecn: cannot match TCP bits for non-tcp packets [ 1578.365177][T27585] syzkaller0: entered allmulticast mode [ 1578.558500][T27594] FAULT_INJECTION: forcing a failure. [ 1578.558500][T27594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.572168][T27594] CPU: 1 UID: 0 PID: 27594 Comm: syz.0.5721 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.572199][T27594] Tainted: [L]=SOFTLOCKUP [ 1578.572205][T27594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1578.572216][T27594] Call Trace: [ 1578.572223][T27594] [ 1578.572230][T27594] dump_stack_lvl+0x100/0x190 [ 1578.572261][T27594] should_fail_ex.cold+0x5/0xa [ 1578.572285][T27594] _copy_from_user+0x2e/0xd0 [ 1578.572312][T27594] memdup_user+0x6b/0xe0 [ 1578.572335][T27594] security_setselfattr+0x82/0x320 [ 1578.572364][T27594] __x64_sys_lsm_set_self_attr+0x110/0x1b0 [ 1578.572393][T27594] do_syscall_64+0x115/0x870 [ 1578.572417][T27594] ? clear_bhb_loop+0x70/0xc0 [ 1578.572441][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.572460][T27594] RIP: 0033:0x7f17f259e0d9 [ 1578.572476][T27594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.572494][T27594] RSP: 002b:00007f17f33c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 1578.572513][T27594] RAX: ffffffffffffffda RBX: 00007f17f2826090 RCX: 00007f17f259e0d9 [ 1578.572525][T27594] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000069 [ 1578.572537][T27594] RBP: 00007f17f33c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.572554][T27594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.572565][T27594] R13: 00007f17f2826128 R14: 00007f17f2826090 R15: 00007ffdbb37ceb8 [ 1578.572591][T27594] [ 1578.574308][T27596] overlayfs: failed to resolve './file0': -2 [ 1578.616195][T26323] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1578.736563][T26316] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1578.863448][T27604] 9p: Bad value for 'rfdno' [ 1578.895940][T26316] usb 10-1: Using ep0 maxpacket: 8 [ 1578.902556][T26316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.907837][T26323] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1578.913993][T26316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.922125][T26323] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1578.932181][T26316] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.941481][T26323] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.955878][T26316] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1578.961970][T26323] usb 5-1: config 220 has no interface number 2 [ 1578.977772][T26323] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1578.978626][T26316] usb 10-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 1578.997205][T26323] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1579.008764][T26316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.022367][T26323] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1579.031332][T26323] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1579.036853][T26316] usb 10-1: config 0 descriptor?? [ 1579.043610][T26323] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1579.053300][T26323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.064153][T26323] usb 5-1: Product: syz [ 1579.064179][T26323] usb 5-1: Manufacturer: syz [ 1579.075708][T26323] usb 5-1: SerialNumber: syz [ 1579.267815][T27590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.277867][T27590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.435895][T27612] FAULT_INJECTION: forcing a failure. [ 1579.435895][T27612] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.449301][T27612] CPU: 0 UID: 0 PID: 27612 Comm: syz.5.5727 Tainted: G L syzkaller #0 PREEMPT(full) [ 1579.449332][T27612] Tainted: [L]=SOFTLOCKUP [ 1579.449338][T27612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1579.449348][T27612] Call Trace: [ 1579.449357][T27612] [ 1579.449364][T27612] dump_stack_lvl+0x100/0x190 [ 1579.449393][T27612] should_fail_ex.cold+0x5/0xa [ 1579.449414][T27612] should_failslab+0xc2/0x120 [ 1579.449438][T27612] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1579.449460][T27612] ? __kasan_kmalloc+0xaa/0xb0 [ 1579.449480][T27612] ? property_entries_dup.part.0+0x2e1/0x9f0 [ 1579.449503][T27612] kstrdup+0x51/0xe0 [ 1579.449523][T27612] property_entries_dup.part.0+0x2e1/0x9f0 [ 1579.449545][T27612] ? __pfx_dev_set_name+0x10/0x10 [ 1579.449561][T27612] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1579.449585][T27612] fwnode_create_software_node+0xad/0x3f0 [ 1579.449607][T27612] device_create_managed_software_node+0x103/0x270 [ 1579.449634][T27612] iommufd_test+0x2f21/0x6200 [ 1579.449656][T27612] ? __lock_acquire+0x49f/0x1a40 [ 1579.449683][T27612] ? __pfx_iommufd_test+0x10/0x10 [ 1579.449702][T27612] ? tomoyo_path_number_perm+0x188/0x580 [ 1579.449736][T27612] ? find_held_lock+0x2b/0x80 [ 1579.449753][T27612] ? __might_fault+0xc5/0x140 [ 1579.449783][T27612] iommufd_fops_ioctl+0x358/0x520 [ 1579.449807][T27612] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1579.449831][T27612] ? __fget_files+0x215/0x3d0 [ 1579.449851][T27612] ? hook_file_ioctl_common+0x140/0x440 [ 1579.449879][T27612] ? selinux_file_ioctl+0x13b/0x290 [ 1579.449907][T27612] ? selinux_file_ioctl+0xb6/0x290 [ 1579.449935][T27612] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1579.449959][T27612] __x64_sys_ioctl+0x18e/0x210 [ 1579.449989][T27612] do_syscall_64+0x115/0x870 [ 1579.450012][T27612] ? clear_bhb_loop+0x70/0xc0 [ 1579.450034][T27612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.450054][T27612] RIP: 0033:0x7f2f4cf9e0d9 [ 1579.450071][T27612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.450088][T27612] RSP: 002b:00007f2f4dea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1579.450106][T27612] RAX: ffffffffffffffda RBX: 00007f2f4d225fa0 RCX: 00007f2f4cf9e0d9 [ 1579.450119][T27612] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1579.450130][T27612] RBP: 00007f2f4dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.450142][T27612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1579.450153][T27612] R13: 00007f2f4d226038 R14: 00007f2f4d225fa0 R15: 00007ffc520bfe48 [ 1579.450178][T27612] [ 1579.450272][T27612] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 1579.742754][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.749938][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.757284][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.764451][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.771584][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.779226][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.787855][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.794961][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.802890][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.813033][T26316] appleir 0003:05AC:8240.0026: unknown main item tag 0x0 [ 1579.827494][T26316] input: HID 05ac:8240 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8240.0026/input/input132 [ 1579.966562][T26316] appleir 0003:05AC:8240.0026: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 05ac:8240] on usb-dummy_hcd.9-1/input0 [ 1580.005253][T27620] netdevsim netdevsim5 netdevsim2: IPsec offload requires 128 bit authentication [ 1580.044686][T26316] usb 10-1: USB disconnect, device number 8 [ 1580.146093][T11110] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 1580.179195][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5733'. [ 1580.219977][T27623] fido_id[27623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1580.296216][T11110] usb 8-1: Using ep0 maxpacket: 16 [ 1580.305514][T11110] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1580.314275][T11110] usb 8-1: config 1 has no interface number 0 [ 1580.340511][T11110] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1580.404698][T11110] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1580.496589][T11110] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1580.555278][T27627] syzkaller0: entered promiscuous mode [ 1580.565390][T11110] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1580.577123][T27627] syzkaller0: entered allmulticast mode [ 1580.582802][T11110] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1580.599388][T11110] usb 8-1: Product: syz [ 1580.607770][T11110] usb 8-1: Manufacturer: syz [ 1580.612601][T11110] usb 8-1: SerialNumber: syz [ 1580.641803][T27618] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1580.649946][T27618] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1580.697494][T27629] wlan0 speed is unknown, defaulting to 1000 [ 1580.704393][T27629] netdevsim0 speed is unknown, defaulting to 1000 [ 1580.910506][T27629] netlink: 'syz.9.5735': attribute type 16 has an invalid length. [ 1580.918435][T27629] netlink: 'syz.9.5735': attribute type 17 has an invalid length. [ 1580.931553][T27629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1580.990319][T27629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=27629 comm=syz.9.5735 [ 1581.089269][T27635] netlink: 5164 bytes leftover after parsing attributes in process `syz.9.5735'. [ 1581.176898][T27618] sock: sock_set_timeout: `syz.7.5731' (pid 27618) tries to set negative timeout [ 1581.192420][T27618] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1581.210210][T27618] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1581.437966][T11110] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1581.449742][T27618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.528352][T27618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.541371][T11110] aqc111 8-1:1.105: probe with driver aqc111 failed with error -32 [ 1581.659599][T26323] uvcvideo 5-1:220.1: Unknown video format 40000000-0000-2800-0000-000000000000 [ 1581.741640][T26323] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1581.792359][T26323] uvcvideo 5-1:220.0: No valid video chain found. [ 1581.867921][T26323] usb 5-1: selecting invalid altsetting 0 [ 1581.916963][T26323] usb 5-1: selecting invalid altsetting 0 [ 1582.857133][T26323] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1582.889842][T26323] usb 5-1: USB disconnect, device number 91 [ 1583.006615][T11110] usb 8-1: USB disconnect, device number 116 [ 1583.036008][T27657] ip_tables: iptables: counters copy to user failed while replacing table [ 1583.617233][T27669] syzkaller0: entered promiscuous mode [ 1583.669972][T27669] syzkaller0: entered allmulticast mode [ 1584.100631][T27678] netlink: 'syz.9.5745': attribute type 10 has an invalid length. [ 1584.479154][T27678] team0: Port device geneve0 added [ 1584.536253][T19460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.568306][T19460] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.696034][T19460] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.028344][T19460] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.331135][T27686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5749'. [ 1585.896155][T26323] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1586.150804][T26323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.248826][T26323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.344286][T26323] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1586.435515][T26323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.577576][T26323] usb 10-1: config 0 descriptor?? [ 1586.599537][T27695] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 1587.835662][T27720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5757'. [ 1587.850238][T27720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=27720 comm=syz.4.5757 [ 1587.865969][T27720] netlink: 'syz.4.5757': attribute type 12 has an invalid length. [ 1588.019415][T27718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=27718 comm=syz.0.5756 [ 1588.039183][ T29] audit: type=1400 audit(1786674153.493:1761): avc: denied { write } for pid=27690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1588.101680][T27718] vivid-000: disconnect [ 1588.110865][T27715] vivid-000: reconnect [ 1588.186568][T26323] usb 10-1: string descriptor 0 read error: -22 [ 1588.288195][ T29] audit: type=1400 audit(1786674153.733:1762): avc: denied { write } for pid=27728 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1588.332742][T27730] syzkaller0: entered promiscuous mode [ 1588.353405][T27730] syzkaller0: entered allmulticast mode [ 1588.396273][T26323] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0027/input/input133 [ 1588.625207][T27738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1588.666886][T26323] uclogic 0003:256C:006D.0027: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 1588.813221][T26323] usb 10-1: USB disconnect, device number 9 [ 1588.841660][T27740] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1588.887566][T27739] fido_id[27739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1589.335026][T27744] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1589.368387][T27744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1589.454815][T27641] Set syz1 is full, maxelem 65536 reached [ 1589.651595][T27760] overlayfs: failed to resolve './file1': -2 [ 1589.836188][T26323] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1590.010901][T26323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1590.051742][T26323] usb 5-1: not running at top speed; connect to a high speed hub [ 1590.099764][T26323] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1590.132218][T26323] usb 5-1: config 0 has no interface number 0 [ 1590.152715][T27773] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5773'. [ 1590.163609][T26323] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1590.368995][T26323] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1590.398948][T26323] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1590.421694][T27776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1590.425514][T26323] usb 5-1: language id specifier not provided by device, defaulting to English [ 1590.488738][T26323] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1590.519108][T26323] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1590.542529][T26323] usb 5-1: Product: syz [ 1590.547485][T26323] usb 5-1: SerialNumber: syz [ 1590.581411][T26323] usb 5-1: config 0 descriptor?? [ 1590.822860][T26323] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input134 [ 1590.862635][T26323] usb 5-1: USB disconnect, device number 92 [ 1591.302038][T17587] libceph: connect (1)[c::]:6789 error -101 [ 1591.332850][T17587] libceph: mon0 (1)[c::]:6789 connect error [ 1591.408859][T17587] libceph: connect (1)[c::]:6789 error -101 [ 1591.420020][T27786] ceph: No mds server is up or the cluster is laggy [ 1591.430367][T17587] libceph: mon0 (1)[c::]:6789 connect error [ 1591.496221][T26324] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1591.737738][T26324] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1591.753147][T26324] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1591.762657][T26324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.770987][T26324] usb 6-1: Product: syz [ 1591.775302][T26324] usb 6-1: Manufacturer: syz [ 1591.780419][T26324] usb 6-1: SerialNumber: syz [ 1591.962531][T27801] overlayfs: failed to resolve './file0': -2 [ 1592.065092][T26324] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1592.131128][T26324] usb 6-1: disable ehci-hcd to run US-144 [ 1592.153264][T26324] usb 6-1: USB disconnect, device number 27 [ 1592.219677][T25823] udevd[25823]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1593.227537][T27824] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1593.236752][T27824] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1594.352673][ T29] audit: type=1400 audit(1786674159.803:1763): avc: denied { listen } for pid=27836 comm="syz.0.5792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1594.442970][ T29] audit: type=1400 audit(1786674159.893:1764): avc: denied { setattr } for pid=27836 comm="syz.0.5792" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1594.708794][T27844] ALSA: mixer_oss: invalid OSS volume '' [ 1594.729236][T27780] Set syz1 is full, maxelem 65536 reached [ 1595.113617][T27850] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1595.120172][T27850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1595.191425][T27850] vhci_hcd vhci_hcd.0: Device attached [ 1595.319072][T27860] overlayfs: missing 'lowerdir' [ 1595.330246][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1595.346105][T26324] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1595.445929][T26324] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1595.517537][T26323] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 1595.801732][T27871] FAULT_INJECTION: forcing a failure. [ 1595.801732][T27871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1595.907069][T27871] CPU: 0 UID: 0 PID: 27871 Comm: syz.0.5802 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.907101][T27871] Tainted: [L]=SOFTLOCKUP [ 1595.907108][T27871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1595.907119][T27871] Call Trace: [ 1595.907125][T27871] [ 1595.907133][T27871] dump_stack_lvl+0x100/0x190 [ 1595.907163][T27871] should_fail_ex.cold+0x5/0xa [ 1595.907191][T27871] _copy_to_user+0x32/0xd0 [ 1595.907218][T27871] simple_read_from_buffer+0xcb/0x170 [ 1595.907242][T27871] proc_fail_nth_read+0x1af/0x230 [ 1595.907271][T27871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1595.907303][T27871] ? rw_verify_area+0xce/0x6d0 [ 1595.907328][T27871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1595.907358][T27871] vfs_read+0x1e4/0xb40 [ 1595.907389][T27871] ? __pfx_vfs_read+0x10/0x10 [ 1595.907416][T27871] ? __fget_files+0x215/0x3d0 [ 1595.907447][T27871] ? __fget_files+0x21f/0x3d0 [ 1595.907473][T27871] ksys_read+0x12a/0x250 [ 1595.907490][T27871] ? __pfx_ksys_read+0x10/0x10 [ 1595.907525][T27871] do_syscall_64+0x115/0x870 [ 1595.907549][T27871] ? clear_bhb_loop+0x70/0xc0 [ 1595.907572][T27871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.907590][T27871] RIP: 0033:0x7f17f255e90e [ 1595.907606][T27871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1595.907621][T27871] RSP: 002b:00007f17f33c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1595.907639][T27871] RAX: ffffffffffffffda RBX: 00007f17f33c96c0 RCX: 00007f17f255e90e [ 1595.907651][T27871] RDX: 000000000000000f RSI: 00007f17f33c90a0 RDI: 0000000000000005 [ 1595.907662][T27871] RBP: 00007f17f33c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.907673][T27871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.907683][T27871] R13: 00007f17f2826128 R14: 00007f17f2826090 R15: 00007ffdbb37ceb8 [ 1595.907709][T27871] [ 1596.195967][T26323] usb 10-1: config 0 has no interfaces? [ 1596.462218][T26323] usb 10-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1596.538319][T26323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.558622][T27873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5803'. [ 1596.622880][T26323] usb 10-1: config 0 descriptor?? [ 1597.807422][T27895] overlayfs: missing 'lowerdir' [ 1597.862245][T27893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5809'. [ 1597.903517][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5809'. [ 1597.966491][T27893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5809'. [ 1597.982083][T25728] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.016403][T27905] ALSA: mixer_oss: invalid OSS volume '' [ 1598.027608][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5809'. [ 1598.037315][T25728] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.087490][T25728] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.144460][T25728] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.384816][T27912] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5815'. [ 1598.422025][T27912] FAULT_INJECTION: forcing a failure. [ 1598.422025][T27912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.479596][T27912] CPU: 0 UID: 0 PID: 27912 Comm: syz.5.5815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1598.479618][T27912] Tainted: [L]=SOFTLOCKUP [ 1598.479622][T27912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1598.479628][T27912] Call Trace: [ 1598.479632][T27912] [ 1598.479638][T27912] dump_stack_lvl+0x100/0x190 [ 1598.479656][T27912] should_fail_ex.cold+0x5/0xa [ 1598.479671][T27912] _copy_to_user+0x32/0xd0 [ 1598.479697][T27912] simple_read_from_buffer+0xcb/0x170 [ 1598.479711][T27912] proc_fail_nth_read+0x1af/0x230 [ 1598.479729][T27912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.479748][T27912] ? rw_verify_area+0xce/0x6d0 [ 1598.479763][T27912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.479781][T27912] vfs_read+0x1e4/0xb40 [ 1598.479799][T27912] ? __pfx_vfs_read+0x10/0x10 [ 1598.479818][T27912] ? __fget_files+0x215/0x3d0 [ 1598.479833][T27912] ? __fget_files+0x21f/0x3d0 [ 1598.479848][T27912] ksys_read+0x12a/0x250 [ 1598.479857][T27912] ? __pfx_ksys_read+0x10/0x10 [ 1598.479885][T27912] do_syscall_64+0x115/0x870 [ 1598.479908][T27912] ? clear_bhb_loop+0x70/0xc0 [ 1598.479930][T27912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.479949][T27912] RIP: 0033:0x7f2f4cf5e90e [ 1598.479961][T27912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1598.479972][T27912] RSP: 002b:00007f2f4dea8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1598.479983][T27912] RAX: ffffffffffffffda RBX: 00007f2f4dea96c0 RCX: 00007f2f4cf5e90e [ 1598.479990][T27912] RDX: 000000000000000f RSI: 00007f2f4dea90a0 RDI: 0000000000000003 [ 1598.479996][T27912] RBP: 00007f2f4dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.480003][T27912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.480009][T27912] R13: 00007f2f4d226038 R14: 00007f2f4d225fa0 R15: 00007ffc520bfe48 [ 1598.480024][T27912] [ 1598.757215][T17587] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 1598.905921][T17587] usb 8-1: device descriptor read/64, error -71 [ 1599.454101][T17587] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 1599.497854][T27914] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1599.569494][T26323] usb 10-1: USB disconnect, device number 10 [ 1599.588424][T27851] vhci_hcd: connection reset by peer [ 1599.626116][T17587] usb 8-1: device descriptor read/64, error -71 [ 1599.842400][T17587] usb usb8-port1: attempt power cycle [ 1600.267421][T17587] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 1600.383182][T17587] usb 8-1: device descriptor read/8, error -71 [ 1600.398771][T27921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1600.806792][T27852] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1600.852510][T27923] bond1: (slave ip6erspan0): making interface the new active one [ 1600.868417][T17587] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1600.894934][ T1099] vhci_hcd vhci_hcd.9: stop threads [ 1600.949427][ T1099] vhci_hcd vhci_hcd.9: release socket [ 1600.969708][T27923] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1600.997387][ T1099] vhci_hcd vhci_hcd.9: disconnect device [ 1601.103882][T26324] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1601.173186][T17587] usb 8-1: device descriptor read/8, error -71 [ 1601.338477][T17587] usb usb8-port1: unable to enumerate USB device [ 1602.034371][T27931] netlink: zone id is out of range [ 1602.039629][T27931] netlink: zone id is out of range [ 1602.044769][T27931] netlink: zone id is out of range [ 1602.114170][T27932] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5819'. [ 1602.713663][T27937] FAULT_INJECTION: forcing a failure. [ 1602.713663][T27937] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.888974][T27938] overlayfs: missing 'lowerdir' [ 1602.915892][T27937] CPU: 1 UID: 0 PID: 27937 Comm: syz.4.5823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.915922][T27937] Tainted: [L]=SOFTLOCKUP [ 1602.915929][T27937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1602.915938][T27937] Call Trace: [ 1602.915944][T27937] [ 1602.915951][T27937] dump_stack_lvl+0x100/0x190 [ 1602.915979][T27937] should_fail_ex.cold+0x5/0xa [ 1602.915996][T27937] should_failslab+0xc2/0x120 [ 1602.916012][T27937] __kvmalloc_node_noprof+0x116/0x970 [ 1602.916026][T27937] ? hash_ip_create+0x1274/0x1b10 [ 1602.916042][T27937] hash_ip_create+0x1274/0x1b10 [ 1602.916059][T27937] ? __pfx_hash_ip_create+0x10/0x10 [ 1602.916074][T27937] ? __pfx_hash_ip_create+0x10/0x10 [ 1602.916088][T27937] ? ip_set_create+0x6c4/0x1510 [ 1602.916103][T27937] ? ip_set_create+0x59a/0x1510 [ 1602.916118][T27937] ip_set_create+0x6c4/0x1510 [ 1602.916137][T27937] ? __pfx_ip_set_create+0x10/0x10 [ 1602.916161][T27937] ? __rcu_read_unlock+0x26a/0x5e0 [ 1602.916175][T27937] ? rcu_is_watching+0x12/0xc0 [ 1602.916195][T27937] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 1602.916215][T27937] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1602.916231][T27937] ? __lock_acquire+0x49f/0x1a40 [ 1602.916256][T27937] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1602.916273][T27937] netlink_rcv_skb+0x159/0x420 [ 1602.916284][T27937] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1602.916300][T27937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1602.916317][T27937] ? ns_capable+0xd2/0xf0 [ 1602.916334][T27937] nfnetlink_rcv+0x1b3/0x440 [ 1602.916356][T27937] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1602.916383][T27937] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1602.916403][T27937] ? __rcu_read_unlock+0x27f/0x5e0 [ 1602.916419][T27937] netlink_unicast+0x585/0x850 [ 1602.916433][T27937] ? __pfx_netlink_unicast+0x10/0x10 [ 1602.916448][T27937] netlink_sendmsg+0x8b0/0xda0 [ 1602.916462][T27937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.916474][T27937] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1602.916492][T27937] ____sys_sendmsg+0xa4d/0xbe0 [ 1602.916509][T27937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.916522][T27937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1602.916540][T27937] ? do_raw_spin_unlock+0x145/0x1e0 [ 1602.916556][T27937] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1602.916570][T27937] ? debug_object_assert_init+0x1c4/0x310 [ 1602.916587][T27937] ___sys_sendmsg+0x190/0x1e0 [ 1602.916599][T27937] ? __pfx____sys_sendmsg+0x10/0x10 [ 1602.916608][T27937] ? __lock_acquire+0x49f/0x1a40 [ 1602.916637][T27937] __sys_sendmsg+0x160/0x210 [ 1602.916651][T27937] ? __pfx___sys_sendmsg+0x10/0x10 [ 1602.916672][T27937] do_syscall_64+0x115/0x870 [ 1602.916686][T27937] ? clear_bhb_loop+0x70/0xc0 [ 1602.916701][T27937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.916713][T27937] RIP: 0033:0x7f5b3919e0d9 [ 1602.916723][T27937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.916734][T27937] RSP: 002b:00007f5b3a145028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1602.916745][T27937] RAX: ffffffffffffffda RBX: 00007f5b39425fa0 RCX: 00007f5b3919e0d9 [ 1602.916752][T27937] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1602.916758][T27937] RBP: 00007f5b3a145090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.916765][T27937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.916771][T27937] R13: 00007f5b39426038 R14: 00007f5b39425fa0 R15: 00007ffdb052c308 [ 1602.916785][T27937] [ 1604.640273][T27946] block nbd9: shutting down sockets [ 1606.750074][T27979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1606.756669][T27979] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1606.797044][T27979] vhci_hcd vhci_hcd.0: Device attached [ 1606.881440][T27979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.901628][T18899] block nbd9: Receive control failed (result -32) [ 1606.910708][T27979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.915052][T27982] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 1606.928415][T27992] overlayfs: missing 'workdir' [ 1606.929808][T18899] block nbd9: Receive control failed (result -32) [ 1606.965883][ T5872] vhci_hcd vhci_hcd.0: stop threads [ 1606.993293][ T5872] vhci_hcd vhci_hcd.0: release socket [ 1607.002542][ T5718] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1607.048836][ T5872] vhci_hcd vhci_hcd.0: disconnect device [ 1607.055872][T26323] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1607.065981][ T5718] usb 33-1: new full-speed USB device number 27 using vhci_hcd [ 1607.073633][ T5718] usb 33-1: enqueue for inactive port 0 [ 1607.172174][T27994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5839'. [ 1607.225881][T26323] usb 6-1: Using ep0 maxpacket: 32 [ 1607.225945][ T5718] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1607.246593][T26323] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1607.256097][T27995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=27995 comm=syz.4.5839 [ 1607.280135][T26323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.295301][T26323] usb 6-1: Product: syz [ 1607.306668][T26323] usb 6-1: Manufacturer: syz [ 1607.322094][T26323] usb 6-1: SerialNumber: syz [ 1607.658458][T26323] usb 6-1: palm_os_4_probe - error -110 getting connection info [ 1607.723060][T26323] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1607.838043][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.845080][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.896534][ T1304] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1607.943800][T26323] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1607.965133][T26323] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1608.157045][T25728] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.264520][T25728] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.388542][T25728] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.563273][T25728] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.763599][T27989] fuse: Bad value for 'fd' [ 1608.906286][T18899] block nbd10: Receive control failed (result -32) [ 1608.917085][ T5609] block nbd10: Receive control failed (result -32) [ 1608.934145][T27989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.100867][T27989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.134729][T28014] binfmt_misc: register: failed to install interpreter file ./file0 [ 1609.401007][ T29] audit: type=1400 audit(1786674174.853:1765): avc: denied { name_bind } for pid=28026 comm="syz.0.5848" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1609.415569][T28030] overlayfs: missing 'workdir' [ 1609.534077][T28034] netlink: zone id is out of range [ 1609.539374][T28034] netlink: zone id is out of range [ 1609.544547][T28034] netlink: zone id is out of range [ 1609.595211][T28035] FAULT_INJECTION: forcing a failure. [ 1609.595211][T28035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.618379][T28035] CPU: 1 UID: 0 PID: 28035 Comm: syz.0.5851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1609.618410][T28035] Tainted: [L]=SOFTLOCKUP [ 1609.618417][T28035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1609.618428][T28035] Call Trace: [ 1609.618435][T28035] [ 1609.618443][T28035] dump_stack_lvl+0x100/0x190 [ 1609.618472][T28035] should_fail_ex.cold+0x5/0xa [ 1609.618497][T28035] _copy_from_user+0x2e/0xd0 [ 1609.618525][T28035] kstrtouint_from_user+0xd6/0x1d0 [ 1609.618545][T28035] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1609.618564][T28035] ? __lock_acquire+0x49f/0x1a40 [ 1609.618590][T28035] ? irqentry_exit+0x24d/0xa00 [ 1609.618622][T28035] proc_fail_nth_write+0x83/0x220 [ 1609.618643][T28035] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1609.618669][T28035] vfs_write+0x2aa/0x1050 [ 1609.618699][T28035] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1609.618720][T28035] ? __pfx_vfs_write+0x10/0x10 [ 1609.618748][T28035] ? __fget_files+0x215/0x3d0 [ 1609.618774][T28035] ? __fget_files+0x21f/0x3d0 [ 1609.618800][T28035] ksys_write+0x12a/0x250 [ 1609.618818][T28035] ? __pfx_ksys_write+0x10/0x10 [ 1609.618848][T28035] do_syscall_64+0x115/0x870 [ 1609.618871][T28035] ? clear_bhb_loop+0x70/0xc0 [ 1609.618895][T28035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.618914][T28035] RIP: 0033:0x7f17f255e90e [ 1609.618931][T28035] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1609.618948][T28035] RSP: 002b:00007f17f33c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1609.618966][T28035] RAX: ffffffffffffffda RBX: 00007f17f33c96c0 RCX: 00007f17f255e90e [ 1609.618979][T28035] RDX: 0000000000000001 RSI: 00007f17f33c90a0 RDI: 0000000000000005 [ 1609.618990][T28035] RBP: 00007f17f33c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.619001][T28035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.619012][T28035] R13: 00007f17f2826128 R14: 00007f17f2826090 R15: 00007ffdbb37ceb8 [ 1609.619035][T28035] [ 1609.929175][T18899] block nbd11: Receive control failed (result -32) [ 1609.945081][T18899] Bluetooth: hci1: command 0x0406 tx timeout [ 1609.956527][ T5609] block nbd11: Receive control failed (result -32) [ 1610.488749][T26323] usb 6-1: USB disconnect, device number 28 [ 1611.257426][T26323] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1611.391994][T26323] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1611.516801][T26323] visor 6-1:1.0: device disconnected [ 1611.558039][ T29] audit: type=1400 audit(1786674177.013:1766): avc: denied { map } for pid=28052 comm="syz.9.5856" path="socket:[121225]" dev="sockfs" ino=121225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1611.591060][ T29] audit: type=1400 audit(1786674177.043:1767): avc: denied { read } for pid=28052 comm="syz.9.5856" path="socket:[121225]" dev="sockfs" ino=121225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1611.852973][T28062] ALSA: mixer_oss: invalid OSS volume '' [ 1612.388538][T28065] overlayfs: failed to resolve './file0': -2 [ 1612.581598][T28069] overlayfs: missing 'workdir' [ 1612.659080][T28068] overlayfs: failed to resolve './file0': -2 [ 1612.671794][T28072] netlink: zone id is out of range [ 1612.676978][T28072] netlink: zone id is out of range [ 1612.682118][T28072] netlink: zone id is out of range [ 1612.689748][T28072] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5863'. [ 1612.824803][T28078] jffs2: notice: (28078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1612.861360][ T29] audit: type=1400 audit(1786674178.303:1768): avc: denied { write } for pid=28076 comm="syz.9.5865" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1612.966098][T23921] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1613.107944][T28085] netlink: zone id is out of range [ 1613.113100][T28085] netlink: zone id is out of range [ 1613.118376][T28085] netlink: zone id is out of range [ 1613.212662][T23921] usb 5-1: Using ep0 maxpacket: 8 [ 1613.386563][T28085] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5867'. [ 1614.010067][T23921] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1614.018835][T23921] usb 5-1: config 0 has no interface number 0 [ 1614.024978][T23921] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1614.036598][T23921] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1614.046481][T23921] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1614.058548][T23921] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1614.067685][T23921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.079266][T23921] usb 5-1: Product: syz [ 1614.083850][T23921] usb 5-1: Manufacturer: syz [ 1614.088563][T23921] usb 5-1: SerialNumber: syz [ 1614.095441][T23921] usb 5-1: config 0 descriptor?? [ 1614.101487][T28073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1614.417727][T28105] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1614.666685][T23921] ath6kl: Failed to submit usb control message: -71 [ 1614.713806][T23921] ath6kl: unable to send the bmi data to the device: -71 [ 1614.750192][T23921] ath6kl: Unable to send get target info: -71 [ 1614.850542][T23921] ath6kl: Failed to init ath6kl core: -71 [ 1614.886378][T23921] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1614.953795][T23921] usb 5-1: USB disconnect, device number 93 [ 1615.414659][T28114] netlink: zone id is out of range [ 1615.419871][T28114] netlink: zone id is out of range [ 1615.425052][T28114] netlink: zone id is out of range [ 1615.502829][T28115] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 1616.300070][T28120] jffs2: notice: (28120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1616.354975][T28122] wlan0 speed is unknown, defaulting to 1000 [ 1616.363092][T28122] netdevsim0 speed is unknown, defaulting to 1000 [ 1616.607981][T25137] block nbd12: Receive control failed (result -32) [ 1616.623188][T27387] block nbd12: Receive control failed (result -32) [ 1616.750977][T28120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5877'. [ 1616.811765][T28144] overlayfs: failed to resolve './file0': -2 [ 1616.821110][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 1616.841704][T28120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5877'. [ 1616.892759][ T29] audit: type=1400 audit(1786674182.343:1769): avc: denied { write } for pid=28119 comm="syz.5.5877" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1616.973363][T28150] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1616.979917][T28150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1617.006594][T28150] vhci_hcd vhci_hcd.0: Device attached [ 1617.054570][T28152] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1617.086685][T10446] vhci_hcd vhci_hcd.9: stop threads [ 1617.105606][T10446] vhci_hcd vhci_hcd.9: release socket [ 1617.142643][T10446] vhci_hcd vhci_hcd.9: disconnect device [ 1617.186814][T26323] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1617.643177][T28163] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1617.685268][T28170] netlink: zone id is out of range [ 1617.690509][T28170] netlink: zone id is out of range [ 1617.695654][T28170] netlink: zone id is out of range [ 1617.763472][T28173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5891'. [ 1619.559933][T28183] ALSA: mixer_oss: invalid OSS volume '' [ 1620.273105][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5897'. [ 1621.940336][T28200] Set syz1 is full, maxelem 65536 reached [ 1623.634946][T28237] ALSA: mixer_oss: invalid OSS volume '' [ 1624.489089][T28243] FAULT_INJECTION: forcing a failure. [ 1624.489089][T28243] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.504276][T28243] CPU: 0 UID: 0 PID: 28243 Comm: syz.9.5914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1624.504309][T28243] Tainted: [L]=SOFTLOCKUP [ 1624.504315][T28243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1624.504326][T28243] Call Trace: [ 1624.504333][T28243] [ 1624.504341][T28243] dump_stack_lvl+0x100/0x190 [ 1624.504371][T28243] should_fail_ex.cold+0x5/0xa [ 1624.504397][T28243] should_failslab+0xc2/0x120 [ 1624.504422][T28243] __kmalloc_cache_noprof+0x91/0x6c0 [ 1624.504442][T28243] ? genl_start+0x1e8/0x970 [ 1624.504468][T28243] genl_start+0x1e8/0x970 [ 1624.504493][T28243] __netlink_dump_start+0x60e/0x990 [ 1624.504515][T28243] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1624.504540][T28243] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1624.504570][T28243] ? __pfx_genl_get_cmd+0x10/0x10 [ 1624.504589][T28243] ? __pfx_genl_start+0x10/0x10 [ 1624.504607][T28243] ? __pfx_genl_dumpit+0x10/0x10 [ 1624.504626][T28243] ? __pfx_genl_done+0x10/0x10 [ 1624.504649][T28243] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1624.504680][T28243] ? ___sys_sendmsg+0x190/0x1e0 [ 1624.504696][T28243] ? __radix_tree_lookup+0x217/0x2b0 [ 1624.504723][T28243] genl_rcv_msg+0x471/0x800 [ 1624.504747][T28243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1624.504770][T28243] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 1624.504805][T28243] ? __lock_acquire+0x49f/0x1a40 [ 1624.504832][T28243] netlink_rcv_skb+0x159/0x420 [ 1624.504851][T28243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1624.504875][T28243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1624.504905][T28243] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1624.504937][T28243] genl_rcv+0x28/0x40 [ 1624.504957][T28243] netlink_unicast+0x585/0x850 [ 1624.504980][T28243] ? __pfx_netlink_unicast+0x10/0x10 [ 1624.505007][T28243] netlink_sendmsg+0x8b0/0xda0 [ 1624.505031][T28243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1624.505053][T28243] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1624.505097][T28243] ____sys_sendmsg+0xa4d/0xbe0 [ 1624.505123][T28243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1624.505144][T28243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1624.505180][T28243] ___sys_sendmsg+0x190/0x1e0 [ 1624.505197][T28243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1624.505212][T28243] ? __lock_acquire+0x49f/0x1a40 [ 1624.505231][T28243] ? get_pid_task+0x106/0x250 [ 1624.505271][T28243] __sys_sendmsg+0x160/0x210 [ 1624.505292][T28243] ? __pfx___sys_sendmsg+0x10/0x10 [ 1624.505322][T28243] do_syscall_64+0x115/0x870 [ 1624.505343][T28243] ? clear_bhb_loop+0x70/0xc0 [ 1624.505365][T28243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.505382][T28243] RIP: 0033:0x7f821b39e0d9 [ 1624.505398][T28243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.505413][T28243] RSP: 002b:00007f821c21f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.505429][T28243] RAX: ffffffffffffffda RBX: 00007f821b625fa0 RCX: 00007f821b39e0d9 [ 1624.505439][T28243] RDX: 0000000000040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 1624.505449][T28243] RBP: 00007f821c21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.505459][T28243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.505468][T28243] R13: 00007f821b626038 R14: 00007f821b625fa0 R15: 00007ffcfa258218 [ 1624.505491][T28243] [ 1624.851381][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5915'. [ 1625.180841][ T29] audit: type=1400 audit(1786674190.623:1770): avc: denied { accept } for pid=28241 comm="syz.7.5915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1625.284861][T28253] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1625.644668][T28261] ALSA: mixer_oss: invalid OSS volume '' [ 1626.166002][T28256] netlink: 'syz.7.5919': attribute type 9 has an invalid length. [ 1627.002913][T27387] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 1627.058648][ T29] audit: type=1400 audit(1786674192.473:1771): avc: denied { accept } for pid=28255 comm="syz.9.5918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1627.613250][T28272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5921'. [ 1627.800000][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5920'. [ 1627.883520][T28285] ALSA: mixer_oss: invalid OSS volume '' [ 1627.985959][T26324] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1628.158682][T26324] usb 6-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 1628.192784][T26324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.554829][T26324] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 1628.711272][T25137] block nbd13: Receive control failed (result -32) [ 1628.712214][T27387] block nbd13: Receive control failed (result -32) [ 1628.841775][T28297] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1628.868813][T28297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.908397][T28297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.922009][T28299] netlink: zone id is out of range [ 1628.927295][T28299] netlink: zone id is out of range [ 1628.932470][T28299] netlink: zone id is out of range [ 1629.003864][T28300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5931'. [ 1629.539177][T28279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.638737][T28279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.936730][T28302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5932'. [ 1629.960621][T28302] macvlan0: entered promiscuous mode [ 1630.036977][T28302] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5932'. [ 1630.141801][T28303] bridge1: entered promiscuous mode [ 1630.162237][T28303] bridge1: entered allmulticast mode [ 1630.217130][T28303] team0: Port device bridge1 added [ 1631.045100][ T5718] usb 6-1: USB disconnect, device number 29 [ 1631.066239][ T2354] pvrusb2: control-write URB failure, status=-71 [ 1631.128998][ T2354] pvrusb2: Device being rendered inoperable [ 1631.239892][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1631.311286][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1631.372217][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1631.656201][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1631.685937][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1631.705978][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1631.872411][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 1631.915879][T28333] ALSA: mixer_oss: invalid OSS volume '' [ 1631.927798][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 1631.956388][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 1631.968206][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 1631.976619][ T2354] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1632.347879][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5942'. [ 1632.513443][ T2354] TUNER: Unable to find symbol tda829x_probe() [ 1632.542842][T28343] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1632.549376][T28343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1632.654906][T28343] vhci_hcd vhci_hcd.0: Device attached [ 1632.655400][ T2354] DVB: Unable to find symbol tda9887_attach() [ 1632.792645][ T2354] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 1632.837391][T26323] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1632.863094][ T2354] pvrusb2: Attached sub-driver tuner [ 1632.880001][T25137] block nbd14: Receive control failed (result -32) [ 1632.883813][T27387] block nbd14: Receive control failed (result -32) [ 1632.890166][T26324] usb 8-1: new low-speed USB device number 121 using dummy_hcd [ 1632.928356][ T2354] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1632.966019][T26323] usb 47-1: new full-speed USB device number 20 using vhci_hcd [ 1633.020326][ T2354] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1633.084414][T26324] usb 8-1: config 0 has no interfaces? [ 1633.142906][T26324] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1633.223762][T26324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.244190][T28354] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5946'. [ 1633.357783][T26324] usb 8-1: config 0 descriptor?? [ 1633.889080][T28359] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1635.628874][T28385] ALSA: mixer_oss: invalid OSS volume '' [ 1636.180174][T26324] usb 8-1: USB disconnect, device number 121 [ 1636.187852][T28344] vhci_hcd: connection reset by peer [ 1636.206101][T19460] vhci_hcd vhci_hcd.7: stop threads [ 1636.213140][T19460] vhci_hcd vhci_hcd.7: release socket [ 1636.253025][T19460] vhci_hcd vhci_hcd.7: disconnect device [ 1637.279274][T28407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5964'. [ 1637.316918][T28408] SELinux: policydb version 1476233647 does not match my version range 15-35 [ 1637.350203][T28408] SELinux: failed to load policy [ 1637.402220][T28410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1637.459505][ T29] audit: type=1400 audit(1786674202.913:1772): avc: denied { getopt } for pid=28405 comm="syz.7.5962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1637.567708][T28411] batadv0: entered promiscuous mode [ 1637.576417][T28411] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1637.600394][T28411] SELinux: failed to load policy [ 1637.882691][ T29] audit: type=1400 audit(1786674203.333:1773): avc: denied { read } for pid=28413 comm="syz.9.5975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1637.903338][T28414] netlink: zone id is out of range [ 1637.940099][T25137] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 1637.955650][T28414] netlink: get zone limit has 4 unknown bytes [ 1638.736319][T26323] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1638.989138][T28324] Set syz1 is full, maxelem 65536 reached [ 1639.859006][T28454] ALSA: mixer_oss: invalid OSS volume '' [ 1640.267253][T25137] block nbd15: Receive control failed (result -32) [ 1640.283818][T25137] block nbd15: Receive control failed (result -32) [ 1641.653418][ T29] audit: type=1326 audit(1786674207.103:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.7.5982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa013b9e0d9 code=0x0 [ 1641.686952][ T29] audit: type=1326 audit(1786674207.133:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.7.5982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa013b9e0d9 code=0x0 [ 1643.009446][T28476] Set syz1 is full, maxelem 65536 reached [ 1643.395111][T28495] ima: policy update failed [ 1644.160873][T11223] Bluetooth: hci4: Frame reassembly failed (-84) [ 1644.169392][ T29] audit: type=1802 audit(1786674209.523:1776): pid=28495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.5986" res=0 errno=0 [ 1644.705207][T28517] netlink: 144 bytes leftover after parsing attributes in process `syz.9.5995'. [ 1646.033602][ T29] audit: type=1400 audit(1786674211.413:1777): avc: denied { watch } for pid=28522 comm="syz.9.5997" path="/proc/365/fdinfo" dev="proc" ino=124216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1646.089455][T25137] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1646.165890][T25137] Bluetooth: hci3: command 0x0406 tx timeout [ 1646.601729][ T29] audit: type=1400 audit(1786674211.433:1778): avc: denied { watch_sb watch_reads } for pid=28522 comm="syz.9.5997" path="/proc/365/fdinfo" dev="proc" ino=124216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1646.779371][T28537] syz.0.5998: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1646.793677][T28537] CPU: 1 UID: 0 PID: 28537 Comm: syz.0.5998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.793713][T28537] Tainted: [L]=SOFTLOCKUP [ 1646.793721][T28537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1646.793735][T28537] Call Trace: [ 1646.793744][T28537] [ 1646.793754][T28537] dump_stack_lvl+0x100/0x190 [ 1646.793783][T28537] warn_alloc.cold+0x94/0xa8 [ 1646.793803][T28537] ? __pfx_warn_alloc+0x10/0x10 [ 1646.793824][T28537] ? irqentry_exit+0x24d/0xa00 [ 1646.793850][T28537] ? __pfx___schedule+0x10/0x10 [ 1646.793874][T28537] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1646.793900][T28537] ? preempt_schedule_common+0x42/0xc0 [ 1646.793923][T28537] ? preempt_schedule_thunk+0x16/0x40 [ 1646.793944][T28537] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1646.793970][T28537] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1646.793993][T28537] ? preempt_schedule_irq+0x7b/0x90 [ 1646.794013][T28537] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1646.794035][T28537] ? __pfx___mutex_lock+0x10/0x10 [ 1646.794054][T28537] ? irqentry_exit+0x24d/0xa00 [ 1646.794080][T28537] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1646.794103][T28537] __vmalloc_node_noprof+0xad/0xf0 [ 1646.794124][T28537] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1646.794149][T28537] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1646.794174][T28537] ? do_vfs_ioctl+0x226/0x13e0 [ 1646.794199][T28537] dvb_usercopy+0x167/0x340 [ 1646.794219][T28537] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1646.794244][T28537] ? __pfx_dvb_usercopy+0x10/0x10 [ 1646.794273][T28537] ? selinux_file_ioctl+0x13b/0x290 [ 1646.794296][T28537] ? selinux_file_ioctl+0xb6/0x290 [ 1646.794320][T28537] dvb_demux_ioctl+0x29/0x40 [ 1646.794341][T28537] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1646.794362][T28537] __x64_sys_ioctl+0x18e/0x210 [ 1646.794385][T28537] do_syscall_64+0x115/0x870 [ 1646.794404][T28537] ? clear_bhb_loop+0x70/0xc0 [ 1646.794422][T28537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.794438][T28537] RIP: 0033:0x7f17f259e0d9 [ 1646.794461][T28537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.794477][T28537] RSP: 002b:00007f17f33a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.794494][T28537] RAX: ffffffffffffffda RBX: 00007f17f2826180 RCX: 00007f17f259e0d9 [ 1646.794505][T28537] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 1646.794515][T28537] RBP: 00007f17f2635024 R08: 0000000000000000 R09: 0000000000000000 [ 1646.794526][T28537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1646.794536][T28537] R13: 00007f17f2826218 R14: 00007f17f2826180 R15: 00007ffdbb37ceb8 [ 1646.794559][T28537] [ 1646.794593][T28537] Mem-Info: [ 1647.058946][T28537] active_anon:13918 inactive_anon:10 isolated_anon:0 [ 1647.058946][T28537] active_file:946 inactive_file:63382 isolated_file:0 [ 1647.058946][T28537] unevictable:0 dirty:121 writeback:0 [ 1647.058946][T28537] slab_reclaimable:13098 slab_unreclaimable:121406 [ 1647.058946][T28537] mapped:32781 shmem:546 pagetables:1912 [ 1647.058946][T28537] sec_pagetables:0 bounce:0 [ 1647.058946][T28537] kernel_misc_reclaimable:0 [ 1647.058946][T28537] free:1253755 free_pcp:13849 free_cma:0 [ 1647.104339][T28537] Node 0 active_anon:55672kB inactive_anon:40kB active_file:3784kB inactive_file:253280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131124kB dirty:484kB writeback:0kB shmem:2184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14520kB pagetables:7480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1647.138619][T28537] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1647.170960][T28537] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.200860][T28537] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1647.206837][T28537] Node 0 DMA32 free:1055516kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55672kB inactive_anon:40kB active_file:3784kB inactive_file:253280kB unevictable:0kB writepending:484kB zspages:612kB present:3129332kB managed:2532260kB mlocked:0kB bounce:0kB free_pcp:55368kB local_pcp:37740kB free_cma:0kB [ 1647.240135][T28537] lowmem_reserve[]: 0 0 0 0 0 [ 1647.245022][T28537] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.274339][T28537] lowmem_reserve[]: 0 0 0 0 0 [ 1647.279340][T28537] Node 1 Normal free:3944148kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.310707][T28537] lowmem_reserve[]: 0 0 0 0 0 [ 1647.315599][T28537] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1647.331251][T28537] Node 0 DMA32: 2838*4kB (UM) 1880*8kB (UM) 1262*16kB (UM) 1071*32kB (UME) 475*64kB (UME) 381*128kB (UM) 162*256kB (UME) 46*512kB (UME) 19*1024kB (UME) 6*2048kB (ME) 195*4096kB (UM) = 1055512kB [ 1647.351077][T28537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1647.363047][T28537] Node 1 Normal: 1*4kB (U) 4*8kB (U) 7*16kB (UM) 6*32kB (UM) 8*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 960*4096kB (UM) = 3944148kB [ 1647.380397][T28537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.389981][T28537] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1647.399309][T28537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.408902][T28537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.418220][T28537] 64876 total pagecache pages [ 1647.422937][T28537] 4 pages in swap cache [ 1647.427148][T28537] Free swap = 124712kB [ 1647.431334][T28537] Total swap = 124996kB [ 1647.435524][T28537] 2097051 pages RAM [ 1647.439390][T28537] 0 pages HighMem/MovableOnly [ 1647.444081][T28537] 432275 pages reserved [ 1647.448282][T28537] 0 pages cma reserved [ 1647.548305][T28537] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1647.567563][T28537] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1648.372590][T28552] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6006'. [ 1648.411336][T28553] overlayfs: missing 'lowerdir' [ 1648.494190][T28555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6007'. [ 1648.760370][T28560] ALSA: mixer_oss: invalid OSS volume '' [ 1649.763452][T28563] batadv0: left promiscuous mode [ 1649.769268][T28563] macvlan0: left promiscuous mode [ 1649.782016][T28563] bridge1: left promiscuous mode [ 1649.787034][T28563] bridge1: left allmulticast mode [ 1651.278986][T28600] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6021'. [ 1651.351880][T28603] syzkaller1: entered promiscuous mode [ 1651.371443][T28603] syzkaller1: entered allmulticast mode [ 1651.398882][T28603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6022'. [ 1651.606016][ T5718] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1651.787170][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 1651.807632][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.847056][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.878626][ T5718] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1651.911731][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.936000][ T29] audit: type=1400 audit(1786674217.353:1779): avc: denied { append } for pid=28617 comm="syz.9.6028" name="uprobe_events" dev="tracefs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1651.980748][ T5718] usb 6-1: config 0 descriptor?? [ 1652.197544][T28626] ALSA: mixer_oss: invalid OSS volume '' [ 1652.537136][T28607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.598918][T28607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.160113][T28643] syzkaller0: entered promiscuous mode [ 1653.165755][T28643] syzkaller0: entered allmulticast mode [ 1653.201318][T28643] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1653.212533][T28643] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1653.221398][T23921] hid_parser_main: 430 callbacks suppressed [ 1653.221447][T23921] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1653.285929][T23921] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1653.312461][ T5718] usbhid 6-1:0.0: can't add hid device: -71 [ 1653.330315][ T5718] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1653.380691][ T5718] usb 6-1: USB disconnect, device number 30 [ 1653.458505][T28645] fido_id[28645]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1653.501726][T25137] block nbd16: Receive control failed (result -32) [ 1653.501762][T27387] block nbd16: Receive control failed (result -32) [ 1653.643347][T28652] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1653.723953][T28653] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1655.240268][T28667] overlayfs: missing 'lowerdir' [ 1655.528617][T28677] ALSA: mixer_oss: invalid OSS volume '' [ 1656.409447][T28674] Set syz1 is full, maxelem 65536 reached [ 1656.433837][T28676] netlink: zone id is out of range [ 1656.446253][T28676] netlink: zone id is out of range [ 1656.451451][T28676] netlink: zone id is out of range [ 1656.549501][T28678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6043'. [ 1657.256717][ T29] audit: type=1400 audit(1786674222.703:1780): avc: denied { read append } for pid=28682 comm="syz.4.6047" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1657.849966][T28692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1657.864753][T28696] FAULT_INJECTION: forcing a failure. [ 1657.864753][T28696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.876574][T28692] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1657.878743][T28696] CPU: 1 UID: 0 PID: 28696 Comm: syz.5.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.878769][T28696] Tainted: [L]=SOFTLOCKUP [ 1657.878775][T28696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1657.878784][T28696] Call Trace: [ 1657.878790][T28696] [ 1657.878796][T28696] dump_stack_lvl+0x100/0x190 [ 1657.878821][T28696] should_fail_ex.cold+0x5/0xa [ 1657.878842][T28696] _copy_from_iter+0x1f4/0x1690 [ 1657.878869][T28696] ? __pfx__copy_from_iter+0x10/0x10 [ 1657.878890][T28696] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1657.878920][T28696] copy_page_from_iter+0x238/0x300 [ 1657.878943][T28696] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 1657.878968][T28696] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1657.878984][T28696] ? unwind_get_return_address+0x59/0xa0 [ 1657.879006][T28696] ? find_held_lock+0x2b/0x80 [ 1657.879026][T28696] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1657.879050][T28696] tun_get_user+0x16d6/0x3c20 [ 1657.879075][T28696] ? __pfx_tun_get_user+0x10/0x10 [ 1657.879091][T28696] ? __file_has_perm+0x336/0x460 [ 1657.879111][T28696] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1657.879141][T28696] ? find_held_lock+0x2b/0x80 [ 1657.879155][T28696] ? tun_get+0x191/0x370 [ 1657.879168][T28696] ? tun_get+0x191/0x370 [ 1657.879188][T28696] tun_chr_write_iter+0xdc/0x200 [ 1657.879206][T28696] vfs_write+0x6ac/0x1050 [ 1657.879230][T28696] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1657.879249][T28696] ? __pfx_vfs_write+0x10/0x10 [ 1657.879270][T28696] ? find_held_lock+0x2b/0x80 [ 1657.879298][T28696] ksys_write+0x12a/0x250 [ 1657.879312][T28696] ? __pfx_ksys_write+0x10/0x10 [ 1657.879332][T28696] do_syscall_64+0x115/0x870 [ 1657.879358][T28696] ? clear_bhb_loop+0x70/0xc0 [ 1657.879377][T28696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.879393][T28696] RIP: 0033:0x7f2f4cf5e90e [ 1657.879407][T28696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1657.879422][T28696] RSP: 002b:00007f2f4dea8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1657.879438][T28696] RAX: ffffffffffffffda RBX: 00007f2f4dea96c0 RCX: 00007f2f4cf5e90e [ 1657.879448][T28696] RDX: 000000000000004e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 1657.879458][T28696] RBP: 00007f2f4dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.879467][T28696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.879477][T28696] R13: 00007f2f4d226038 R14: 00007f2f4d225fa0 R15: 00007ffc520bfe48 [ 1657.879498][T28696] [ 1658.089085][T28700] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1658.142473][T28700] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1658.213857][T28700] vhci_hcd vhci_hcd.0: Device attached [ 1658.249967][T28692] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1658.256262][T28692] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1658.275736][T28692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1658.281977][T28692] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1658.291373][T28692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1658.297795][T28692] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1658.307937][T28709] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1658.314521][T28709] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1658.326501][T28709] vhci_hcd vhci_hcd.0: Device attached [ 1658.330039][T28692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1658.338382][T28692] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1658.385927][T26323] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1658.447197][T26323] usb 43-1: new full-speed USB device number 21 using vhci_hcd [ 1658.493565][T28719] overlayfs: missing 'lowerdir' [ 1658.506616][ T1211] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1658.565954][ T1211] usb 47-1: new full-speed USB device number 21 using vhci_hcd [ 1658.606055][T26324] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 1658.646076][ T24] usb 8-1: new low-speed USB device number 122 using dummy_hcd [ 1658.785994][T26324] usb 6-1: config 0 has no interfaces? [ 1658.822184][T26324] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1658.881853][ T24] usb 8-1: config 0 has no interfaces? [ 1658.890505][T26324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.903233][ T24] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1658.921166][T26324] usb 6-1: config 0 descriptor?? [ 1658.926361][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.951521][ T24] usb 8-1: config 0 descriptor?? [ 1659.025224][T28724] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1660.084244][T27387] Bluetooth: hci2: command 0x0405 tx timeout [ 1660.221941][T28728] netlink: zone id is out of range [ 1660.227197][T28728] netlink: zone id is out of range [ 1660.232337][T28728] netlink: zone id is out of range [ 1660.264881][T28734] syzkaller0: left promiscuous mode [ 1660.270557][T28734] syzkaller0: left allmulticast mode [ 1660.280260][T28728] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6060'. [ 1660.317303][T27387] Bluetooth: hci1: command 0x0406 tx timeout [ 1660.324409][T25137] Bluetooth: hci0: command 0x0406 tx timeout [ 1660.331039][T25137] Bluetooth: hci5: command 0x0406 tx timeout [ 1660.340743][ T24] usb 6-1: USB disconnect, device number 31 [ 1660.392281][T28702] vhci_hcd: connection reset by peer [ 1660.399177][T26324] usb 8-1: USB disconnect, device number 122 [ 1660.409251][T28038] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.415555][T11223] vhci_hcd vhci_hcd.5: stop threads [ 1660.421791][T11223] vhci_hcd vhci_hcd.5: release socket [ 1660.427516][T11223] vhci_hcd vhci_hcd.5: disconnect device [ 1660.469091][T28737] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6061'. [ 1660.479151][T28710] vhci_hcd: connection reset by peer [ 1660.484864][T11223] vhci_hcd vhci_hcd.7: stop threads [ 1660.492386][T11223] vhci_hcd vhci_hcd.7: release socket [ 1660.753324][T11223] vhci_hcd vhci_hcd.7: disconnect device [ 1660.753672][T28739] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1661.587383][T28745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1662.165852][T28038] Bluetooth: hci2: command 0x0405 tx timeout [ 1662.273649][T28750] overlay: Unknown parameter './config' [ 1662.284896][ T29] audit: type=1400 audit(1786674227.733:1781): avc: denied { write } for pid=28748 comm="syz.7.6065" name="extensions" dev="configfs" ino=115335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1662.396313][T28038] Bluetooth: hci5: command 0x0406 tx timeout [ 1662.404822][T28038] Bluetooth: hci1: command 0x0406 tx timeout [ 1662.409388][T25137] Bluetooth: hci0: command 0x0406 tx timeout [ 1662.476379][T27387] Bluetooth: hci3: command 0x0406 tx timeout [ 1662.843800][T28765] syzkaller0: entered promiscuous mode [ 1662.865003][T28765] syzkaller0: entered allmulticast mode [ 1662.891661][T28765] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1662.899747][T28765] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1663.365990][T28774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1663.372544][T28774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1663.410243][T28779] netlink: 'syz.4.6074': attribute type 1 has an invalid length. [ 1663.420034][T28774] vhci_hcd vhci_hcd.0: Device attached [ 1663.447409][T28779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1663.469732][T28774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.483077][T28774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.552828][T28781] bond1: (slave bridge1): making interface the new active one [ 1663.586820][T26323] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1663.603467][T28783] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1663.610034][T28783] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1663.618620][ T5603] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1663.625248][T28783] vhci_hcd vhci_hcd.0: Device attached [ 1663.638035][T28781] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1663.666871][ T1211] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1663.686009][ T5603] usb 33-1: new full-speed USB device number 28 using vhci_hcd [ 1663.876094][T26323] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1663.945851][T26324] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 1664.675453][T28792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1664.696342][T26323] usb 43-1: device descriptor read/64, error -110 [ 1664.744870][T28793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1664.889241][T26324] usb 6-1: config 0 has no interfaces? [ 1665.239778][T26323] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1665.835220][T26324] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1665.844879][T26324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.855251][T26324] usb 6-1: config 0 descriptor?? [ 1665.896463][T26323] usb 43-1: new full-speed USB device number 22 using vhci_hcd [ 1666.986747][T28801] Set syz1 is full, maxelem 65536 reached [ 1667.131163][T23921] usb 6-1: USB disconnect, device number 32 [ 1667.250048][T28776] vhci_hcd: connection reset by peer [ 1667.349028][T28785] vhci_hcd: connection reset by peer [ 1667.363684][T11226] vhci_hcd vhci_hcd.5: stop threads [ 1667.381199][T11226] vhci_hcd vhci_hcd.5: release socket [ 1667.400289][T11226] vhci_hcd vhci_hcd.5: disconnect device [ 1667.417564][T11226] vhci_hcd vhci_hcd.0: stop threads [ 1667.444311][T11226] vhci_hcd vhci_hcd.0: release socket [ 1667.472480][T11226] vhci_hcd vhci_hcd.0: disconnect device [ 1667.722573][T28817] netlink: zone id is out of range [ 1667.727788][T28817] netlink: zone id is out of range [ 1667.732941][T28817] netlink: zone id is out of range [ 1667.815375][T28819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1668.837572][ T5603] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1669.277687][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.284470][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.299602][ T1304] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1669.518732][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6087'. [ 1669.543755][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6087'. [ 1669.580777][T28839] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6090'. [ 1669.692754][T28840] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1669.971317][T28848] overlayfs: missing 'lowerdir' [ 1670.522846][T28859] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1670.529411][T28859] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1670.543560][T28858] syzkaller0: entered promiscuous mode [ 1670.555323][T28858] syzkaller0: entered allmulticast mode [ 1670.578530][T28859] vhci_hcd vhci_hcd.0: Device attached [ 1670.798899][T28859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.818018][T23921] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1670.897020][T28871] nfs: Unknown parameter '`}G(Kа9vi\|AyNxL^+#x;t-+^R*ja?LH `꘿AKm~a"%_m:CnFh'mF'$r˨' [ 1671.253173][T28859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.266815][T28861] usbip_core: unknown command [ 1671.266936][T23921] usb 33-1: new full-speed USB device number 29 using vhci_hcd [ 1671.279593][T28861] vhci_hcd: unknown pdu 0 [ 1671.286500][T28861] usbip_core: unknown command [ 1671.306717][T26323] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1671.313827][T11223] vhci_hcd vhci_hcd.0: stop threads [ 1671.351231][T11223] vhci_hcd vhci_hcd.0: release socket [ 1671.481475][T11223] vhci_hcd vhci_hcd.0: disconnect device [ 1671.804976][ T29] audit: type=1400 audit(1786674237.253:1782): avc: denied { execute } for pid=28881 comm="syz.9.6105" path="/proc/timer_list" dev="proc" ino=4026532101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 1672.514440][T28887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1673.396843][T28897] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6109'. [ 1673.412159][T28894] wlan0 speed is unknown, defaulting to 1000 [ 1673.434578][T28894] netdevsim0 speed is unknown, defaulting to 1000 [ 1673.521966][T28899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1674.101472][T27387] block nbd17: Receive control failed (result -32) [ 1674.102297][T25137] block nbd17: Receive control failed (result -32) [ 1674.208068][T28908] syzkaller0: entered promiscuous mode [ 1674.225915][T28908] syzkaller0: entered allmulticast mode [ 1674.257833][T26323] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1674.428177][T26323] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 4 [ 1674.490976][T26323] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1674.505035][T26323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.514803][T26323] usb 5-1: Product: syz [ 1674.519649][T26323] usb 5-1: Manufacturer: syz [ 1674.580756][T28918] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6113'. [ 1674.992746][T26323] usb 5-1: SerialNumber: syz [ 1675.154188][T28927] Bluetooth: MGMT ver 1.23 [ 1675.161063][T28927] xt_cluster: node mask cannot exceed total number of nodes [ 1675.235505][T28906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.245221][T28906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.283568][T26323] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 1675.302896][T26323] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1675.321279][T26323] usb 5-1: unit 2 not found! [ 1675.327483][T26323] usb 5-1: unit 236 not found! [ 1675.339417][T25137] block nbd18: Receive control failed (result -32) [ 1675.354464][T27387] block nbd18: Receive control failed (result -32) [ 1675.390947][T26323] usb 5-1: USB disconnect, device number 94 [ 1675.510959][T28940] overlayfs: missing 'lowerdir' [ 1675.513924][T28939] netlink: zone id is out of range [ 1675.521358][T28939] netlink: zone id is out of range [ 1675.526567][T28939] netlink: zone id is out of range [ 1675.538034][T28938] netlink: zone id is out of range [ 1675.543211][T28938] netlink: zone id is out of range [ 1675.548455][T28938] netlink: zone id is out of range [ 1675.727476][T28942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6121'. [ 1675.820976][T28941] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6122'. [ 1676.394765][T23921] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1676.619488][T22810] udevd[22810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1676.653439][T28948] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6124'. [ 1676.757752][T28948] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1677.695294][T27387] block nbd19: Receive control failed (result -32) [ 1677.707478][T25137] block nbd19: Receive control failed (result -32) [ 1677.852652][T28977] syzkaller0: entered promiscuous mode [ 1677.879386][T28977] syzkaller0: entered allmulticast mode [ 1677.948987][T28982] netlink: zone id is out of range [ 1677.954145][T28982] netlink: zone id is out of range [ 1677.959411][T28982] netlink: zone id is out of range [ 1678.033857][T28985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6134'. [ 1678.877490][T28990] overlayfs: failed to resolve './file0': -2 [ 1679.038260][T11232] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.070161][T11232] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.101457][T11232] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.167467][T11232] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.018351][T29005] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6142'. [ 1680.110094][T29013] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1680.484267][T29029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.500478][T29029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.705876][T26323] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1680.790364][T29031] overlayfs: failed to resolve './file1': -2 [ 1680.866148][T26323] usb 5-1: Using ep0 maxpacket: 16 [ 1680.914644][T26323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.972936][T26323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.028580][T26323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1681.104416][T26323] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1681.196168][T26323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.221778][T26323] usb 5-1: config 0 descriptor?? [ 1681.542244][T29041] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1681.548795][T29041] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1681.587209][T29041] vhci_hcd vhci_hcd.0: Device attached [ 1681.716411][T29041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.775987][T23921] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1681.793420][T29041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.808278][T26323] HID 045e:07da: Invalid code 65791 type 1 [ 1682.005149][T26323] HID 045e:07da: Invalid code 768 type 1 [ 1682.058138][T26323] HID 045e:07da: Invalid code 769 type 1 [ 1682.139178][T26323] HID 045e:07da: Invalid code 770 type 1 [ 1682.214084][T26323] HID 045e:07da: Invalid code 771 type 1 [ 1682.290875][T26323] HID 045e:07da: Invalid code 772 type 1 [ 1682.358007][T26323] HID 045e:07da: Invalid code 773 type 1 [ 1682.390913][T26323] HID 045e:07da: Invalid code 774 type 1 [ 1682.431403][T26323] HID 045e:07da: Invalid code 775 type 1 [ 1682.467430][T26323] HID 045e:07da: Invalid code 776 type 1 [ 1682.530220][T26323] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0029/input/input135 [ 1682.582086][T23921] usb 33-1: new full-speed USB device number 30 using vhci_hcd [ 1682.807199][T29054] wlan0 speed is unknown, defaulting to 1000 [ 1682.814966][T29054] netdevsim0 speed is unknown, defaulting to 1000 [ 1683.113020][T26323] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1683.521475][T26323] usb 5-1: USB disconnect, device number 95 [ 1683.623435][T29061] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6158'. [ 1683.848673][T29066] xt_cluster: node mask cannot exceed total number of nodes [ 1684.086466][T29073] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1684.150088][T29075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1684.247639][T29042] vhci_hcd: connection reset by peer [ 1684.259862][ T5872] vhci_hcd vhci_hcd.0: stop threads [ 1684.279515][ T5872] vhci_hcd vhci_hcd.0: release socket [ 1684.291075][ T5872] vhci_hcd vhci_hcd.0: disconnect device [ 1685.979535][T29106] dummy_hcd dummy_hcd.0: remove, state 4 [ 1685.987441][T29106] usb usb1: USB disconnect, device number 1 [ 1686.019995][T29103] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1686.026562][T29103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1686.044028][T29103] vhci_hcd vhci_hcd.0: Device attached [ 1686.125023][T29106] dummy_hcd dummy_hcd.0: stopped [ 1686.137937][T29106] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1686.211659][T29114] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1686.215969][T26323] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1686.275984][T26323] usb 41-1: new full-speed USB device number 14 using vhci_hcd [ 1686.438486][ T5603] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1686.601637][ T5603] usb 5-1: config 0 has no interfaces? [ 1686.609001][ T5603] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1686.643598][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.740711][ T5603] usb 5-1: config 0 descriptor?? [ 1686.965078][T29118] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6177'. [ 1687.074187][T29108] usbip_core: unknown command [ 1687.102954][T29108] vhci_hcd: unknown pdu 0 [ 1687.129245][T29108] usbip_core: unknown command [ 1687.673252][T10438] vhci_hcd vhci_hcd.4: stop threads [ 1687.685919][T23921] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1687.716268][T10438] vhci_hcd vhci_hcd.4: release socket [ 1687.734469][ T5603] usb 5-1: USB disconnect, device number 96 [ 1687.845479][T10438] vhci_hcd vhci_hcd.4: disconnect device [ 1689.375718][T29032] Set syz1 is full, maxelem 65536 reached [ 1689.475897][ T5603] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1689.556227][T29152] overlayfs: failed to resolve './file0': -2 [ 1689.569932][T29153] overlayfs: failed to resolve './file0': -2 [ 1689.677980][ T5603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1689.687593][ T5603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.710639][ T5603] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1689.728443][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.739598][ T5603] usb 6-1: Product: syz [ 1689.744914][ T5603] usb 6-1: Manufacturer: syz [ 1689.749953][ T5603] usb 6-1: SerialNumber: syz [ 1689.763962][ T5603] usb 6-1: config 0 descriptor?? [ 1689.772197][ T5603] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1689.973550][T29156] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1689.980092][T29156] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1689.989712][T29156] vhci_hcd vhci_hcd.0: Device attached [ 1690.176961][T29165] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1690.183486][T29165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1690.377318][T29165] vhci_hcd vhci_hcd.0: Device attached [ 1690.406019][T23921] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 1690.695805][T23921] usb 5-1: config 0 has no interfaces? [ 1690.760623][T29168] usbip_core: unknown command [ 1690.803872][T23921] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1690.833109][T29168] vhci_hcd: unknown pdu 0 [ 1690.906346][T29168] usbip_core: unknown command [ 1690.951051][T23921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.975886][ T5603] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1691.004002][T10438] vhci_hcd vhci_hcd.9: stop threads [ 1691.071636][T10438] vhci_hcd vhci_hcd.9: release socket [ 1691.093503][T23921] usb 5-1: config 0 descriptor?? [ 1691.101013][T10438] vhci_hcd vhci_hcd.9: disconnect device [ 1691.136152][ T5603] usb 51-1: new full-speed USB device number 4 using vhci_hcd [ 1691.150154][ T5603] usb 51-1: enqueue for inactive port 0 [ 1691.235017][ T5603] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1691.370769][T29158] usbip_core: unknown command [ 1691.385304][T29158] vhci_hcd: unknown pdu 0 [ 1691.400168][T29158] usbip_core: unknown command [ 1691.417562][T11226] vhci_hcd vhci_hcd.4: stop threads [ 1691.432693][T11226] vhci_hcd vhci_hcd.4: release socket [ 1691.449382][T23921] usb 5-1: USB disconnect, device number 97 [ 1691.457645][T11226] vhci_hcd vhci_hcd.4: disconnect device [ 1691.531926][T26323] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1692.071113][T29182] SELinux: invalid class [ 1692.182415][T29182] SELinux: failed to load policy [ 1692.260015][T23921] usb 6-1: USB disconnect, device number 33 [ 1692.412188][T29192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6200'. [ 1693.079639][T29203] overlayfs: failed to resolve './file0': -2 [ 1693.134360][T29204] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1693.140931][T29204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1693.219473][T29204] vhci_hcd vhci_hcd.0: Device attached [ 1693.317542][T29212] FAULT_INJECTION: forcing a failure. [ 1693.317542][T29212] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.333448][T29212] CPU: 1 UID: 0 PID: 29212 Comm: syz.7.6208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1693.333475][T29212] Tainted: [L]=SOFTLOCKUP [ 1693.333481][T29212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1693.333490][T29212] Call Trace: [ 1693.333496][T29212] [ 1693.333504][T29212] dump_stack_lvl+0x100/0x190 [ 1693.333529][T29212] should_fail_ex.cold+0x5/0xa [ 1693.333553][T29212] should_failslab+0xc2/0x120 [ 1693.333577][T29212] __kmalloc_cache_noprof+0x91/0x6c0 [ 1693.333595][T29212] ? nfnetlink_rcv_batch+0x780/0x2880 [ 1693.333622][T29212] nfnetlink_rcv_batch+0x780/0x2880 [ 1693.333659][T29212] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1693.333698][T29212] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1693.333742][T29212] ? __nla_parse+0x40/0x60 [ 1693.333762][T29212] nfnetlink_rcv+0x3bd/0x440 [ 1693.333780][T29212] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1693.333798][T29212] netlink_unicast+0x585/0x850 [ 1693.333812][T29212] ? __pfx_netlink_unicast+0x10/0x10 [ 1693.333828][T29212] netlink_sendmsg+0x8b0/0xda0 [ 1693.333841][T29212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1693.333854][T29212] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1693.333873][T29212] ____sys_sendmsg+0xa4d/0xbe0 [ 1693.333890][T29212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1693.333903][T29212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1693.333931][T29212] ___sys_sendmsg+0x190/0x1e0 [ 1693.333943][T29212] ? __pfx____sys_sendmsg+0x10/0x10 [ 1693.333953][T29212] ? __lock_acquire+0x49f/0x1a40 [ 1693.333967][T29212] ? get_pid_task+0x106/0x250 [ 1693.333993][T29212] __sys_sendmsg+0x160/0x210 [ 1693.334007][T29212] ? __pfx___sys_sendmsg+0x10/0x10 [ 1693.334029][T29212] do_syscall_64+0x115/0x870 [ 1693.334044][T29212] ? clear_bhb_loop+0x70/0xc0 [ 1693.334058][T29212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.334069][T29212] RIP: 0033:0x7fa013b9e0d9 [ 1693.334079][T29212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.334090][T29212] RSP: 002b:00007fa0149c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.334102][T29212] RAX: ffffffffffffffda RBX: 00007fa013e25fa0 RCX: 00007fa013b9e0d9 [ 1693.334109][T29212] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1693.334115][T29212] RBP: 00007fa0149c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.334121][T29212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.334128][T29212] R13: 00007fa013e26038 R14: 00007fa013e25fa0 R15: 00007ffdbcbe1508 [ 1693.334142][T29212] [ 1693.445956][T23921] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1693.694667][T17587] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 1694.343480][T23921] usb 43-1: new full-speed USB device number 23 using vhci_hcd [ 1694.352225][T17587] usb 6-1: config 0 has no interfaces? [ 1694.357816][T17587] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1694.367253][T17587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.384870][T17587] usb 6-1: config 0 descriptor?? [ 1694.540014][T29220] Invalid option length (1004389) for dns_resolver key [ 1694.599255][T29206] usbip_core: unknown command [ 1694.622553][T29206] vhci_hcd: unknown pdu 0 [ 1694.629480][T29206] usbip_core: unknown command [ 1694.641858][ T1099] vhci_hcd vhci_hcd.5: stop threads [ 1694.653219][T17587] usb 6-1: USB disconnect, device number 34 [ 1694.654223][ T1099] vhci_hcd vhci_hcd.5: release socket [ 1694.677925][ T1099] vhci_hcd vhci_hcd.5: disconnect device [ 1694.914829][T26323] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1695.105902][T26323] usb 5-1: Using ep0 maxpacket: 8 [ 1695.157020][T26323] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1695.194690][T26323] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1695.275197][T29124] Set syz1 is full, maxelem 65536 reached [ 1695.297685][T26323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1695.343992][T26323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1695.384680][T26323] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1695.535658][T26323] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1695.580864][T26323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.951450][T29231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.990736][T29231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.068509][T26323] usb 5-1: usb_control_msg returned -32 [ 1696.094154][T26323] usbtmc 5-1:16.0: can't read capabilities [ 1696.177834][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6220'. [ 1697.240845][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6227'. [ 1697.361510][T29276] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1697.370503][ T29] audit: type=1400 audit(1786674262.793:1783): avc: denied { module_load } for pid=29275 comm="syz.0.6229" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1697.484308][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6212'. [ 1697.646515][T29222] Option 'Ӿ,0A' to dns_resolver key: bad/missing value [ 1697.697432][T29277] dlm: no local IP address has been set [ 1697.703571][T29277] dlm: cannot start dlm midcomms -107 [ 1697.709085][T29277] (syz.0.6229,29277,1):user_dlm_register:674 ERROR: status = -107 [ 1697.717842][T29277] (syz.0.6229,29277,1):dlmfs_mkdir:437 ERROR: Error -107 could not register domain "file0" [ 1697.729628][ T29] audit: type=1400 audit(1786674263.143:1784): avc: denied { write } for pid=29275 comm="syz.0.6229" name="/" dev="ocfs2_dlmfs" ino=128281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1697.794377][ T29] audit: type=1400 audit(1786674263.153:1785): avc: denied { add_name } for pid=29275 comm="syz.0.6229" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1697.830495][ T29] audit: type=1400 audit(1786674263.153:1786): avc: denied { create } for pid=29275 comm="syz.0.6229" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1697.893316][ T29] audit: type=1400 audit(1786674263.153:1787): avc: denied { associate } for pid=29275 comm="syz.0.6229" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1697.927383][T26323] usb 5-1: USB disconnect, device number 98 [ 1697.971801][T29285] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6231'. [ 1698.021302][ T29] audit: type=1400 audit(1786674263.183:1788): avc: denied { mounton } for pid=29221 comm="syz.4.6212" path="mnt:[4026532804]" dev="nsfs" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1698.347627][T29294] ALSA: mixer_oss: invalid OSS volume '' [ 1698.485995][T26323] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1698.848087][T29300] overlayfs: failed to resolve './file0': -2 [ 1698.897629][T26323] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1698.909986][T26323] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1699.028412][T26323] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1699.058742][T26323] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1699.095362][T26323] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.143936][T29291] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1699.207704][ T22] process 29280 (syz.5.6230) no longer affine to cpu1 [ 1699.210393][T26323] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1699.231845][T29314] process 29315 (syz.9.6243) no longer affine to cpu1 [ 1699.270445][T26323] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1699.428675][T23921] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1699.489171][T29316] smpboot: CPU 1 is now offline [ 1699.884090][ T5718] usb 8-1: USB disconnect, device number 123 [ 1699.922723][ T5718] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1700.001309][ T5718] cyberjack 8-1:1.0: device disconnected [ 1700.016651][T29322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1700.023171][T29322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1700.093281][T29322] vhci_hcd vhci_hcd.0: Device attached [ 1700.275253][T29336] overlayfs: failed to resolve './file0': -2 [ 1700.282194][T17587] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1700.386026][T26316] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1700.534198][T17587] usb 41-1: new full-speed USB device number 15 using vhci_hcd [ 1700.718650][T26316] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1700.782621][T26316] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1700.812725][T29345] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6252'. [ 1700.836908][T29329] vhci_hcd: connection reset by peer [ 1700.854013][ T29] audit: type=1400 audit(1786674266.303:1789): avc: denied { watch watch_reads } for pid=29342 comm="syz.0.6251" path="pipe:[128459]" dev="pipefs" ino=128459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1700.886813][T26316] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1700.897118][T19460] vhci_hcd vhci_hcd.4: stop threads [ 1700.925485][T29345] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6252'. [ 1700.937535][T19460] vhci_hcd vhci_hcd.4: release socket [ 1700.944921][T26316] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1700.965165][T19460] vhci_hcd vhci_hcd.4: disconnect device [ 1700.975478][T29345] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 1700.991797][T26316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.028079][ T29] audit: type=1400 audit(1786674266.303:1790): avc: denied { ioctl } for pid=29342 comm="syz.0.6251" path="socket:[128457]" dev="sockfs" ino=128457 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1701.143349][T26316] usb 6-1: config 0 descriptor?? [ 1701.158351][T29333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1701.304108][T29352] ALSA: mixer_oss: invalid OSS volume '' [ 1701.774544][T26316] hid (null): usage index exceeded [ 1701.872616][T26316] itetech 0003:048D:8595.002A: unknown main item tag 0x2 [ 1701.934042][T26316] itetech 0003:048D:8595.002A: unknown main item tag 0x1 [ 1701.978568][T26316] itetech 0003:048D:8595.002A: ignoring exceeding usage max [ 1702.049279][T26316] itetech 0003:048D:8595.002A: ignoring exceeding usage max [ 1702.096644][T29370] overlayfs: failed to resolve './file0': -2 [ 1702.113172][T26316] itetech 0003:048D:8595.002A: usage index exceeded [ 1702.127360][T29371] dlm: no local IP address has been set [ 1702.152400][T26316] itetech 0003:048D:8595.002A: item 0 1 2 2 parsing failed [ 1702.187586][T26316] itetech 0003:048D:8595.002A: probe with driver itetech failed with error -22 [ 1702.198268][T29371] dlm: cannot start dlm midcomms -107 [ 1702.216635][T29371] (syz.0.6261,29371,0):user_dlm_register:674 ERROR: status = -107 [ 1702.258635][T26316] usb 6-1: USB disconnect, device number 35 [ 1702.283104][T29371] (syz.0.6261,29371,0):dlmfs_mkdir:437 ERROR: Error -107 could not register domain "file0" [ 1702.444221][T29381] netlink: zone id is out of range [ 1702.450005][T29381] netlink: zone id is out of range [ 1702.455543][T29381] netlink: zone id is out of range [ 1703.399427][T29381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6264'. [ 1704.118208][T29385] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1704.215003][T29392] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1704.456050][T23921] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1704.702578][T26316] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1705.364560][T29411] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6275'. [ 1705.375976][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1705.375987][ T29] audit: type=1400 audit(1786674270.833:1792): avc: denied { execute } for pid=29410 comm="syz.4.6275" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=128698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1705.417799][T23921] usb 6-1: Using ep0 maxpacket: 16 [ 1705.422975][T26316] usb 8-1: Using ep0 maxpacket: 8 [ 1705.456463][T23921] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1705.481648][T26316] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.493616][T23921] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1705.515299][T26316] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1705.529940][T23921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.568211][T23921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1705.579291][T26316] usb 8-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1705.598835][T23921] usb 6-1: config 0 has no interface number 0 [ 1705.606572][T26316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.621362][T23921] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1705.637240][T26316] usb 8-1: config 0 descriptor?? [ 1705.642767][T23921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.395906][T17587] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1706.443899][T23921] usb 6-1: Product: syz [ 1706.456568][T23921] usb 6-1: Manufacturer: syz [ 1706.465349][T29419] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1706.473338][T29419] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1706.481747][T23921] usb 6-1: SerialNumber: syz [ 1706.488366][T23921] usb 6-1: config 0 descriptor?? [ 1706.596408][T29424] netlink: zone id is out of range [ 1706.601615][T29424] netlink: zone id is out of range [ 1706.607031][T29424] netlink: zone id is out of range [ 1707.092446][T29390] binder: 29388:29390 ioctl c0306201 200000000040 returned -11 [ 1707.276206][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x1 [ 1707.499165][T29424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6280'. [ 1707.521955][T17587] usb 6-1: USB disconnect, device number 36 [ 1707.539376][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1707.581860][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1707.613995][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1707.715868][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1707.732650][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1707.748534][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1708.436306][T29434] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6281'. [ 1708.462027][T26316] hid-multitouch 0003:0EEF:72D0.002B: unknown main item tag 0x0 [ 1708.486248][T26316] hid-multitouch 0003:0EEF:72D0.002B: hidraw0: USB HID v0.08 Device [HID 0eef:72d0] on usb-dummy_hcd.7-1/input0 [ 1708.615072][T26316] usb 8-1: USB disconnect, device number 124 [ 1708.710540][T29438] fido_id[29438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1708.877749][T29448] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 1709.771912][T29454] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6288'. [ 1710.679401][T29460] netlink: zone id is out of range [ 1710.684554][T29460] netlink: zone id is out of range [ 1710.689744][T29460] netlink: zone id is out of range [ 1711.520166][T29460] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6291'. [ 1711.643844][T29468] syzkaller0: left promiscuous mode [ 1711.691368][T29468] syzkaller0: left allmulticast mode [ 1711.816538][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6294'. [ 1711.897823][T29478] jffs2: notice: (29478) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1711.943451][ T29] audit: type=1400 audit(1786674277.393:1793): avc: denied { write } for pid=29476 comm="syz.9.6296" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1712.165620][T29484] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 1712.183236][T29486] netlink: 197276 bytes leftover after parsing attributes in process `syz.9.6300'. [ 1712.207223][T29486] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1712.493210][ T29] audit: type=1800 audit(1786674277.933:1794): pid=29487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.6300" name="addr_adrfam" dev="configfs" ino=129033 res=0 errno=0 [ 1712.563735][T29486] nvmet: Invalid value 'i' for adrfam [ 1712.613645][T27387] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1712.630037][T29493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1712.662421][T29493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1714.315359][T29506] SET target dimension over the limit! [ 1714.409278][T29512] overlayfs: failed to resolve './file0': -2 [ 1716.530162][T29532] syz_tun: entered allmulticast mode [ 1717.468328][T29537] overlayfs: failed to resolve './file0': -2 [ 1717.488088][T29539] netlink: 'syz.4.6317': attribute type 32 has an invalid length. [ 1717.562289][T29542] IPv6: Can't replace route, no match found [ 1717.702049][ T29] audit: type=1400 audit(1786674283.153:1795): avc: denied { validate_trans } for pid=29548 comm="syz.7.6320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1718.556359][ T29] audit: type=1400 audit(1786674283.923:1796): avc: denied { mounton } for pid=29546 comm="syz.9.6319" path="/208/config" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1718.742220][ T29] audit: type=1400 audit(1786674283.923:1797): avc: denied { write } for pid=29546 comm="syz.9.6319" name="usb_gadget" dev="configfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1718.932167][ T29] audit: type=1400 audit(1786674283.923:1798): avc: denied { remove_name } for pid=29546 comm="syz.9.6319" name="g1" dev="configfs" ino=10154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1719.126586][T29578] squashfs: Unknown parameter '%@!-U.' [ 1719.921337][T29584] FAULT_INJECTION: forcing a failure. [ 1719.921337][T29584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.936221][ T29] audit: type=1400 audit(1786674283.923:1799): avc: denied { rmdir } for pid=29546 comm="syz.9.6319" name="g1" dev="configfs" ino=10154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1720.749190][T29584] CPU: 0 UID: 0 PID: 29584 Comm: syz.5.6330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1720.749214][T29584] Tainted: [L]=SOFTLOCKUP [ 1720.749218][T29584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1720.749230][T29584] Call Trace: [ 1720.749234][T29584] [ 1720.749239][T29584] dump_stack_lvl+0x100/0x190 [ 1720.749259][T29584] should_fail_ex.cold+0x5/0xa [ 1720.749274][T29584] _copy_to_user+0x32/0xd0 [ 1720.749290][T29584] simple_read_from_buffer+0xcb/0x170 [ 1720.749305][T29584] proc_fail_nth_read+0x1af/0x230 [ 1720.749326][T29584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1720.749345][T29584] ? rw_verify_area+0xce/0x6d0 [ 1720.749360][T29584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1720.749378][T29584] vfs_read+0x1e4/0xb40 [ 1720.749398][T29584] ? __pfx_vfs_read+0x10/0x10 [ 1720.749415][T29584] ? __fget_files+0x215/0x3d0 [ 1720.749429][T29584] ? __fget_files+0x21f/0x3d0 [ 1720.749444][T29584] ksys_read+0x12a/0x250 [ 1720.749454][T29584] ? __pfx_ksys_read+0x10/0x10 [ 1720.749475][T29584] do_syscall_64+0x115/0x870 [ 1720.749490][T29584] ? clear_bhb_loop+0x70/0xc0 [ 1720.749504][T29584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.749515][T29584] RIP: 0033:0x7f2f4cf5e90e [ 1720.749525][T29584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1720.749535][T29584] RSP: 002b:00007f2f4dea8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1720.749547][T29584] RAX: ffffffffffffffda RBX: 00007f2f4dea96c0 RCX: 00007f2f4cf5e90e [ 1720.749554][T29584] RDX: 000000000000000f RSI: 00007f2f4dea90a0 RDI: 0000000000000004 [ 1720.749561][T29584] RBP: 00007f2f4dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.749567][T29584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.749573][T29584] R13: 00007f2f4d226038 R14: 00007f2f4d225fa0 R15: 00007ffc520bfe48 [ 1720.749587][T29584] [ 1720.966480][ T29] audit: type=1400 audit(1786674284.253:1800): avc: denied { mounton } for pid=29569 comm="syz.7.6327" path="/333/file0" dev="tmpfs" ino=1906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1720.989775][ T29] audit: type=1400 audit(1786674284.563:1801): avc: denied { shutdown } for pid=29569 comm="syz.7.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1721.033609][T29587] FAULT_INJECTION: forcing a failure. [ 1721.033609][T29587] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.046337][T29587] CPU: 0 UID: 0 PID: 29587 Comm: syz.9.6331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1721.046358][T29587] Tainted: [L]=SOFTLOCKUP [ 1721.046362][T29587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1721.046369][T29587] Call Trace: [ 1721.046375][T29587] [ 1721.046380][T29587] dump_stack_lvl+0x100/0x190 [ 1721.046399][T29587] should_fail_ex.cold+0x5/0xa [ 1721.046413][T29587] should_failslab+0xc2/0x120 [ 1721.046428][T29587] __kmalloc_cache_noprof+0x91/0x6c0 [ 1721.046440][T29587] ? ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1721.046460][T29587] ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1721.046480][T29587] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1721.046497][T29587] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1721.046512][T29587] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1721.046529][T29587] genl_family_rcv_msg_doit+0x214/0x300 [ 1721.046544][T29587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1721.046562][T29587] ? bpf_lsm_capable+0x9/0x10 [ 1721.046573][T29587] ? security_capable+0x80/0x260 [ 1721.046589][T29587] ? ns_capable+0xd2/0xf0 [ 1721.046604][T29587] genl_rcv_msg+0x560/0x800 [ 1721.046619][T29587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.046636][T29587] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1721.046655][T29587] ? __lock_acquire+0x49f/0x1a40 [ 1721.046670][T29587] netlink_rcv_skb+0x159/0x420 [ 1721.046682][T29587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.046696][T29587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1721.046713][T29587] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1721.046732][T29587] genl_rcv+0x28/0x40 [ 1721.046743][T29587] netlink_unicast+0x585/0x850 [ 1721.046757][T29587] ? __pfx_netlink_unicast+0x10/0x10 [ 1721.046767][T29587] ? __build_skb_around+0x278/0x390 [ 1721.046782][T29587] netlink_sendmsg+0x8b0/0xda0 [ 1721.046796][T29587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.046809][T29587] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1721.046827][T29587] ____sys_sendmsg+0xa4d/0xbe0 [ 1721.046844][T29587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.046857][T29587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1721.046880][T29587] ___sys_sendmsg+0x190/0x1e0 [ 1721.046891][T29587] ? __pfx____sys_sendmsg+0x10/0x10 [ 1721.046901][T29587] ? __lock_acquire+0x49f/0x1a40 [ 1721.046915][T29587] ? get_pid_task+0x106/0x250 [ 1721.046940][T29587] __sys_sendmsg+0x160/0x210 [ 1721.046954][T29587] ? __pfx___sys_sendmsg+0x10/0x10 [ 1721.046975][T29587] do_syscall_64+0x115/0x870 [ 1721.046989][T29587] ? clear_bhb_loop+0x70/0xc0 [ 1721.047002][T29587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.047014][T29587] RIP: 0033:0x7f821b39e0d9 [ 1721.047026][T29587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.047036][T29587] RSP: 002b:00007f821c21f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.047047][T29587] RAX: ffffffffffffffda RBX: 00007f821b625fa0 RCX: 00007f821b39e0d9 [ 1721.047054][T29587] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1721.047061][T29587] RBP: 00007f821c21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.047067][T29587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.047073][T29587] R13: 00007f821b626038 R14: 00007f821b625fa0 R15: 00007ffcfa258218 [ 1721.047087][T29587] [ 1721.428690][T29591] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 1721.492926][T29593] overlayfs: failed to resolve './file0': -2 [ 1721.500490][T29596] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6336'. [ 1722.324343][T29605] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1722.477388][T29621] FAULT_INJECTION: forcing a failure. [ 1722.477388][T29621] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.565879][T29621] CPU: 0 UID: 0 PID: 29621 Comm: syz.7.6340 Tainted: G L syzkaller #0 PREEMPT(full) [ 1722.565899][T29621] Tainted: [L]=SOFTLOCKUP [ 1722.565904][T29621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1722.565912][T29621] Call Trace: [ 1722.565917][T29621] [ 1722.565921][T29621] dump_stack_lvl+0x100/0x190 [ 1722.565940][T29621] should_fail_ex.cold+0x5/0xa [ 1722.565955][T29621] should_failslab+0xc2/0x120 [ 1722.565970][T29621] __kvmalloc_node_noprof+0x116/0x970 [ 1722.565983][T29621] ? __pfx___debug_object_init+0x10/0x10 [ 1722.566000][T29621] ? bucket_table_alloc.isra.0+0x88/0x460 [ 1722.566016][T29621] bucket_table_alloc.isra.0+0x88/0x460 [ 1722.566030][T29621] __rhashtable_init_noprof+0x43a/0x890 [ 1722.566046][T29621] __rhltable_init_noprof+0x28/0x70 [ 1722.566059][T29621] ? wiphy_new_nm+0x19d7/0x21a0 [ 1722.566077][T29621] sta_info_init+0x2e/0x160 [ 1722.566091][T29621] ieee80211_alloc_hw_nm+0x86b/0x22e0 [ 1722.566109][T29621] mac80211_hwsim_new_radio+0x1de/0x64c0 [ 1722.566125][T29621] ? __nla_parse+0x40/0x60 [ 1722.566137][T29621] ? parse_pmsr_capa+0x128/0x700 [ 1722.566148][T29621] ? parse_pmsr_capa+0x383/0x700 [ 1722.566159][T29621] ? __pfx_parse_pmsr_capa+0x10/0x10 [ 1722.566169][T29621] ? kasan_save_track+0x14/0x30 [ 1722.566184][T29621] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1722.566203][T29621] ? hwsim_new_radio_nl+0xbcf/0x13f0 [ 1722.566219][T29621] hwsim_new_radio_nl+0xc6b/0x13f0 [ 1722.566234][T29621] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1722.566252][T29621] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1722.566266][T29621] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1722.566283][T29621] genl_family_rcv_msg_doit+0x214/0x300 [ 1722.566298][T29621] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1722.566316][T29621] ? bpf_lsm_capable+0x9/0x10 [ 1722.566327][T29621] ? security_capable+0x80/0x260 [ 1722.566342][T29621] ? ns_capable+0xd2/0xf0 [ 1722.566357][T29621] genl_rcv_msg+0x560/0x800 [ 1722.566372][T29621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1722.566385][T29621] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1722.566400][T29621] ? __lock_acquire+0x49f/0x1a40 [ 1722.566416][T29621] netlink_rcv_skb+0x159/0x420 [ 1722.566428][T29621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1722.566442][T29621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1722.566459][T29621] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1722.566479][T29621] genl_rcv+0x28/0x40 [ 1722.566490][T29621] netlink_unicast+0x585/0x850 [ 1722.566503][T29621] ? __pfx_netlink_unicast+0x10/0x10 [ 1722.566519][T29621] netlink_sendmsg+0x8b0/0xda0 [ 1722.566533][T29621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1722.566545][T29621] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1722.566564][T29621] ____sys_sendmsg+0xa4d/0xbe0 [ 1722.566580][T29621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1722.566593][T29621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1722.566616][T29621] ___sys_sendmsg+0x190/0x1e0 [ 1722.566628][T29621] ? __pfx____sys_sendmsg+0x10/0x10 [ 1722.566637][T29621] ? __lock_acquire+0x49f/0x1a40 [ 1722.566651][T29621] ? get_pid_task+0x106/0x250 [ 1722.566677][T29621] __sys_sendmsg+0x160/0x210 [ 1722.566691][T29621] ? __pfx___sys_sendmsg+0x10/0x10 [ 1722.566713][T29621] do_syscall_64+0x115/0x870 [ 1722.566727][T29621] ? clear_bhb_loop+0x70/0xc0 [ 1722.566740][T29621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.566752][T29621] RIP: 0033:0x7fa013b9e0d9 [ 1722.566761][T29621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.566772][T29621] RSP: 002b:00007fa0149c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1722.566784][T29621] RAX: ffffffffffffffda RBX: 00007fa013e25fa0 RCX: 00007fa013b9e0d9 [ 1722.566791][T29621] RDX: 0000000000000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 1722.566798][T29621] RBP: 00007fa0149c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.566804][T29621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.566811][T29621] R13: 00007fa013e26038 R14: 00007fa013e25fa0 R15: 00007ffdbcbe1508 [ 1722.566825][T29621] [ 1723.328315][T29637] netlink: 'syz.0.6343': attribute type 10 has an invalid length. [ 1723.346533][T29630] ima: policy update failed [ 1723.351194][ T29] audit: type=1802 audit(1786674288.803:1802): pid=29630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.9.6344" res=0 errno=0 [ 1723.396696][T29638] netlink: 'syz.4.6335': attribute type 1 has an invalid length. [ 1723.422877][T29638] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6335'. [ 1723.454765][T29638] sctp: [Deprecated]: syz.4.6335 (pid 29638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1723.454765][T29638] Use struct sctp_sack_info instead [ 1723.479893][T29641] nbd: must specify at least one socket [ 1723.656766][T26316] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 1723.832191][T26316] usb 8-1: Using ep0 maxpacket: 16 [ 1723.839082][T26316] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1723.847861][T26316] usb 8-1: config 0 has no interface number 0 [ 1723.855040][T26316] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1723.872402][T26316] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1724.915195][T26316] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1724.933449][T26316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.943385][T29662] netlink: 'syz.0.6352': attribute type 1 has an invalid length. [ 1724.959245][T26316] usb 8-1: Product: syz [ 1724.987550][T26316] usb 8-1: Manufacturer: syz [ 1725.007240][T26316] usb 8-1: SerialNumber: syz [ 1725.017874][T29662] bond2: entered promiscuous mode [ 1725.024762][T26316] usb 8-1: config 0 descriptor?? [ 1725.038293][T29662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1725.058696][T29635] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1725.087662][T29635] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1725.160718][T29673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6356'. [ 1725.174108][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1726.163671][T29635] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1726.194262][T29635] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1726.295104][T28239] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 1726.307183][T28239] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 1726.315591][T28239] CPU: 0 UID: 0 PID: 28239 Comm: kworker/0:2H Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.326678][T28239] Tainted: [L]=SOFTLOCKUP [ 1726.330973][T28239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1726.341010][T28239] Workqueue: events_highpri f_midi_in_work [ 1726.346816][T28239] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1726.352004][T28239] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 eb 12 3b fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1726.371583][T28239] RSP: 0018:ffffc9000eb97a28 EFLAGS: 00010006 [ 1726.377632][T28239] RAX: dffffc0000000000 RBX: ffff888036d05110 RCX: ffffffff87cf517f [ 1726.385576][T28239] RDX: 000000000000000c RSI: ffffffff87cf51f5 RDI: 0000000000000060 [ 1726.393518][T28239] RBP: ffff88801eb700e0 R08: 0000000000000005 R09: 0000000000000005 [ 1726.401470][T28239] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88801eb70c00 [ 1726.409414][T28239] R13: ffff888036d05100 R14: ffff88801eb700d8 R15: 0000000000000000 [ 1726.417368][T28239] FS: 0000000000000000(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 1726.426271][T28239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.432829][T28239] CR2: 0000200000092000 CR3: 000000007ec10000 CR4: 00000000003526f0 [ 1726.440801][T28239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1726.448771][T28239] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1726.456737][T28239] Call Trace: [ 1726.460002][T28239] [ 1726.462912][T28239] ? do_raw_spin_unlock+0x145/0x1e0 [ 1726.468103][T28239] usb_ep_queue+0xfa/0x3c0 [ 1726.472521][T28239] f_midi_in_work+0x9b0/0x1580 [ 1726.477266][T28239] ? __pfx_f_midi_in_work+0x10/0x10 [ 1726.482445][T28239] process_one_work+0xa23/0x1940 [ 1726.487377][T28239] ? __pfx_process_one_work+0x10/0x10 [ 1726.492751][T28239] ? __pfx_f_midi_in_work+0x10/0x10 [ 1726.497935][T28239] worker_thread+0x5ef/0xe50 [ 1726.502516][T28239] ? __pfx_worker_thread+0x10/0x10 [ 1726.507600][T28239] ? kthread+0x13a/0x450 [ 1726.511832][T28239] ? __pfx_worker_thread+0x10/0x10 [ 1726.516962][T28239] kthread+0x370/0x450 [ 1726.521021][T28239] ? __pfx_kthread+0x10/0x10 [ 1726.525615][T28239] ret_from_fork+0x72b/0xd50 [ 1726.530242][T28239] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.535375][T28239] ? __switch_to+0x800/0x10f0 [ 1726.540052][T28239] ? __pfx_kthread+0x10/0x10 [ 1726.544903][T28239] ret_from_fork_asm+0x1a/0x30 [ 1726.549681][T28239] [ 1726.552783][T28239] Modules linked in: [ 1726.556664][T28239] ---[ end trace 0000000000000000 ]--- [ 1726.562105][T28239] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1726.567289][T28239] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 eb 12 3b fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1726.586883][T28239] RSP: 0018:ffffc9000eb97a28 EFLAGS: 00010006 [ 1726.592924][T28239] RAX: dffffc0000000000 RBX: ffff888036d05110 RCX: ffffffff87cf517f [ 1726.600880][T28239] RDX: 000000000000000c RSI: ffffffff87cf51f5 RDI: 0000000000000060 [ 1726.608838][T28239] RBP: ffff88801eb700e0 R08: 0000000000000005 R09: 0000000000000005 [ 1726.616790][T28239] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88801eb70c00 [ 1726.624745][T28239] R13: ffff888036d05100 R14: ffff88801eb700d8 R15: 0000000000000000 [ 1726.632711][T28239] FS: 0000000000000000(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 1726.641731][T28239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.648313][T28239] CR2: 0000200000092000 CR3: 000000007ec10000 CR4: 00000000003526f0 [ 1726.656363][T28239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1726.664330][T28239] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1726.672287][T28239] Kernel panic - not syncing: Fatal exception [ 1726.678366][T28239] Kernel Offset: disabled [ 1726.682682][T28239] Rebooting in 86400 seconds..