last executing test programs: 4m4.123523915s ago: executing program 32 (id=26): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0x4, 0x4}) ioctl(r0, 0xc138fd01, &(0x7f0000002000)="04000000320000") 3m48.481130372s ago: executing program 33 (id=70): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0xb, 0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0x42792000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00013ffbb697d92e4920f16a82199fb7885f4d231c4a1a090b09a3696fb492a1b8e0"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 3m45.228805529s ago: executing program 34 (id=76): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904f4000feae6fc04090580000004fb0f05072501400b06002e2206141d390ffa786e526f5ec27f6302474143e65c6e3e70993fd796088c966dcca24acae9cda26a9631b8cf0f090580020000000b0809050c03000215"], 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x5}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000080), 0x0}, 0x20) ioctl$FIONCLEX(r1, 0x5450) dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, &(0x7f0000000540)=0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x15) 3m29.763736224s ago: executing program 35 (id=124): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4800) sched_setscheduler(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f5000705810200020007050202"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x22643) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004000140002001000060009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 3m25.940150733s ago: executing program 36 (id=150): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4c7, 0x3a, 'team0\x00', 0x3a, '\'.\\{]', 0x3a, './file0'}, 0x32) fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(0x0, 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m19.631706043s ago: executing program 2 (id=159): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x403, 0x20000000) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_KEEPCAPS(0x7) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0x100}, {0x2, 0x3dca, 0x3}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000004c0)=0x1c, 0x40000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@empty, @multicast2, 0x0}, &(0x7f0000000540)=0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) statx(r6, 0x0, 0x1000, 0x3f4e8a54d32b51c1, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002400)=ANY=[@ANYBLOB="b0000000f5ffffff", @ANYRES64, @ANYBLOB="01000000000000000100000000000000f7ffffffffffffff0600000000000000000000000600000005000000000000000600000000000000000000800000ea45996efe00000d00000000000000090800000000000000010000000000000100000001ff06ff00020000004000b977a395", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000000100000000000200000000000000400000000000000001000000000000003a00000000000000862ba04c72202cef00e8906e4aa060f89bf8da3c001fa414b93094db96ed2094fdb8acf46a0305ff26b8c694dc4697cd118c309b4b07fdcbb5dde102b8"], 0xb0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x2b8e, 0x4e24, 0x0, 0x2, 0xa0, 0x0, 0x5c, r4, r7}, {0x8000000000000001, 0x9, 0x0, 0x3, 0x1, 0xa0d1, 0x5, 0xffffffffffff5156}, {0x8, 0x8, 0x40000000000, 0x1}, 0xffff00e5, 0x6e6bc0, 0x2, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d5, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3505, 0x4, 0x3, 0x0, 0x1, 0x7f, 0x2}}, 0xe8) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24ea0000", @ANYRES16=r10, @ANYBLOB="000429bd7000fedbdf250500000005000700020000000500020005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4028000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) sendto$inet(r11, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04d", 0x64, 0x0, 0x0, 0x0) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 3m18.64100339s ago: executing program 2 (id=161): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 3m18.56082785s ago: executing program 2 (id=162): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd, 0x4a}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}], 0x54) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result={0xfeff}}], 0x1c) 3m18.39689791s ago: executing program 2 (id=163): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek(r0, 0x6, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_io_uring_complete(0x0, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3m18.20416332s ago: executing program 2 (id=164): syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x802) r0 = getpgid(0x0) capset(&(0x7f0000000100)={0x20080522, r0}, &(0x7f0000000140)={0xfffffffb, 0xfffffffb, 0x7f, 0x7fff, 0xb, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m18.083436544s ago: executing program 2 (id=165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000007a9a6e021beb9882a66dad57609484042b7746124b2496e75db768fb46378377a555486ba8e3c9ba730f57c56d8c5b26827632f55af810744500bbb492d2322206d31f682d672baff81337f26239ae4aabc3dbc390b88e13afeaebfaa2dc869424ffd3682aaaaab4568638378494fd66b7912dd46de8012f821ecf9d45835fcef3f90fd3ac5752487238ed2f33676325", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x3, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000fd7fd5", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x0, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x4003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x4003fffc, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x400, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x36, 0x4, 0x6, 0x9, 0x6}, 0x14) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="52b82b89a10dfea9c43ffad17acf342b07d9ef9444996b4745a4cc22474de88719", @ANYRES64=0x0], 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) 3m8.14864857s ago: executing program 37 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x3c}}, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x0, 0x3, 0x2}]}, @ptr, @enum]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000003c0)=ANY=[@ANYBLOB="80c200000e86dd61f6ff0100442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000001010088a8000086dd86dd88be000000031c0805100100000000007b43080022eb0000000223022309020000000000000500ec341b08006558000000865783df2699d78e2a0b24760000000000000000"], 0x0) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000001c0)={0x8000fc, 0x8, 0x0, 0x2, 0x1101, 0x280}) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r8) close(0xffffffffffffffff) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r10, 0x8008af00, &(0x7f00000001c0)) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="19ff00ff0300"}) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 3m2.790272895s ago: executing program 38 (id=165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000007a9a6e021beb9882a66dad57609484042b7746124b2496e75db768fb46378377a555486ba8e3c9ba730f57c56d8c5b26827632f55af810744500bbb492d2322206d31f682d672baff81337f26239ae4aabc3dbc390b88e13afeaebfaa2dc869424ffd3682aaaaab4568638378494fd66b7912dd46de8012f821ecf9d45835fcef3f90fd3ac5752487238ed2f33676325", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x3, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000fd7fd5", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x0, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x4003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x4003fffc, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x400, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x36, 0x4, 0x6, 0x9, 0x6}, 0x14) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="52b82b89a10dfea9c43ffad17acf342b07d9ef9444996b4745a4cc22474de88719", @ANYRES64=0x0], 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) 2m23.668139809s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64(r5, &(0x7f0000000400), 0x8, 0x1000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r6}, 0x38) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) preadv2(r7, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x853, 0xc9edcad9ced7570f) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) getpeername(r8, 0x0, 0x0) 2m22.54529524s ago: executing program 4 (id=389): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x100400c1, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (fail_nth: 1) 2m22.211591999s ago: executing program 5 (id=392): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000bd7000000000000200000008000300", @ANYRES32, @ANYBLOB="0c0099000200000025000000080026006c0900000800a0006c090000080027"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f00000003c0)={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) r7 = getpgid(0xffffffffffffffff) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=r7}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timer_gettime(r8, &(0x7f0000000000)) capget(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000400)={{0x5, 0x1, 0xffffffff, 0x9, 'syz1\x00', 0x7}, 0x6, 0x20000000, 0x2, r7, 0x4, 0xffffffff, 'syz1\x00', &(0x7f00000001c0)=['veth0_to_bridge\x00', 'geneve1\x00', '+!-\x00', ',\x00'], 0x1e}) 2m22.055951784s ago: executing program 4 (id=394): pipe2$watch_queue(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, 0x1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3457, &(0x7f0000000040)={0x0, 0x5f9c, 0x400, 0x1, 0x37f}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000400)={'hsr0\x00', @random='\x00\x00\x00\x00(\x00'}) shutdown(0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m21.839383308s ago: executing program 5 (id=395): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="3e98", 0x2}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x6c38, 0x4) sendto$inet6(r1, &(0x7f0000000340)="8d", 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2m21.747633869s ago: executing program 5 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002fb"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m21.51706679s ago: executing program 5 (id=398): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2060, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = socket(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x3, 0x14, 0x6cd, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x21c0cb, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e24, 0x2, @empty}}, 0xb91, 0x2}, &(0x7f0000000180)=0x90) 2m21.252765344s ago: executing program 5 (id=399): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x1, &(0x7f00000000c0)="0400000008") 2m20.735805431s ago: executing program 5 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x1) (async) ioctl$TCXONC(r5, 0x5608, 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x1a0010, &(0x7f0000000600)={[], [], 0x2c}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x89e, 0x8, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x89e, 0x8, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}}}}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000340)) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x7fff0000}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYBLOB="c28343f46473ea6b4514c72bbd0d0e72a0abdb5bb28c09f1d621a51f3ee6af0a2995e0e9062e5ba8ecde90928abe2897d0fc5a4f53c833a546ac20952de540aa1f51764d0362042de50b4f6c7ea084759c5b9b29cbe6c7fc2625210d72092c993a5892531e78fdad5133ae6095257c2061eb3a36e5df90cc8b9f57eb83f230e6703189c78179eb80849d41b614deac1c907b9ec5f786ee8293115131da0cc2aaeb4fd9c4270ffb03b83682a1", @ANYRES32=r1, @ANYRESHEX=r0], 0x1c}}, 0x500d0) (async) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYBLOB="c28343f46473ea6b4514c72bbd0d0e72a0abdb5bb28c09f1d621a51f3ee6af0a2995e0e9062e5ba8ecde90928abe2897d0fc5a4f53c833a546ac20952de540aa1f51764d0362042de50b4f6c7ea084759c5b9b29cbe6c7fc2625210d72092c993a5892531e78fdad5133ae6095257c2061eb3a36e5df90cc8b9f57eb83f230e6703189c78179eb80849d41b614deac1c907b9ec5f786ee8293115131da0cc2aaeb4fd9c4270ffb03b83682a1", @ANYRES32=r1, @ANYRESHEX=r0], 0x1c}}, 0x500d0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000fff625bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35030700232d05001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@#@'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@#@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m19.395975813s ago: executing program 39 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x1) (async) ioctl$TCXONC(r5, 0x5608, 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x1a0010, &(0x7f0000000600)={[], [], 0x2c}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x89e, 0x8, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x89e, 0x8, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}}}}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000340)) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x7fff0000}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYBLOB="c28343f46473ea6b4514c72bbd0d0e72a0abdb5bb28c09f1d621a51f3ee6af0a2995e0e9062e5ba8ecde90928abe2897d0fc5a4f53c833a546ac20952de540aa1f51764d0362042de50b4f6c7ea084759c5b9b29cbe6c7fc2625210d72092c993a5892531e78fdad5133ae6095257c2061eb3a36e5df90cc8b9f57eb83f230e6703189c78179eb80849d41b614deac1c907b9ec5f786ee8293115131da0cc2aaeb4fd9c4270ffb03b83682a1", @ANYRES32=r1, @ANYRESHEX=r0], 0x1c}}, 0x500d0) (async) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYBLOB="c28343f46473ea6b4514c72bbd0d0e72a0abdb5bb28c09f1d621a51f3ee6af0a2995e0e9062e5ba8ecde90928abe2897d0fc5a4f53c833a546ac20952de540aa1f51764d0362042de50b4f6c7ea084759c5b9b29cbe6c7fc2625210d72092c993a5892531e78fdad5133ae6095257c2061eb3a36e5df90cc8b9f57eb83f230e6703189c78179eb80849d41b614deac1c907b9ec5f786ee8293115131da0cc2aaeb4fd9c4270ffb03b83682a1", @ANYRES32=r1, @ANYRESHEX=r0], 0x1c}}, 0x500d0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000fff625bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35030700232d05001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@#@'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@#@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m19.220530048s ago: executing program 4 (id=409): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2060, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = socket(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x3, 0x14, 0x6cd, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x21c0cb, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e24, 0x2, @empty}}, 0xb91, 0x2}, &(0x7f0000000180)=0x90) 2m18.63024202s ago: executing program 4 (id=411): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x24) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) r1 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c000780060004"], 0x34}}, 0x0) 2m18.54100313s ago: executing program 8 (id=412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00'], 0x4000) 2m18.228663628s ago: executing program 4 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa8001, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x90) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000140)={0x8, 0x0, r0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRESOCT], 0x0) 2m17.767709827s ago: executing program 40 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa8001, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x90) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000140)={0x8, 0x0, r0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRESOCT], 0x0) 2m17.665568458s ago: executing program 8 (id=415): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m17.461331299s ago: executing program 8 (id=416): r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES64], 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000140)={r0, &(0x7f0000000000)='+/[[!R@\x00', 0x410001, &(0x7f0000000080)={@align=0x78000000000, {0xecb, 0x8, 0x1f8d, 0x80000000}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x275}) socket(0x10, 0x803, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES64], 0x0) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000140)={r0, &(0x7f0000000000)='+/[[!R@\x00', 0x410001, &(0x7f0000000080)={@align=0x78000000000, {0xecb, 0x8, 0x1f8d, 0x80000000}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x275}) (async) 2m13.473098617s ago: executing program 8 (id=421): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2060, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = socket(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x3, 0x14, 0x6cd, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x21c0cb, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e24, 0x2, @empty}}, 0xb91, 0x2}, &(0x7f0000000180)=0x90) 2m13.00689522s ago: executing program 8 (id=422): unshare(0x2a060400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@restrict={0x5}, @typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x8}}, @fwd={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x1}}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/228, 0x7d, 0xe4, 0x1, 0x38e99994}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x90d, 0x1, 0x3dbc, 0x40000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x2, 0x5, 0x1, 0xe}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m11.983733069s ago: executing program 0 (id=424): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m11.868435305s ago: executing program 8 (id=425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m11.713790425s ago: executing program 41 (id=425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m11.709242707s ago: executing program 0 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088945b406d04b3088eca0000000109021200017f00c0000904"], 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x4481, 0x609}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x58}}, 0x40014) 2m10.243419638s ago: executing program 0 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000881}, 0x48800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) sendmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="4fe07c1cf71d8072ca7d95ffa273c19c3a7fc97cc4", 0x15}, {&(0x7f0000000380)="83dc1c0be7c1bf4e56beb9dc53bab6d95e02c494cb7e8080d254b88ce7f87688bbc172abcc86315f98f117c734ce716f5837fd4d029f3096f44e2d6e7ff1aa2a4bf0b8c3ee74efff252e432c995672713a448cd1d4c6fa254c5346ef44e388fda4fe71aed6fbbbf3a29a437ad1fbf01a00b10cee944bbc65c0ea1a9dc35bd52a5841892e797334a4060e06886b8a24ddd3a9d3c27f4e2be9c1d9dcee733cbe208b197d1ce4581aabc9cf0151534b220ee0a89d1780afb2ba1a2afc693853a58ac24e83d878a6a291e494212a14264cacc61cf2e428c7da21dbb5833f18af5afbaffc2cc5a045214fb59bce9f0b1e028203dc83", 0xf3}, {&(0x7f0000000480)="03693a5c5dba110c5cac510c5bac0e00b6a4d088d44e352d6c3fc97192c1559440e5c8842855aa68bd48965e4588cbaa875beef2de4f64eccc695812100ba9e60ab5e9f456afd191c9a5244cf57f1d58202bf136a2a8eacc0db238a2fb69b0579f6e361ad40f2f37f3544a74188882bfc5873dbb9b0c21d4571ee6cf151a8069134ec0ba2544166bf000a2ad540427ba3f0002f50b1ab60067eeb9db5b767414f7a0b326d3877b03336002ed3ea43505bee871f23e1262fb5e3a9fffea854e7ef9fcf61821c071a8df0abd5b2f33e487b7cebe73d72ab3f82a568755248c090fd0b574", 0xe3}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="45c2dd7cf08d82d40935caf3fedfec05daf4e1fb7f9fda6f11cebf66cabfc8239cb85d8241bb5ca783f33bf1fe6f7d9966249765b38f2ac50035493682a59b49b6a987388cdfddf6fede1bc8277a01198cc17768b75022f8481de16bc84f13e8a7f9a19a8409eafc5a9666114ecc51039422ba4c97f3def55aabbbb2676507bf908f54ade32b6fa5f52ceff728cae51152570f08e407024097dbf6488304985c13df587be1a1b1c8ab40d7815a1388da49379ffa57a45850334f", 0xba}], 0x5, &(0x7f0000000700)=[{0x88, 0x112, 0x5, "6ea48fbf136a2f2a0a3bb8e182f5eaf8023910aec1800a719b963a92f3bb61c2dfbbc94ac37fa0ec78b8d9119b858823839711839dff3eb4d6c47aa1b28b98378dee95a0fb3eb86b95e311b8673b9e0c90f472fddfd7b98538e0cf10ba16e2d60345557402f06e17c1aef0a4295214085cb4a870dd"}, {0x20, 0x11, 0x1ff, "d39c6c6154b9ffd2b4615ae0d6d4fcc8"}, {0x88, 0x10b, 0xffffffff, "e75195ec837d921f670c5337b7f320235a29fd55a17e665b98a982c5e37f09e795d2478902211503786b556e7a5445a191872ea7b19c98d48e8f5e2e8aba46ac6fd002b526f06424c7ac67b2a0968653ecdd2eff952d1e17b0c484426af2d84f5719136255dadb4fa18ad14a37a30681a5d242c0e2bd"}], 0x130}}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5cb8384b, 0x2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="c4f3c79bed77dc5ff287f7b2f7de67fc97021db6bef93a7a2d3ad500fda0dd8821231b6299d9ab90def74c5dd0b57c51018f8262f5ec935f7589598aa73cd635861a57227d6a8fb1d8347aed29e831c2db58e9a463370aee4f8cf9e429c3349da7603acddbaff0aa846ddce36c82", 0x6e}, {&(0x7f0000000940)="b7413f0aee4e4905be4d7c0f904772a8f18fa0f39022ec0631f6865da9b80f1901ae83de88f1103baef4e16e6a338a437bbfa2aa14ef1f1954e8f686d77c10f58395bf5778fb56c0756e", 0x4a}, {&(0x7f00000009c0)="fd18b1e453a5", 0x6}, {&(0x7f0000000a00)="b9e2c411f6a51f2ffd1c5a3e5717aaa2b703be07bf4780fe392fccd067b6249ad0eba11f4312c7925e0e5ac99cb35fe8384e30ccdff3409809d717923139f59a04876773cacef2f120d2500028c6a0564e", 0x51}, {&(0x7f0000000a80)="5bc614ae5e4f05e00b2c2c9dc93940a4052a07dc966aa418065a9c12bc3ea07857cf6c4cb6e4f54be425d5a75da93808fa771ff5af4621a0e0460001a1357634b8a100acac638de381dcf026a08e4acbb150bea746550e9bd8da6ca362a864449568a5620f7e05cd23160e34a3be08afbc94d1", 0x73}, {&(0x7f0000000b00)="d244a4a95044cb5de48b2942073e108464aba1cbef5b", 0x16}], 0x6}}, {{&(0x7f0000000bc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(cbc(des3_ede),cmac-aes-neon)\x00'}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)="739edd5c2250596834bb69916c6ae65544fc78e9e0dd7b62fbbdf039d53f7ca34513cf203d5dba796b03af0604ef109fa0acc4cd07367315b5fb537ed05d57955ed63768bf30aea240524da4baca9a9e6985d99c73f77946a5e02f8f2b036f60388ac7229f17384f105ce4f822a8193b29f6302a4edefd2d104c5264d1aab24dec0e5be27b13d4bc92cdb45b6dfb650f3a6f61e86dcb0caf01c208358d53f7", 0x9f}], 0x1, &(0x7f0000000d40)=[{0xb8, 0x29, 0x3, "0ebc8d57225ff4282c292c9709fd44ae8144a27b166b53da634ac8522d47c869717034b286fd825af5c2154be4f6649e0067c30faa6ea92c179256f96a06c4526ef4c10e38011d00d7d1b51174c91a686d090ed8d6ddaa1a75802b7215dec5f61ff22e438f1e224b3805bddca8a20620d2ac75d4a38d0236375dec0ba96d66e2c975330cc632190117c3ba64317a1db1b588ce9990b0e772c2e8a4dd49403ecf3d7307"}, {0x58, 0x10f, 0xcd, "d0397a211399c0464e0b82bb7f44be9214e3d0f3e1b1f26d8c3496bd577f0e793e3779bfc3dee1f9ee310e257e2b497b1e353861d7e8bdfafd01bf259c4ef0db0f2509aec5f872"}], 0x110}}], 0x3, 0x1) 2m7.733290787s ago: executing program 0 (id=430): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2060, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = socket(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x3, 0x14, 0x6cd, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x21c0cb, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e24, 0x2, @empty}}, 0xb91, 0x2}, &(0x7f0000000180)=0x90) 2m7.619789355s ago: executing program 0 (id=432): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') syz_open_dev$loop(0x0, 0x75f, 0xa8182) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) 2m6.813517009s ago: executing program 0 (id=433): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb4785b34e3ebc5453fe38355f471e72ce1ec1a97cf1c8bf408e3c7c9c66183baddfc5b83158c3eb4f380db9d5f5e9e16f0928c6ddbd33ec289d8f76bd722b8653398939a9f8440741"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x802) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1be14a6c256c1fc000000000000000000000000080800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r13, r11, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6743160000283afffe880000000000000000000000000001ff02000000000000000000ed60fc00018900907800000000ff00000000000000000000000000000100000000000000000000000000000001"], 0x0) 2m6.577922722s ago: executing program 42 (id=433): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb4785b34e3ebc5453fe38355f471e72ce1ec1a97cf1c8bf408e3c7c9c66183baddfc5b83158c3eb4f380db9d5f5e9e16f0928c6ddbd33ec289d8f76bd722b8653398939a9f8440741"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x802) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1be14a6c256c1fc000000000000000000000000080800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r13, r11, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6743160000283afffe880000000000000000000000000001ff02000000000000000000ed60fc00018900907800000000ff00000000000000000000000000000100000000000000000000000000000001"], 0x0) 7.956590336s ago: executing program 1 (id=948): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f00000000c0)='\v\x00\x00\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000041000742800c00018006000600800a00000800028004001280"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.701589115s ago: executing program 1 (id=951): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_genetlink_get_family_id$wireguard(0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x3, 0x0, 0x1}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0xb8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xa4, 0x1, [@m_ct={0xa0, 0xd, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_ACTION={0x6, 0x3, 0x11}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x3, 0x3, 0xf}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x9, 0x6, "3d2a872d7a"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}]}]}, 0xfffffff5}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000005c0), 0x80, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r11, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000881}, 0x4080) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$wireguard(0x0, r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x3, 0x0, 0x1}) (async) socket(0x10, 0x80002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000080)) (async) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) (async) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0xb8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xa4, 0x1, [@m_ct={0xa0, 0xd, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_ACTION={0x6, 0x3, 0x11}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x3, 0x3, 0xf}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x9, 0x6, "3d2a872d7a"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}]}]}, 0xfffffff5}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) (async) mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000005c0), 0x80, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r11, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000881}, 0x4080) (async) 6.430923739s ago: executing program 3 (id=952): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) mmap(&(0x7f0000395000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x6b907000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000395000/0x3000)=nil, 0x3000}) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="e5f30a7658da0531334d11b4908982ea63436415cf46cef027a7044e10dd7f6ede", 0x21) 6.306476406s ago: executing program 7 (id=953): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xf}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x17}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xdf9, &(0x7f00000000c0)}) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r4, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000ac0)={0x9, &(0x7f00000001c0)=""/171, &(0x7f00000009c0)=[{0x6, 0x40, 0x0, &(0x7f0000000280)=""/64}, {0xb, 0xbc, 0x6, &(0x7f00000003c0)=""/188}, {0x0, 0xcf, 0x72, &(0x7f0000000480)=""/207}, {0x1, 0xcf, 0x80000000, &(0x7f0000000580)=""/207}, {0x8, 0xa6, 0x4, &(0x7f0000000680)=""/166}, {0x5, 0x53, 0x0, &(0x7f0000000740)=""/83}, {0x6000000, 0x9, 0x800, &(0x7f00000007c0)=""/9}, {0x4, 0xfa, 0x14c1, &(0x7f0000000800)=""/250}, {0xfffffff7, 0xb7, 0x100, &(0x7f0000000900)=""/183}]}) close_range(r0, r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000b00)="bea10c14578ec9b048a25ba3a349be1ff6aa455d3b2f60c6723a0a2961dedae1dc78d4a961352816e630ea4a038e77477350f7b0e3fbef0514f21f7c81719b0b996ef65474e5be5376bc882190268c1b1b01ba22bbfe1354d7c8813a27a95af5db7453b04a72d36516dbf0e94e16113506f333363bd71872a6b6f2da144b946e376a2eda", 0x84) 6.134678654s ago: executing program 7 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000003f0007012bbd700000000000017c000004000c000180080006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000014000500ff020000000000000000000000000001"], 0xfe9a}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000001c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x1f8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000600), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, 0xffffffff, 0xff, 'batadv_slave_1\x00', 'wg0\x00', {}, {0xff}, 0x1, 0x3, 0x20}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x40}}, @common=@ttl={{0x28}, {0x1, 0x6}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x17, @loopback, @remote, @gre_key=0xa, @gre_key=0x4}}}}, {{@ip={@empty, @broadcast, 0xff, 0xff, 'vcan0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x4, 'fr', 0x1}}, @common=@ah={{0x30}, {[0xb7]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x10}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, 0xff, 0xffffffff, 'wg0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0xc, 0x1, 0x20}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xe, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @gre_key=0x20, @gre_key=0xf72f}}}}, {{@ip={@multicast1, @private=0xa010102, 0xff, 0x0, 'caif0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x24}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x7]}}, @common=@unspec=@mark={{0x30}, {0xb4, 0x1000}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @private=0xa010102, @broadcast, @icmp_id=0x65, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="010200007f00000100000000000000ac3b000000dd860000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$l2tp6(0xa, 0x2, 0x73) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x48}}, 0x0) 5.360125237s ago: executing program 1 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x60402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x37ad37ca69a5fd92, 0x41000, 0x8, 0x7f, 0x3, 0x1, 0x40, 0x3, 0x0, 0x20, 0x19}, {0x41000, 0xa000, 0xa, 0x4, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0xff}, {0xc000, 0x4000, 0xb, 0x5, 0x3, 0x9, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0x9000, 0x3, 0x40, 0x5, 0x43, 0x9, 0xfa, 0x80, 0x6, 0xe}, {0xdddd0000, 0x26000, 0x10, 0x2d, 0x3, 0x7, 0x80, 0x7f, 0x47, 0x83, 0xf9, 0x2}, {0x1000, 0x80a0000, 0x8, 0x7, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x7e, 0xef, 0x70}, {0xffff1000, 0xb000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x16, 0x2, 0x0, 0x7, 0x9}, {0xb000, 0x2d}, {0x1, 0x3fe}, 0x80000031, 0x0, 0x5000, 0x42024, 0xb, 0x4501, 0x3000, [0xe840000000000002, 0x7, 0x91, 0xff]}) 5.045105421s ago: executing program 7 (id=961): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r1, 0x2219, 0xb, 0x16, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f00000001c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x4, 0x7, 0x3c5b, 0xffffff7f, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x0, 0xffff, 0x3, 0x5, 0x2, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x10b, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0xe, 0x20000008, 0x4, 0x6cfd, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0xa2, 0x12b, 0x20, 0x1, 0xa, 0x3, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x1, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0x3f8, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffd, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x80010005, 0x8, 0x9, 0x3, 0xf40, 0x400007, 0x1, 0x6c1b, 0x2, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff34c1, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r6, &(0x7f0000001f40)={0x2020}, 0x2020) 4.528235102s ago: executing program 9 (id=963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x35, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.327699008s ago: executing program 1 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x840) 3.729067273s ago: executing program 9 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_io_uring_setup(0x3064, &(0x7f0000000080)={0x0, 0xa831, 0x40000, 0x0, 0x1ed}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000300)=""/160, 0xa0}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000700)=""/99, 0x63}], 0x7, 0x4, 0x1) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) munmap$IORING_OFF_CQ_RING(r1, 0x7126) close(r3) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, r6, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x2, {}, 0x1, {0x0, r7}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/min_age\x00', 0x1, 0x0) write(r9, &(0x7f0000000140)="30bd", 0x2) 3.643536804s ago: executing program 1 (id=967): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640), 0x183502, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000000)={0x6, @link_local}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="921f1e5ad61d021b191f000000f30904150001da090000091e0400"/38, @ANYRES64=r1, @ANYBLOB="3b87bceb8a81fd68fe2b2c5c791c1ed61f63f4b7c3f14d8eba90c2ff4c36d45f9f7d75bfa533a142ab45ee16122c0c5d644fa51c46689e62474823048fc1ecd44b5aad25da0f3f97588a2b260e0ba32c031b0b27aafbeda4474fb31092250dffb2588c16f3f4cdab095354a920e380ec997f205808e56fc6274dc0726d2ca6eaefaf78f284c0a0e9e80b717d2beb822cdcdd38fd5aef702d6963b744cb19330623fa114d1390ad4c"], 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x15, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000040)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)='.', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001600010a00e5829fefe887562d"], 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x8, 0x4, 0x4b, @private2, @mcast2, 0x1, 0x7800, 0x80, 0x9}}) 3.552438648s ago: executing program 3 (id=968): r0 = semget$private(0x0, 0xb, 0x19f) semop(r0, &(0x7f00000001c0)=[{0x2, 0x6}, {0x2}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000002400)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x505}, 0x5, 0x16a0}) r1 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="f7", @ANYRESDEC, @ANYRESOCT=0x0], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000006c0)=""/128) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x50000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x16c, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200006}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60a3}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x933, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa3c}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcebf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) getegid() syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00') r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) r8 = semget(0x1, 0x4, 0x88) semctl$GETNCNT(r8, 0x0, 0xe, &(0x7f0000000200)=""/221) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 2.576624242s ago: executing program 9 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) r1 = syz_io_uring_setup(0x2, &(0x7f0000000100)={0x0, 0x0, 0x100}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000600)}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x9, &(0x7f00000014c0)=@raw=[@printk={@llu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}, @exit], &(0x7f0000001540)='GPL\x00'}, 0x90) landlock_restrict_self(r5, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r6, 0x400, 0x2) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000d40)={r6, 0x0, 0xe8, 0x0, &(0x7f0000000b40)="fd0af8e6c3a61efc8169a03b2704e5dc8fea4e12ad31d375c768fe5fb8f2e4ecf9588e810d7b84fbabec4d56b0f2c9d64e8e352a70bb9126b0239d5a362bcb8ece0d535faed35a75badb21753d5a82e3161fa2a94a9a7d0d7ec6f3800a92818345d484819e872647776aac7a948f9200cb43354660ae6d5ef16d696ced82921f04b0b1b87ac5a8e6e71f80c741ccbcfda443aeed3ce32ddf4009ab7a00fe0e4b3fb34f8b431a8953a378aba821de08989a6855fa5b6f3e52a2bbdb0a9b307a12f02838a88a95b0e4a051ecf2ac90c0b986b42caa47033d0ddaadee1be4b762db11f35c1d0cc0e1ca", 0x0, 0x7, 0x0, 0xd8, 0x0, &(0x7f0000000dc0)="d44ea1d506f89dd23c51a090cd0c2e5d95dc7db248254e5b245d0146d0df12b3339846a6a8966cc8a1317f3109a59a86e90fe50a4d3d79f7112f4781d0d14c67792fe0f2a3428ec8d34bb63dd7a9b5ed6b221303b85038435b6a5f86a5b394410af8fc069e3e604e5956060f0f84665a9f01a7b77cb6666272f61bfe27023e145ed9f319f8c585f553f48950c05bd7dab3f574de8020cb1db1d1dd279b33d51f3e973dfebc75ed07329f9e66cd00c9caddad526b9ccdf7d4719687187191e2f576f1ae00a6941e1b041afa366aee09108679a4e6b4f72f43", 0x0, 0x2, 0x0, 0x6}, 0x50) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f0000000180)=""/117, 0x75) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) ioctl$FE_READ_BER(r9, 0x80046f46, &(0x7f0000000280)) io_uring_enter(r1, 0x2, 0x0, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00') 2.472732032s ago: executing program 6 (id=971): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x6, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, 0x40, 0x8000, 0x2, 0xe}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301010000000000000000030000000c0002"], 0x20}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x200, 0x10, 0x1, 0xbffffffa, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xd1, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_aead={0x10d, 0x12, {{'aegis128-aesni\x00'}, 0x608, 0x0, "5064a46617a19bdcaa9e30998b522422a37c679c5bfee9094db1f60ddb7d91fac84b11798175d0a9f0b47814adb09c3ffc98d73989860ca564c17dab972968e117a88db9deb955132231e13e3bd178f31314b6dd6eb026990b2285f4cdf1d58875625419f29d6331da6a8ff8b7e089cad15abaae9cc15ea97b44dbb188ab8041170287b74f0c7d5af4935a332a15d8a8fbfdc46ede08573b1e631a9139d4e5117428df340e0ab1cb7f131a27d5201b3919672fba79de5ea06abd4589d773b03cf1"}}]}, 0x200}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='Gb', 0x61}, {&(0x7f0000000b40)="22003c93b682ef5cb6dc5c145ff000000000", 0x12}], 0x2}, 0x0) 2.463808297s ago: executing program 7 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b002000000900020073797a32000000000900010073797a3100000000140005800800024000000002080001400000003c"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x844) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) bind(r2, &(0x7f0000000300)=@generic={0x8, "ffff0000feffffff00"}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$XFS_IOC_GETBMAP(r6, 0xc0205826, &(0x7f00000001c0)={0x7, 0x7, 0x7, 0x0, 0x4}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000000)=0x8, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000006d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0x51, &(0x7f0000006cc0)={&(0x7f000000d780)=ANY=[@ANYRES32=r1, @ANYRES8=r6], 0x6988}, 0x1, 0x0, 0x0, 0x40091}, 0x40080c0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.226610687s ago: executing program 9 (id=973): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="070004000000feffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="360000004340090000bd7000fedbdf25037c654d0000000000000180ba6058472b91d84cf89c04001080"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1.98487588s ago: executing program 6 (id=974): mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffffde) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/100, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x13, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c7ef647c524516c0e45ec91a98a614276cb321854000000000000", 0x21}, {&(0x7f0000001bc0)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76f2c54838cc07f75ff14636ce35f9c1d2dd70ce5c6e64c034800ef585eac5f570af484c7972e2", 0x47}], 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001800)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x4, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc5e3ee60080b8785d96000100", "131dfac11d875397bdb22d007ee886b309c80300000000000000000000000000000000000000000000000000000000000000000000ffffffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xee3c, 0x41142) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r6 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000040)=0x6) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x5, 0x0, 0xc, 0x9}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) 1.892436027s ago: executing program 6 (id=975): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 1.863598475s ago: executing program 6 (id=976): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001ac0)=ANY=[], 0x8c4}}, 0x4048000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x21002}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000) socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$cgroup_pressure(r5, &(0x7f00000000c0)={'full', 0x20, 0xfffffffffffffffd}, 0x2f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 1.660789966s ago: executing program 6 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000380)=0x10, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x10000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x3b, r4}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x12, r6, 0x100000000) 1.631942074s ago: executing program 6 (id=978): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xe3900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r9, &(0x7f0000000000)=""/120, 0x78, 0x2f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {0xffffffffffffffff, 0xf102}], 0x2, 0x8000007) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x1) 1.513111084s ago: executing program 7 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x101, 0x2000000, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x101}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4024000) syz_open_dev$vcsu(0x0, 0xffffffffffffffff, 0x40000) 1.434325515s ago: executing program 9 (id=980): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0xa4ffffff, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.433909838s ago: executing program 7 (id=981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r1, 0x2219, 0xb, 0x16, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f00000001c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x4, 0x7, 0x3c5b, 0xffffff7f, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x0, 0xffff, 0x3, 0x5, 0x2, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x10b, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0xe, 0x20000008, 0x4, 0x6cfd, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0xa2, 0x12b, 0x20, 0x1, 0xa, 0x3, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x1, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0x3f8, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffd, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x80010005, 0x8, 0x9, 0x3, 0xf40, 0x400007, 0x1, 0x6c1b, 0x2, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff34c1, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r6, &(0x7f0000001f40)={0x2020}, 0x2020) 444.608788ms ago: executing program 9 (id=982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r1, 0x2219, 0xb, 0x16, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f00000001c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x4, 0x7, 0x3c5b, 0xffffff7f, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x0, 0xffff, 0x3, 0x5, 0x2, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x10b, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0xe, 0x20000008, 0x4, 0x6cfd, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0xa2, 0x12b, 0x20, 0x1, 0xa, 0x3, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x1, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0x3f8, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffd, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x80010005, 0x8, 0x9, 0x3, 0xf40, 0x400007, 0x1, 0x6c1b, 0x2, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff34c1, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r6, &(0x7f0000001f40)={0x2020}, 0x2020) 444.264194ms ago: executing program 1 (id=983): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x20300, 0x8) write(r2, &(0x7f0000000180)='0', 0x1) write(r2, &(0x7f00000001a0)='1', 0x1) 420.510455ms ago: executing program 3 (id=984): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf25307c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) 304.531018ms ago: executing program 3 (id=985): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={r0}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=""/185, 0xb9}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x5e82ebff83f58d66) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000001c0)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r1 = socket$packet(0x11, 0x3, 0x300) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0xd5, 0x0, 0x0, "965689f345e21ad4fab27c27c27267bd", "5b6064fafdce0ad1499418034d0e2454252222f281ea84dcb714984d528053a779ded7f4f1297b508e4cd82a8eae85642e54a23ad60b71b3cb4fabe331377d647d9cf0b9a657a57b6b5350ceb5b2d9c650c5c1ef4e321b1cffcd663e91a88e8a9663d5fcc25f6c9f926ead012645611b3fd3ff62619e52d9cb33e1fab7598f70882220d5794e6cdfaf9a64681b04bf5113990c6f195ee2e9d1f9e5d647e526ae172896c25677ce3a639636844fcd7513535e65ca20daf326e0c41185133a5451"}, 0xd5, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2000, 0x60) utimensat(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x77359400}}, 0x100) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000440)) pwritev(r1, &(0x7f00000006c0)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="54347799e4fdc4de763708954bc61efcd6", 0x11}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="7631d9c593a23fd433e06e507ada413fc6495d94e9e61768c1744759a71e4b3d755857ab9f3173ee754cd94f03", 0x2d}, {&(0x7f0000000640)="073e3e7681314304f6b0cda78c6d8691b5417e88032a8e18477575fdec579d627ebdba645eeaaf704c38d6582886b1fba43c0cc815a6799c51308561441d1b579749c4cc7c353cfc66f16c7c1f373dce6ab00728c242aaa8e22739b6019c76f348a2cecc9c9c7424af9a4ffa86f7a6", 0x6f}], 0x5, 0xffffff0e, 0x58c3) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3400) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x2000000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@afid={'afid', 0x3d, 0xb74d}}], [{@fowner_gt={'fowner>', r5}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_measure}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, 'trusted.overlay.upper\x00'}}, {@seclabel}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt}, {@euid_gt={'euid>', r6}}]}}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x480000, 0x0) syz_extract_tcp_res(&(0x7f0000000b00)={0x41424344}, 0x7, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000b40)={0x41424344}, 0x1, 0x0) write$tun(r7, &(0x7f0000000b80)={@val={0x0, 0x8864}, @val={0x2, 0x0, 0x24, 0x2, 0x8001, 0x1}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x21a, 0x67, 0x0, 0x4, 0x6, 0x0, @empty, @remote, {[@end, @end]}}, {{0x4e21, 0x4e20, r8, r9, 0x1, 0x0, 0x45, 0x2, 0x7, 0x0, 0x7f, {[@fastopen={0x22, 0xf, "26ea67526a1738aa64eb5769b9"}, @mptcp=@remove_addr={0x1e, 0xd5, 0x5, 0x0, "5e1c631a7104787ca1895506fa41d5e0646f6d8180ef70f72a63f2a318cbb293804fab596901c1a6c67b6a62769c9b3dc60d6a80ad86c45ffcdc5aec0785cb1020acf82fabafa08e08b54bdbd2565623a4eb1874cec4f0d10c2d195d5ff183a77d9a5e967dabc1c3f7d564aad07abece756fb5581239fe9fea8a7d2b04d397c9e1fffaebc2bb144f8e971681e6666d5c09294ac55ff7023163301cac312e8f75a9546d4a2810e4661bdca36862b058a4ee6f63ba8dfa75d5dbfb0fc5f037900dd05dee0e0295045b73bb67752667e407c88c"}, @mss={0x2, 0x4, 0x3}, @sack_perm={0x4, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x3, 0x5, 0x10001}, @fastopen={0x22, 0x3, "e1"}, @sack={0x5, 0x6, [0x5]}]}}, {"4a1043287899f082396640acbf482b2b669c02d78abcffadb494c0d7017974bb9e3c2322e6d29ecd0a2c1ea0a37fdfd627b53eea14500dce250a1b0936915942df30c73dab8baf8af647cc4c1417610dd2931f14336024f18bcb1e83d9014456d3951030ce0552353b69ae41c2eda47d8d5d7a99b3906f14faa1e155a59e76964f42521b92c097046ccb5913efeedf8140a03e67d69c3c2d43b84535f2d3f40c467afe47ee796a69e53374db4bea531c7eb3a2660c8568ac3286ea575ca24cefe6010fe9ecb3d2167c3edebfa73c3e6edb1aaf64740af1de3526241b52ca4abb0205134f75b5d62701ac04531652"}}}}, 0x228) execve(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000fc0)={[&(0x7f0000000e00)='trusted.overlay.upper\x00', &(0x7f0000000e40)='trans=fd,', &(0x7f0000000e80)=')%]\x00', &(0x7f0000000ec0)='afid', &(0x7f0000000f00)='^(\x00', &(0x7f0000000f40)='fowner>', &(0x7f0000000f80)='\x0e\x00']}, &(0x7f00000010c0)={[&(0x7f0000001000)='trans=fd,', &(0x7f0000001040)=':!{@+/%)*\x00', &(0x7f0000001080)='-\x00']}) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f0000001100)={""/4, 0x4}) recvfrom$l2tp6(r7, &(0x7f0000001140)=""/67, 0x43, 0x100, &(0x7f00000011c0)={0xa, 0x0, 0x0, @private2}, 0x20) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) sched_setscheduler(r10, 0x6, &(0x7f0000001280)=0x9) write$tun(r7, &(0x7f00000012c0)={@val={0x0, 0x809b}, @val={0x1, 0x0, 0x7, 0x80, 0x1, 0x6}, @x25={0x0, 0x8, 0xf3, "b60ebb5248bd92c5de23aabc93221e94c4afa2b8039c264aae62a8630f4f9460b054668dfd2dcc5d05a79849f31f64e8d04a7d526bf4976604288217676edb19f770fa0a380fb2ee9459d7ea49e0ceb554765e3bf32905b6a7b7da8c2fd39d4153c619852ed04a456a487f01b83ae2083a3f2e5219302d0456eeff8fe1575a5aeb51501cffee"}}, 0x97) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001380), 0x143000, 0x0) r11 = open$dir(&(0x7f00000013c0)='./file0/file0\x00', 0x181040, 0x10) utimensat(r11, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={{}, {0x77359400}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001480)=0x4) 73.111978ms ago: executing program 3 (id=986): socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=987): mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffffde) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/100, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x13, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c7ef647c524516c0e45ec91a98a614276cb321854000000000000", 0x21}, {&(0x7f0000001bc0)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76f2c54838cc07f75ff14636ce35f9c1d2dd70ce5c6e64c034800ef585eac5f570af484c7972e2df6b", 0x49}], 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001800)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x4, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc5e3ee60080b8785d96000100", "131dfac11d875397bdb22d007ee886b309c80300000000000000000000000000000000000000000000000000000000000000000000ffffffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xee3c, 0x41142) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r6 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000040)=0x6) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x5, 0x0, 0xc, 0x9}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.907724][ T188] usb 7-1: Product: syz [ 232.912023][ T188] usb 7-1: Manufacturer: syz [ 232.912254][ T9314] usb 2-1: Product: syz [ 232.917068][ T188] usb 7-1: SerialNumber: syz [ 232.943453][ T9314] usb 2-1: Manufacturer: syz [ 232.960108][ T9314] usb 2-1: SerialNumber: syz [ 232.977399][ T9314] usb 2-1: config 0 descriptor?? [ 233.043663][ T29] audit: type=1400 audit(1785717111.249:1463): avc: denied { write } for pid=9412 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.116511][ T9314] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 233.148245][ T188] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 233.160778][ T188] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 233.173978][ T188] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 233.257184][ T5711] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 233.276084][ T188] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 233.489382][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.570166][ T5711] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.584568][ T9314] gspca_sn9c2028: read1 error -32 [ 233.590752][ T9314] gspca_sn9c2028: read1 error -71 [ 233.598337][ T9314] gspca_sn9c2028: read1 error -71 [ 233.608442][ T9314] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 233.608640][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.619796][ T9314] usb 2-1: USB disconnect, device number 13 [ 233.680215][ T5711] usb 10-1: config 0 descriptor?? [ 233.922281][ T5711] usbhid 10-1:0.0: can't add hid device: -71 [ 233.932757][ T29] audit: type=1400 audit(1785717112.129:1464): avc: denied { write } for pid=9422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.961724][ T5711] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 233.967512][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 234.007128][ T5711] usb 10-1: USB disconnect, device number 7 [ 234.023359][ T29] audit: type=1400 audit(1785717112.219:1465): avc: denied { write } for pid=9437 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.040586][ T9439] vlan2: entered allmulticast mode [ 234.063625][ T9439] veth0_to_bond: entered allmulticast mode [ 234.106372][ T188] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 234.147888][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.160441][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.174105][ T29] audit: type=1400 audit(1785717112.379:1466): avc: denied { write } for pid=9442 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.175890][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.211105][ T9444] binder: 9442:9444 ioctl c0306201 200000000740 returned -22 [ 234.219347][ T29] audit: type=1400 audit(1785717112.419:1467): avc: denied { read } for pid=9442 comm="syz.1.589" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.231890][ T46] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 234.254063][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.255654][ T29] audit: type=1400 audit(1785717112.419:1468): avc: denied { open } for pid=9442 comm="syz.1.589" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.267400][ T46] usb 4-1: Product: syz [ 234.286903][ T188] usb 8-1: Using ep0 maxpacket: 16 [ 234.298685][ T188] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.309851][ T188] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.322253][ T188] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.338418][ T188] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 234.351174][ T188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.366533][ T188] usb 8-1: config 0 descriptor?? [ 234.376468][ T188] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input32 [ 234.383024][ T46] usb 4-1: Manufacturer: syz [ 234.423780][ T46] usb 4-1: SerialNumber: syz [ 234.425356][ T5711] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 234.468686][ T46] usb 4-1: selecting invalid altsetting 1 [ 234.490593][ T46] usb 4-1: unit 6 not found! [ 234.589735][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.594511][ T9314] usb 8-1: USB disconnect, device number 7 [ 234.601071][ T5711] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 234.618927][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.653909][ T5711] usb 10-1: config 0 descriptor?? [ 234.789112][ T9466] netlink: 168 bytes leftover after parsing attributes in process `syz.1.591'. [ 235.045764][ T5678] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 235.225291][ T5678] usb 2-1: Using ep0 maxpacket: 16 [ 235.684301][ T188] usb 7-1: USB disconnect, device number 25 [ 236.256433][ T5678] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 236.268085][ T46] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 236.279979][ T5678] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 236.289799][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.300596][ T5678] usb 2-1: Product: syz [ 236.306850][ T5678] usb 2-1: Manufacturer: syz [ 236.315383][ T5678] usb 2-1: SerialNumber: syz [ 236.340866][ T5678] usb 2-1: config 0 descriptor?? [ 236.353327][ T9466] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 236.384622][ T46] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.409161][ T5678] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 236.437941][ T5711] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 236.443469][ T46] usb 4-1: USB disconnect, device number 13 [ 236.463538][ T5711] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input33 [ 236.709638][ T5711] usb 10-1: USB disconnect, device number 8 [ 236.715933][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 236.794735][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.976683][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 236.977015][ T5806] usb 2-1: USB disconnect, device number 14 [ 236.982866][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 237.056842][ T5806] mcba_usb 2-1:0.0 can0: device disconnected [ 237.660502][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 237.660518][ T29] audit: type=1400 audit(1785717115.869:1482): avc: denied { listen } for pid=9534 comm="syz.9.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.710372][ T29] audit: type=1400 audit(1785717115.869:1483): avc: denied { accept } for pid=9534 comm="syz.9.601" lport=59070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.737568][ T29] audit: type=1400 audit(1785717115.909:1484): avc: denied { bind } for pid=9538 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.757910][ T29] audit: type=1400 audit(1785717115.919:1485): avc: denied { setopt } for pid=9538 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.781998][ T29] audit: type=1400 audit(1785717115.969:1486): avc: denied { write } for pid=9536 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.858836][ T29] audit: type=1400 audit(1785717116.019:1487): avc: denied { ioctl } for pid=9538 comm="syz.1.602" path="socket:[29691]" dev="sockfs" ino=29691 ioctlcmd=0xaeba scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.887217][ T5711] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.981570][ T9544] syzkaller0: entered promiscuous mode [ 238.010881][ T9544] syzkaller0: entered allmulticast mode [ 238.057012][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 238.066949][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.070984][ T9553] overlayfs: missing 'workdir' [ 238.075879][ T5711] usb 4-1: config 3 has an invalid interface number: 105 but max is 1 [ 238.126368][ T5711] usb 4-1: config 3 has an invalid interface number: 164 but max is 1 [ 238.147976][ T5711] usb 4-1: config 3 has no interface number 0 [ 238.168363][ T5711] usb 4-1: config 3 has no interface number 1 [ 238.179411][ T5711] usb 4-1: config 3 interface 105 has no altsetting 0 [ 238.192712][ T5711] usb 4-1: config 3 interface 164 has no altsetting 0 [ 238.204524][ T5711] usb 4-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 238.233630][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.254188][ T5711] usb 4-1: Product: syz [ 238.267026][ T5711] usb 4-1: Manufacturer: syz [ 238.280062][ T5711] usb 4-1: SerialNumber: syz [ 238.305292][ T46] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 238.339183][ T29] audit: type=1400 audit(1785717116.549:1488): avc: denied { unmount } for pid=8349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 238.452577][ T29] audit: type=1400 audit(1785717116.659:1489): avc: denied { listen } for pid=9568 comm="syz.7.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.504879][ T46] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.534379][ T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.562695][ T29] audit: type=1400 audit(1785717116.659:1490): avc: denied { ioctl } for pid=9568 comm="syz.7.607" path="socket:[29748]" dev="sockfs" ino=29748 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.589825][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.618791][ T46] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 238.628827][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.639943][ T46] usb 7-1: Product: syz [ 238.650346][ T46] usb 7-1: Manufacturer: syz [ 238.673607][ T46] usb 7-1: SerialNumber: syz [ 238.724618][ T46] usb 7-1: selecting invalid altsetting 1 [ 238.740710][ T46] usb 7-1: unit 6 not found! [ 238.783521][ T5711] uvcvideo 4-1:3.164: Found multiple Units with ID 5 [ 238.877025][ T29] audit: type=1400 audit(1785717117.069:1491): avc: denied { bind } for pid=9578 comm="syz.7.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.916146][ T5711] uvcvideo 4-1:3.164: Found multiple Units with ID 1 [ 239.032502][ T5711] uvcvideo 4-1:3.164: Found UVC 0.03 device syz (04c8:0720) [ 239.158788][ T5711] uvcvideo 4-1:3.164: Entity type for entity Output 32773 was not initialized! [ 239.215494][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.230876][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.247263][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.259491][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.281570][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.296286][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.310501][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.326410][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.339702][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.352355][ T9582] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.498911][ T5711] uvcvideo 4-1:3.164: Entity type for entity Input 65535 was not initialized! [ 239.595600][ T5711] uvcvideo 4-1:3.164: Failed to create links for entity 32773 [ 239.700602][ T5711] uvcvideo 4-1:3.164: Failed to register entities (-22). [ 240.024574][ T5711] usb 4-1: USB disconnect, device number 14 [ 240.406906][ T46] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 240.448350][ T46] usb 7-1: USB disconnect, device number 26 [ 240.522807][ T9598] input: syz0 as /devices/virtual/input/input34 [ 241.443809][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.914045][ T9616] Cannot find add_set index 0 as target [ 242.136030][ T188] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 242.276441][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 242.316023][ T46] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 242.334122][ T9634] syzkaller0: entered promiscuous mode [ 242.358024][ T188] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.373360][ T9634] syzkaller0: entered allmulticast mode [ 242.400826][ T188] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.414577][ T9629] overlayfs: missing 'workdir' [ 242.463227][ T188] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 242.483790][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.514288][ T46] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.546733][ T188] usb 10-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 242.556256][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.589024][ T188] usb 10-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 242.591796][ T46] usb 8-1: config 0 descriptor?? [ 242.636859][ T188] usb 10-1: Product: syz [ 242.654768][ T188] usb 10-1: SerialNumber: syz [ 242.692224][ T188] usb 10-1: config 0 descriptor?? [ 242.722857][ T9612] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 242.869770][ T46] usbhid 8-1:0.0: can't add hid device: -71 [ 242.886359][ T46] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 242.918560][ T46] usb 8-1: USB disconnect, device number 8 [ 242.975122][ T2159] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 243.062657][ T188] usbtouchscreen 10-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 243.120825][ T188] usb 10-1: USB disconnect, device number 9 [ 243.135125][ T2159] usb 7-1: Using ep0 maxpacket: 8 [ 243.144206][ T2159] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 243.169865][ T2159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 243.203921][ T2159] usb 7-1: Product: syz [ 243.208703][ T2159] usb 7-1: Manufacturer: syz [ 243.218721][ T2159] usb 7-1: SerialNumber: syz [ 243.231469][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 243.231483][ T29] audit: type=1400 audit(1785717121.439:1505): avc: denied { write } for pid=9640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.232360][ T2159] usb 7-1: config 0 descriptor?? [ 243.313965][ T2159] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 243.400446][ T29] audit: type=1400 audit(1785717121.609:1506): avc: denied { write } for pid=9666 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.492807][ T46] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 243.517177][ T2159] gspca_sn9c2028: read1 error -32 [ 243.525685][ T2159] gspca_sn9c2028: read1 error -71 [ 243.531466][ T2159] gspca_sn9c2028: read1 error -71 [ 243.541018][ T2159] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 243.569361][ T2159] usb 7-1: USB disconnect, device number 27 [ 243.658473][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.675451][ T46] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 243.721375][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.764666][ T46] usb 8-1: config 0 descriptor?? [ 243.782859][ T29] audit: type=1400 audit(1785717121.989:1507): avc: denied { mount } for pid=9681 comm="syz.9.625" name="/" dev="configfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 243.823818][ T29] audit: type=1400 audit(1785717122.019:1508): avc: denied { search } for pid=9681 comm="syz.9.625" name="/" dev="configfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.823871][ T29] audit: type=1400 audit(1785717122.019:1509): avc: denied { search } for pid=9681 comm="syz.9.625" name="usb_gadget" dev="configfs" ino=3762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.823907][ T29] audit: type=1400 audit(1785717122.019:1510): avc: denied { search } for pid=9681 comm="syz.9.625" name="/" dev="configfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.823941][ T29] audit: type=1400 audit(1785717122.019:1511): avc: denied { search } for pid=9681 comm="syz.9.625" name="usb_gadget" dev="configfs" ino=3762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.823970][ T29] audit: type=1400 audit(1785717122.019:1512): avc: denied { setopt } for pid=9681 comm="syz.9.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.970275][ T29] audit: type=1400 audit(1785717122.179:1513): avc: denied { write } for pid=9672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.126204][ T2159] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 244.138285][ T29] audit: type=1400 audit(1785717122.349:1514): avc: denied { write } for pid=9696 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.286567][ T2159] usb 4-1: Using ep0 maxpacket: 8 [ 244.309818][ T2159] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 244.420941][ T9718] NILFS (nbd6): device size too small [ 244.596179][ T46] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 244.858304][ T2159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 245.175985][ T46] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input36 [ 245.190564][ T2159] usb 4-1: Product: syz [ 245.204257][ T2159] usb 4-1: Manufacturer: syz [ 245.211651][ T2159] usb 4-1: SerialNumber: syz [ 245.226787][ T2159] usb 4-1: config 0 descriptor?? [ 245.240371][ T2159] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 245.468403][ T2159] gspca_sn9c2028: read1 error -32 [ 245.519450][ T2159] gspca_sn9c2028: read1 error -32 [ 245.539493][ T2159] gspca_sn9c2028: read1 error 0 [ 245.560931][ T188] usb 8-1: USB disconnect, device number 9 [ 245.561023][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 245.587923][ T2159] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 245.632244][ T9741] netlink: 280 bytes leftover after parsing attributes in process `syz.1.632'. [ 245.838831][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 246.282845][ T9770] syz_tun: entered promiscuous mode [ 246.465754][ T188] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 246.649779][ T188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.663031][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.709474][ T188] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.758806][ T188] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 246.798982][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.828672][ T188] usb 2-1: Product: syz [ 246.845175][ T188] usb 2-1: Manufacturer: syz [ 246.853967][ T188] usb 2-1: SerialNumber: syz [ 246.873139][ T188] usb 2-1: selecting invalid altsetting 1 [ 246.890394][ T188] usb 2-1: unit 6 not found! [ 246.933498][ T2159] usb 4-1: USB disconnect, device number 15 [ 247.475384][ T5711] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 247.486640][ T9828] FAULT_INJECTION: forcing a failure. [ 247.486640][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 247.545495][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.3.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.545525][ T9828] Tainted: [L]=SOFTLOCKUP [ 247.545531][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 247.545540][ T9828] Call Trace: [ 247.545546][ T9828] [ 247.545553][ T9828] dump_stack_lvl+0x100/0x190 [ 247.545584][ T9828] should_fail_ex.cold+0x5/0xa [ 247.545607][ T9828] should_failslab+0xc2/0x120 [ 247.545631][ T9828] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 247.545656][ T9828] ? sidtab_sid2str_get+0x17a/0x670 [ 247.545679][ T9828] kmemdup_noprof+0x29/0x60 [ 247.545699][ T9828] sidtab_sid2str_get+0x17a/0x670 [ 247.545720][ T9828] security_sid_to_context_core+0x35a/0x6d0 [ 247.545753][ T9828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.545777][ T9828] avc_audit_post_callback+0x109/0x910 [ 247.545798][ T9828] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 247.545826][ T9828] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 247.545844][ T9828] ? skb_put+0x138/0x180 [ 247.545870][ T9828] ? audit_log_n_string+0x2a3/0x5a0 [ 247.545895][ T9828] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 247.545913][ T9828] common_lsm_audit+0x23f/0x2b0 [ 247.545941][ T9828] ? __pfx_common_lsm_audit+0x10/0x10 [ 247.545968][ T9828] ? lockdep_hardirqs_on+0x78/0x100 [ 247.545991][ T9828] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 247.546016][ T9828] slow_avc_audit+0x186/0x210 [ 247.546037][ T9828] ? __pfx_slow_avc_audit+0x10/0x10 [ 247.546060][ T9828] ? avc_denied+0x14a/0x190 [ 247.546081][ T9828] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 247.546105][ T9828] avc_has_perm+0x1a6/0x1e0 [ 247.546126][ T9828] ? __pfx_avc_has_perm+0x10/0x10 [ 247.546153][ T9828] sock_has_perm+0x253/0x2f0 [ 247.546174][ T9828] ? __pfx_sock_has_perm+0x10/0x10 [ 247.546200][ T9828] ? get_pid_task+0xfc/0x250 [ 247.546215][ T9828] ? get_pid_task+0xfc/0x250 [ 247.546235][ T9828] security_socket_getsockopt+0x9b/0x230 [ 247.546260][ T9828] do_sock_getsockopt+0x1e3/0x6e0 [ 247.546285][ T9828] ? __lock_acquire+0x49f/0x1a40 [ 247.546312][ T9828] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 247.546338][ T9828] ? rcu_read_lock_any_held+0x6a/0xa0 [ 247.546361][ T9828] ? find_held_lock+0x2b/0x80 [ 247.546385][ T9828] ? __fget_files+0x21f/0x3d0 [ 247.546410][ T9828] __sys_getsockopt+0x148/0x260 [ 247.546441][ T9828] ? __x64_sys_getsockopt+0xbd/0x160 [ 247.546462][ T9828] __x64_sys_getsockopt+0xbd/0x160 [ 247.546483][ T9828] ? do_syscall_64+0x90/0x870 [ 247.546506][ T9828] ? lockdep_hardirqs_on+0x78/0x100 [ 247.546528][ T9828] do_syscall_64+0x115/0x870 [ 247.546551][ T9828] ? clear_bhb_loop+0x70/0xc0 [ 247.546574][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.546593][ T9828] RIP: 0033:0x7fdadc79e0d9 [ 247.546610][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.546626][ T9828] RSP: 002b:00007fdadd644028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 247.546643][ T9828] RAX: ffffffffffffffda RBX: 00007fdadca25fa0 RCX: 00007fdadc79e0d9 [ 247.546654][ T9828] RDX: 0000000000000006 RSI: 0000000000000065 RDI: 0000000000000003 [ 247.546664][ T9828] RBP: 00007fdadd644090 R08: 0000200000000180 R09: 0000000000000000 [ 247.546675][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.546685][ T9828] R13: 00007fdadca26038 R14: 00007fdadca25fa0 R15: 00007ffee1cd34f8 [ 247.546710][ T9828] [ 247.941507][ T188] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 248.046874][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.058260][ T5711] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.067751][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.084102][ T5711] usb 10-1: config 0 descriptor?? [ 248.121603][ T188] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 248.138372][ T188] usb 2-1: USB disconnect, device number 15 [ 248.166825][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.304307][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 248.304321][ T29] audit: type=1400 audit(1785717126.509:1530): avc: denied { write } for pid=9847 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.306212][ T5711] usbhid 10-1:0.0: can't add hid device: -71 [ 248.343955][ T5711] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 248.365726][ T5711] usb 10-1: USB disconnect, device number 10 [ 248.824683][ T29] audit: type=1400 audit(1785717127.029:1531): avc: denied { write } for pid=9851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.835130][ T5711] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 248.973786][ T29] audit: type=1400 audit(1785717127.179:1532): avc: denied { write } for pid=9875 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.029711][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.054060][ T5711] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 249.069611][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 249.087660][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.207981][ T5711] usb 10-1: config 0 descriptor?? [ 249.654877][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.127113][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.141842][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.265278][ T46] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 250.640550][ T29] audit: type=1400 audit(1785717128.849:1533): avc: denied { write } for pid=9884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.641670][ T5711] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 250.703510][ T46] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.732296][ T5711] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input37 [ 250.733830][ T46] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 250.836301][ T9907] random: crng reseeded on system resumption [ 251.319129][ T5610] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 251.328028][ T5610] Bluetooth: hci2: Injecting HCI hardware error event [ 251.335324][ T29] audit: type=1400 audit(1785717129.039:1534): avc: denied { mount } for pid=9899 comm="syz.1.664" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 251.335365][ T29] audit: type=1400 audit(1785717129.039:1535): avc: denied { write } for pid=9899 comm="syz.1.664" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 251.335394][ T29] audit: type=1400 audit(1785717129.049:1536): avc: denied { open } for pid=9899 comm="syz.1.664" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 251.408931][ T5610] Bluetooth: hci2: hardware error 0x00 [ 251.421759][ T46] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 251.431354][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.445318][ T46] usb 8-1: Product: syz [ 251.449629][ T46] usb 8-1: Manufacturer: syz [ 251.454317][ T46] usb 8-1: SerialNumber: syz [ 251.495952][ T29] audit: type=1400 audit(1785717129.709:1537): avc: denied { unmount } for pid=8218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 251.645639][ T29] audit: type=1400 audit(1785717129.819:1538): avc: denied { write } for pid=9906 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.652371][ T5698] usb 10-1: USB disconnect, device number 11 [ 251.667801][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 251.849194][ T9913] netlink: 'syz.1.667': attribute type 9 has an invalid length. [ 252.093222][ C1] usb 8-1: invalid arpc response id received: 11 [ 252.198211][ T29] audit: type=1400 audit(1785717130.409:1539): avc: denied { create } for pid=9915 comm="syz.6.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.406041][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 252.702304][ T46] usb 8-1: failed to set cport flags for port 0 [ 252.808941][ T46] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 253.034308][ T46] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 254.022930][ T5610] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 254.112513][ T46] usb 8-1: USB disconnect, device number 10 [ 254.699558][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 254.699573][ T29] audit: type=1400 audit(1785717132.909:1541): avc: denied { write } for pid=9932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.809396][ T29] audit: type=1400 audit(1785717132.969:1542): avc: denied { execute } for pid=9942 comm="syz.6.675" name="file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.882643][ T29] audit: type=1400 audit(1785717132.969:1543): avc: denied { execute_no_trans } for pid=9942 comm="syz.6.675" path="/134/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.982762][ T29] audit: type=1400 audit(1785717133.189:1544): avc: denied { write } for pid=9958 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.168573][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 255.346708][ T29] audit: type=1400 audit(1785717133.559:1545): avc: denied { connect } for pid=9965 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.439942][ T5806] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.620888][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.674403][ T5806] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.686067][ T9987] fuse: Bad value for 'fd' [ 255.730795][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.756652][ T29] audit: type=1400 audit(1785717133.949:1546): avc: denied { listen } for pid=9979 comm="syz.9.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.801411][ T5806] usb 2-1: config 0 descriptor?? [ 255.857343][ T29] audit: type=1400 audit(1785717133.949:1547): avc: denied { connect } for pid=9979 comm="syz.9.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.903157][ T29] audit: type=1400 audit(1785717134.009:1548): avc: denied { accept } for pid=9979 comm="syz.9.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.980637][ T29] audit: type=1400 audit(1785717134.029:1549): avc: denied { write } for pid=9969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.037937][ T9314] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 256.057521][ T5806] usbhid 2-1:0.0: can't add hid device: -71 [ 256.063573][ T5806] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 256.080969][ T29] audit: type=1400 audit(1785717134.239:1550): avc: denied { write } for pid=9993 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.114568][ T5806] usb 2-1: USB disconnect, device number 16 [ 256.165834][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 256.206955][ T9314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.239110][ T9314] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.287902][ T9314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.321744][ T9314] usb 8-1: config 0 descriptor?? [ 256.554892][ T9314] usbhid 8-1:0.0: can't add hid device: -71 [ 256.577555][ T5806] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 256.587664][ T9314] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 256.639142][ T9314] usb 8-1: USB disconnect, device number 11 [ 256.677881][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 256.740743][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.813368][ T5806] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 256.909862][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.102288][ T5806] usb 2-1: config 0 descriptor?? [ 257.164348][ T188] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 257.465848][T10022] sctp_transport_update_pmtu: 47 callbacks suppressed [ 257.465873][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.486223][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.497861][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.510789][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.529205][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.541229][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.554606][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.570254][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.582303][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.593578][T10022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 257.764997][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.819277][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.843439][ T188] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.880481][ T188] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 257.910305][ T188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.089352][ T188] usb 8-1: config 0 descriptor?? [ 258.423996][ T5806] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 258.440939][ T5806] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 258.526584][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.535356][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.676084][ T9989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.685496][ T9989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.764272][ T5806] usb 2-1: USB disconnect, device number 17 [ 258.770644][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 259.833809][ T188] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 260.036641][ T188] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input39 [ 260.273042][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 260.306544][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 260.306558][ T29] audit: type=1400 audit(1785717138.519:1553): avc: denied { write } for pid=10025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.375169][ T188] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 260.383786][ T5698] usb 8-1: USB disconnect, device number 12 [ 260.383923][ C0] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 260.416166][ T9314] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.426700][ T188] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.451591][ T9314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.464173][ T9314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.474284][ T188] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.474329][ T188] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.474349][ T188] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.506658][ T9314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.523468][ T29] audit: type=1400 audit(1785717139.699:1554): avc: denied { write } for pid=10059 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.537030][ T9314] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 261.601605][ T9314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.637443][ T9314] usb 4-1: Product: syz [ 261.640152][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 261.641694][ T9314] usb 4-1: Manufacturer: syz [ 261.669169][ T9314] usb 4-1: SerialNumber: syz [ 261.708754][ T188] usb 10-1: GET_CAPABILITIES returned 0 [ 261.717307][ T9314] usb 4-1: selecting invalid altsetting 1 [ 261.718528][ T188] usbtmc 10-1:16.0: can't read capabilities [ 261.729929][ T9314] usb 4-1: unit 6 not found! [ 261.835620][ T5806] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 261.985130][ T5806] usb 2-1: Using ep0 maxpacket: 8 [ 262.000246][ T5806] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 262.021768][ T5698] usb 10-1: USB disconnect, device number 12 [ 262.025368][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 262.048865][ T5806] usb 2-1: Product: syz [ 262.066480][ T5806] usb 2-1: Manufacturer: syz [ 262.079731][ T5806] usb 2-1: SerialNumber: syz [ 262.091969][ T29] audit: type=1400 audit(1785717140.299:1555): avc: denied { write } for pid=10070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.127697][ T5806] usb 2-1: config 0 descriptor?? [ 262.139641][ T5806] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 262.243850][ T29] audit: type=1400 audit(1785717140.449:1556): avc: denied { write } for pid=10082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.353120][ T5806] gspca_sn9c2028: read1 error -32 [ 262.368535][ T5806] gspca_sn9c2028: read1 error -71 [ 262.377308][ T5806] gspca_sn9c2028: read1 error -71 [ 262.382785][ T5806] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 262.408779][ T5806] usb 2-1: USB disconnect, device number 18 [ 262.448044][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 263.131237][ T29] audit: type=1400 audit(1785717141.049:1557): avc: denied { setopt } for pid=10083 comm="syz.6.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.343016][ T9314] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 263.358530][ T29] audit: type=1400 audit(1785717141.569:1558): avc: denied { write } for pid=10095 comm="syz.1.697" name="functions" dev="configfs" ino=7682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.390159][T10096] file system registered [ 263.452563][ T29] audit: type=1400 audit(1785717141.569:1559): avc: denied { add_name } for pid=10095 comm="syz.1.697" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.739486][ T29] audit: type=1400 audit(1785717141.569:1560): avc: denied { create } for pid=10095 comm="syz.1.697" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 264.011068][ T29] audit: type=1400 audit(1785717142.079:1561): avc: denied { write } for pid=10095 comm="syz.1.697" name="functions" dev="configfs" ino=7682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 264.273369][ T9314] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 264.293323][ T9314] usb 4-1: USB disconnect, device number 16 [ 264.301184][T10103] unloading [ 264.344853][ T29] audit: type=1400 audit(1785717142.159:1562): avc: denied { remove_name } for pid=10095 comm="syz.1.697" name="ffs.usb0" dev="configfs" ino=30524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 264.457397][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.687198][ T46] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 264.775120][ T188] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 264.869151][ T46] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 264.893156][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.936235][ T46] usb 10-1: config 0 descriptor?? [ 264.942053][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.961958][ T46] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 264.972364][ T188] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 264.994781][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.017842][ T188] usb 7-1: config 0 descriptor?? [ 265.102107][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 265.255661][ T188] usbhid 7-1:0.0: can't add hid device: -71 [ 265.273516][ T188] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 265.312079][ T188] usb 7-1: USB disconnect, device number 28 [ 265.368493][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.699'. [ 265.471298][T10112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10112 comm=syz.9.699 [ 265.504134][ T46] gp8psk: usb in 128 operation failed. [ 265.522805][ T46] gp8psk: usb in 137 operation failed. [ 265.531263][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 265.552583][ T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 265.568107][ T46] usb 10-1: USB disconnect, device number 13 [ 265.665106][ T5806] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 265.785115][ T188] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 265.846701][ T5806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.857959][ T5698] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 265.861632][ T5806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.906879][ T5806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.937637][ T5806] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 265.956792][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.970532][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.995133][ T188] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 266.005983][ T5806] usb 2-1: Product: syz [ 266.019168][ T5806] usb 2-1: Manufacturer: syz [ 266.031468][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.041358][ T5806] usb 2-1: SerialNumber: syz [ 266.046141][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 266.049116][ T5698] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 266.073030][ T188] usb 7-1: config 0 descriptor?? [ 266.083960][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 266.108772][ T5806] usb 2-1: selecting invalid altsetting 1 [ 266.122281][ T5698] usb 4-1: Product: syz [ 266.142136][ T5698] usb 4-1: Manufacturer: syz [ 266.143189][ T5806] usb 2-1: unit 6 not found! [ 266.154333][ T5698] usb 4-1: SerialNumber: syz [ 266.180224][ T5698] usb 4-1: config 0 descriptor?? [ 266.204748][ T5698] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 266.406012][ T5698] gspca_sn9c2028: read1 error -71 [ 266.423241][ T5698] gspca_sn9c2028: read1 error -71 [ 266.439094][ T5698] gspca_sn9c2028: read1 error -71 [ 266.463624][ T5698] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 266.490294][ T5698] usb 4-1: USB disconnect, device number 17 [ 266.891055][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 266.891071][ T29] audit: type=1326 audit(1785717145.099:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 266.928999][ T29] audit: type=1326 audit(1785717145.099:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 266.963742][ T188] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 266.963843][ T29] audit: type=1326 audit(1785717145.099:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 266.973993][ T188] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input40 [ 267.109613][ T29] audit: type=1326 audit(1785717145.099:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.163359][ T5806] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 267.172866][ T29] audit: type=1326 audit(1785717145.099:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.200259][ T5697] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 267.217000][ T29] audit: type=1326 audit(1785717145.099:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.245599][ T29] audit: type=1326 audit(1785717145.169:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.333604][ T29] audit: type=1326 audit(1785717145.169:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.353695][ T5806] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 267.362371][ T9314] usb 7-1: USB disconnect, device number 29 [ 267.369555][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 267.384633][ T5697] usb 8-1: Using ep0 maxpacket: 32 [ 267.394914][ T5697] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 267.413621][ T5697] usb 8-1: config 0 interface 0 has no altsetting 0 [ 267.419837][ T5806] usb 2-1: USB disconnect, device number 19 [ 267.420958][ T5697] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 267.440065][ T29] audit: type=1326 audit(1785717145.169:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.456368][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.477939][ T5697] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.493605][ T29] audit: type=1326 audit(1785717145.169:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea179e0d9 code=0x7ffc0000 [ 267.537491][ T5697] usb 8-1: config 0 descriptor?? [ 267.554493][T10176] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 267.652843][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.660246][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.812622][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.842523][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.010225][ T5697] pantherlord 0003:0E8F:0003.0006: unknown global tag 0xc [ 268.022763][ T5697] pantherlord 0003:0E8F:0003.0006: item 0 1 1 12 parsing failed [ 268.053903][ T5697] pantherlord 0003:0E8F:0003.0006: parse failed [ 268.071615][ T5697] pantherlord 0003:0E8F:0003.0006: probe with driver pantherlord failed with error -22 [ 268.437422][T10206] 9p: Bad value for 'rfdno' [ 268.824415][T10205] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 268.965356][ T209] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.003610][ T209] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.065376][ T8711] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.079411][ T8711] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.377965][T10229] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 269.646919][ T5727] usb 8-1: USB disconnect, device number 13 [ 269.678544][ T46] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 269.859152][ T46] usb 7-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 269.879216][ T46] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 269.897253][ T46] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 269.919568][ T46] usb 7-1: Product: syz [ 269.926663][ T46] usb 7-1: Manufacturer: syz [ 269.932890][ T46] usb 7-1: SerialNumber: syz [ 269.946105][ T2159] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 269.980965][ T46] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 270.136645][ T2159] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.205116][ T5727] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 270.213142][ T2159] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.223757][ T2159] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.257869][T10249] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 270.348020][ T2159] usb 10-1: config 0 descriptor?? [ 270.397005][ T5727] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 270.416257][ T5727] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.463334][ T5727] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 270.506115][ T5727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.543281][ T5727] usb 8-1: Product: syz [ 270.562557][ T5727] usb 8-1: Manufacturer: syz [ 270.614262][ T5727] usb 8-1: SerialNumber: syz [ 270.837439][ T46] vp7045: USB control message 'out' went wrong. [ 271.117420][ T2159] usbhid 10-1:0.0: can't add hid device: -71 [ 271.263902][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 271.274429][ T2159] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 271.285201][ T46] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 271.294606][ T2159] usb 10-1: USB disconnect, device number 14 [ 271.305732][ T46] usb 7-1: USB disconnect, device number 30 [ 271.311439][ T5727] usb 8-1: USB disconnect, device number 14 [ 271.595098][ T2159] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 271.758463][ T2159] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.791396][ T2159] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 271.823944][ T2159] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.385150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 272.466606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 272.477463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 272.541842][ T2159] usb 10-1: config 0 descriptor?? [ 272.734548][ T2159] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 272.783214][ T2159] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input41 [ 272.930523][ T2159] usb 10-1: USB disconnect, device number 15 [ 272.936951][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 272.972746][T10293] Bluetooth: MGMT ver 1.23 [ 272.995691][ T5711] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 273.189558][ T5711] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 273.194133][T10299] Cannot find del_set index 0 as target [ 273.224104][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.241566][ T5711] usb 7-1: Product: syz [ 273.248506][ T5711] usb 7-1: Manufacturer: syz [ 273.253527][ T5711] usb 7-1: SerialNumber: syz [ 273.260317][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 273.260356][ T29] audit: type=1400 audit(1785717151.469:2119): avc: denied { read } for pid=10301 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.267075][ T5711] usb 7-1: config 0 descriptor?? [ 273.365142][ T29] audit: type=1400 audit(1785717151.529:2120): avc: denied { write } for pid=10301 comm="syz.1.740" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.508719][ T5711] usb 7-1: Firmware version (0.0) predates our first public release. [ 273.543124][ T5711] usb 7-1: Please update to version 0.2 or newer [ 273.553462][T10310] input: syz0 as /devices/virtual/input/input42 [ 273.672996][ T5711] usb 7-1: USB disconnect, device number 31 [ 273.689763][ T29] audit: type=1326 audit(1785717151.899:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 273.781940][ T29] audit: type=1326 audit(1785717151.899:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 273.841813][ T29] audit: type=1326 audit(1785717151.899:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 273.918573][ T29] audit: type=1326 audit(1785717151.899:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 274.000979][ T29] audit: type=1326 audit(1785717151.899:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 274.034525][ T29] audit: type=1326 audit(1785717151.899:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 274.079335][ T29] audit: type=1326 audit(1785717151.899:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 274.135578][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.749'. [ 274.157299][ T29] audit: type=1326 audit(1785717151.909:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.9.743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa579e0d9 code=0x7ffc0000 [ 274.164777][T10335] macvlan2: entered allmulticast mode [ 274.197186][T10335] erspan0: entered allmulticast mode [ 274.315568][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 274.370043][T10342] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 274.387435][T10344] FAULT_INJECTION: forcing a failure. [ 274.387435][T10344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.402524][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.6.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.402551][T10344] Tainted: [L]=SOFTLOCKUP [ 274.402557][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.402566][T10344] Call Trace: [ 274.402572][T10344] [ 274.402578][T10344] dump_stack_lvl+0x100/0x190 [ 274.402604][T10344] should_fail_ex.cold+0x5/0xa [ 274.402625][T10344] _copy_from_user+0x2e/0xd0 [ 274.402647][T10344] __sys_bpf+0x2f5/0x4e80 [ 274.402672][T10344] ? __pfx___sys_bpf+0x10/0x10 [ 274.402688][T10344] ? find_held_lock+0x2b/0x80 [ 274.402704][T10344] ? get_pid_task+0xfc/0x250 [ 274.402718][T10344] ? get_pid_task+0xfc/0x250 [ 274.402741][T10344] ? find_held_lock+0x2b/0x80 [ 274.402762][T10344] ? rcu_read_lock_any_held+0x6a/0xa0 [ 274.402780][T10344] ? find_held_lock+0x2b/0x80 [ 274.402795][T10344] ? ksys_write+0x190/0x250 [ 274.402811][T10344] ? ksys_write+0x190/0x250 [ 274.402838][T10344] ? fput+0x79/0x100 [ 274.402858][T10344] ? __x64_sys_bpf+0xce/0x140 [ 274.402882][T10344] __x64_sys_bpf+0xce/0x140 [ 274.402903][T10344] ? do_syscall_64+0x90/0x870 [ 274.402927][T10344] do_syscall_64+0x115/0x870 [ 274.402946][T10344] ? clear_bhb_loop+0x70/0xc0 [ 274.402966][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.402985][T10344] RIP: 0033:0x7f58b859e0d9 [ 274.402999][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.403014][T10344] RSP: 002b:00007f58b951a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.403031][T10344] RAX: ffffffffffffffda RBX: 00007f58b8825fa0 RCX: 00007f58b859e0d9 [ 274.403042][T10344] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 274.403052][T10344] RBP: 00007f58b951a090 R08: 0000000000000000 R09: 0000000000000000 [ 274.403062][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.403073][T10344] R13: 00007f58b8826038 R14: 00007f58b8825fa0 R15: 00007ffcb860fc18 [ 274.403096][T10344] [ 274.656418][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.665871][ T2159] libceph: connect (1)[c::]:6789 error -101 [ 274.668126][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.676191][ T2159] libceph: mon0 (1)[c::]:6789 connect error [ 274.682846][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.756607][ T9] usb 4-1: config 0 descriptor?? [ 274.965442][ T9314] libceph: connect (1)[c::]:6789 error -101 [ 274.969598][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 274.972070][ T9314] libceph: mon0 (1)[c::]:6789 connect error [ 274.986704][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 275.025805][ T9] usb 4-1: USB disconnect, device number 18 [ 275.085630][ T2159] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 275.141135][T10346] ceph: No mds server is up or the cluster is laggy [ 275.175862][T10383] netlink: 14 bytes leftover after parsing attributes in process `syz.6.762'. [ 275.188148][T10383] team0 (unregistering): Port device team_slave_0 removed [ 275.198364][T10383] team0 (unregistering): Port device team_slave_1 removed [ 275.257215][ T2159] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 275.280608][ T2159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.309462][ T2159] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 275.332515][ T2159] usb 2-1: config 0 has no interface number 0 [ 275.339180][ T2159] usb 2-1: config 0 has no interface number 1 [ 275.361330][ T2159] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 275.361358][ T2159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.363327][T10390] binder: 10389:10390 ioctl c0306201 200000000080 returned -14 [ 275.370384][ T2159] usb 2-1: config 0 descriptor?? [ 275.372634][ T2159] usb 2-1: unknown number of interfaces: 2 [ 275.385743][T10390] binder: 10389:10390 ioctl c0306201 2000000003c0 returned -14 [ 275.506378][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.540554][T10402] FAULT_INJECTION: forcing a failure. [ 275.540554][T10402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.564176][T10402] CPU: 0 UID: 0 PID: 10402 Comm: syz.6.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.564203][T10402] Tainted: [L]=SOFTLOCKUP [ 275.564208][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 275.564218][T10402] Call Trace: [ 275.564223][T10402] [ 275.564230][T10402] dump_stack_lvl+0x100/0x190 [ 275.564259][T10402] should_fail_ex.cold+0x5/0xa [ 275.564282][T10402] _copy_to_user+0x32/0xd0 [ 275.564309][T10402] simple_read_from_buffer+0xcb/0x170 [ 275.564328][T10402] proc_fail_nth_read+0x1af/0x230 [ 275.564356][T10402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.564384][T10402] ? rw_verify_area+0xce/0x6d0 [ 275.564401][T10402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.564418][T10402] vfs_read+0x1e4/0xb40 [ 275.564436][T10402] ? __pfx_vfs_read+0x10/0x10 [ 275.564452][T10402] ? __fget_files+0x215/0x3d0 [ 275.564467][T10402] ? __fget_files+0x21f/0x3d0 [ 275.564482][T10402] ksys_read+0x12a/0x250 [ 275.564491][T10402] ? __pfx_ksys_read+0x10/0x10 [ 275.564505][T10402] do_syscall_64+0x115/0x870 [ 275.564519][T10402] ? clear_bhb_loop+0x70/0xc0 [ 275.564532][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.564543][T10402] RIP: 0033:0x7f58b855e90e [ 275.564552][T10402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.564562][T10402] RSP: 002b:00007f58b9519fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.564573][T10402] RAX: ffffffffffffffda RBX: 00007f58b951a6c0 RCX: 00007f58b855e90e [ 275.564580][T10402] RDX: 000000000000000f RSI: 00007f58b951a0a0 RDI: 0000000000000004 [ 275.564586][T10402] RBP: 00007f58b951a090 R08: 0000000000000000 R09: 0000000000000000 [ 275.564592][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.564597][T10402] R13: 00007f58b8826038 R14: 00007f58b8825fa0 R15: 00007ffcb860fc18 [ 275.564611][T10402] [ 275.847458][T10342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.879768][T10342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.110304][ T3346] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 276.200219][T10408] binder: 10404:10408 ioctl c0306201 200000000080 returned -14 [ 276.289135][ T5678] usb 2-1: USB disconnect, device number 20 [ 276.450739][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.007641][ T3346] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 277.914923][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 277.924587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.935996][ T9] usb 4-1: config 0 descriptor?? [ 277.941504][ T9] usb 4-1: can't set config #0, error -71 [ 277.948815][ T9] usb 4-1: USB disconnect, device number 19 [ 277.989373][T10417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10417 comm=syz.9.771 [ 278.068156][T10428] fuse: Unknown parameter 'g' [ 278.090986][T10428] fuse: Bad value for 'rootmode' [ 278.111311][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.6.775'. [ 278.298231][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 278.298247][ T29] audit: type=1400 audit(1785717156.509:2303): avc: denied { write } for pid=10439 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.379616][ T29] audit: type=1400 audit(1785717156.589:2304): avc: denied { getopt } for pid=10443 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.400659][ T5678] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 278.423358][ T29] audit: type=1400 audit(1785717156.589:2305): avc: denied { ioctl } for pid=10443 comm="syz.6.778" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 278.465512][ T29] audit: type=1400 audit(1785717156.609:2306): avc: denied { lock } for pid=10442 comm="syz.1.777" path="socket:[33122]" dev="sockfs" ino=33122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.576966][ T5678] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.587503][ T5678] usb 10-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 278.616663][ T5678] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.636306][ T5678] usb 10-1: config 0 descriptor?? [ 278.650396][ T5678] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 278.804463][ T29] audit: type=1400 audit(1785717157.009:2307): avc: denied { write } for pid=10450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.851575][T10433] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 278.918831][ T29] audit: type=1326 audit(1785717157.089:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b859e0d9 code=0x200000 [ 279.020826][ T29] audit: type=1400 audit(1785717157.189:2309): avc: denied { write } for pid=10468 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.272798][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 279.360097][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.423006][T10489] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 279.490875][T10485] bridge_slave_0 (unregistering): left allmulticast mode [ 279.540030][T10485] bridge_slave_0 (unregistering): left promiscuous mode [ 279.558271][T10492] netlink: 1352 bytes leftover after parsing attributes in process `syz.3.785'. [ 279.578855][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.765127][ T5787] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 279.832757][ T29] audit: type=1400 audit(1785717158.039:2310): avc: denied { write } for pid=10477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.939853][ T29] audit: type=1400 audit(1785717158.139:2311): avc: denied { write } for pid=10502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.974112][ T5787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.994443][ T5787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.004964][ T5711] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 280.005642][ T2159] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 280.031305][ T5787] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.061187][ T5787] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 280.080920][ T5787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.099902][ T5787] usb 8-1: config 0 descriptor?? [ 280.165390][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 280.172477][ T5711] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 280.188730][ T5711] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.200717][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 280.209290][ T5711] usb 2-1: Product: syz [ 280.213535][ T5711] usb 2-1: Manufacturer: syz [ 280.221947][ T5711] usb 2-1: SerialNumber: syz [ 280.233362][ T5711] usb 2-1: config 0 descriptor?? [ 280.244416][T10498] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 280.295454][ T2159] usb 4-1: Using ep0 maxpacket: 8 [ 280.304399][ T2159] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 280.313980][ T2159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 280.362782][ T2159] usb 4-1: Product: syz [ 280.379319][ T2159] usb 4-1: Manufacturer: syz [ 280.402486][ T2159] usb 4-1: SerialNumber: syz [ 280.427333][ T2159] usb 4-1: config 0 descriptor?? [ 280.478812][ T2159] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 280.609233][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.634977][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.643968][ T29] audit: type=1400 audit(1785717158.849:2312): avc: denied { setopt } for pid=10497 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.671034][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.675859][ T2159] gspca_sn9c2028: read1 error -32 [ 280.687053][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.699704][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.708491][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.718025][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.725826][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.738435][ T2159] gspca_sn9c2028: read1 error -32 [ 280.739768][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.752430][ T5787] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 280.779145][ T5787] gt683r_led 0003:1770:FF00.0007: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.7-1/input0 [ 280.825521][ T2159] gspca_sn9c2028: read1 error 0 [ 280.830752][ T2159] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 280.973238][ T5787] usb 8-1: USB disconnect, device number 15 [ 281.049401][T10519] fido_id[10519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 281.070241][ T5711] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 281.253123][ T5678] pwc: send_video_command error -71 [ 281.278013][ T5678] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 281.305467][ T5678] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 281.357180][ T5678] usb 10-1: USB disconnect, device number 16 [ 282.685161][ T5787] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 282.801457][ T9] usb 4-1: USB disconnect, device number 20 [ 282.837145][ T5787] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.861990][ T5787] usb 8-1: config 0 has no interface number 0 [ 282.869880][ T5711] usb 2-1: USB disconnect, device number 21 [ 282.899661][ T5787] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.941132][ T5787] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 282.953751][ T5787] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 282.976248][ T5787] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 282.997619][ T5787] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 283.026753][ T5787] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.040497][ T5787] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 283.077658][ T5787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.126269][ T5787] usb 8-1: config 0 descriptor?? [ 283.141246][T10541] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 283.167221][T10541] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 283.218366][ T5787] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 283.342404][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 283.342430][ T29] audit: type=1400 audit(1785717161.549:2320): avc: denied { write } for pid=10564 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.356589][ T29] audit: type=1400 audit(1785717162.569:2321): avc: denied { accept } for pid=10565 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.491139][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.791'. [ 284.501349][ T2159] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 284.587730][ T29] audit: type=1400 audit(1785717162.799:2322): avc: denied { write } for pid=10580 comm="syz.9.789" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.681324][T10577] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 284.718576][ T2159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.745096][ T2159] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 284.782963][ T2159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.871649][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.791'. [ 284.887652][ T2159] usb 2-1: config 0 descriptor?? [ 285.051029][T10577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.169955][ T2159] usbhid 2-1:0.0: can't add hid device: -71 [ 285.225957][ T2159] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 285.244341][ T2159] usb 2-1: USB disconnect, device number 22 [ 285.276588][T10596] netlink: 'syz.3.803': attribute type 11 has an invalid length. [ 285.508447][ T29] audit: type=1400 audit(1785717163.719:2323): avc: denied { write } for pid=10591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.650851][T10607] netlink: 44 bytes leftover after parsing attributes in process `syz.6.799'. [ 285.660100][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.799'. [ 285.673668][ T29] audit: type=1400 audit(1785717163.879:2324): avc: denied { ioctl } for pid=10606 comm="syz.6.799" path="socket:[33480]" dev="sockfs" ino=33480 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 285.705219][ T5678] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 285.712968][ T2159] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 285.726524][ T29] audit: type=1400 audit(1785717163.909:2325): avc: denied { write } for pid=10610 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.895111][ T5678] usb 4-1: Using ep0 maxpacket: 8 [ 285.902455][ T2159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.936136][ T2159] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 285.962122][ T2159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.996378][ T2159] usb 2-1: config 0 descriptor?? [ 286.025605][ T5678] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 286.080196][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 286.166029][ T5678] usb 4-1: Product: syz [ 286.203159][ T5678] usb 4-1: Manufacturer: syz [ 286.217379][ T5678] usb 4-1: SerialNumber: syz [ 286.258196][ T5678] usb 4-1: config 0 descriptor?? [ 286.301898][ T29] audit: type=1400 audit(1785717164.509:2326): avc: denied { bind } for pid=10623 comm="syz.9.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.337111][ T5678] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 286.341770][ T29] audit: type=1400 audit(1785717164.509:2327): avc: denied { connect } for pid=10623 comm="syz.9.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.385177][ T29] audit: type=1400 audit(1785717164.509:2328): avc: denied { write } for pid=10623 comm="syz.9.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.468464][ T188] usb 8-1: USB disconnect, device number 16 [ 286.476981][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.505621][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.521626][ T188] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 286.559324][ T5678] gspca_sn9c2028: read1 error -32 [ 286.619845][ T5678] gspca_sn9c2028: read1 error -32 [ 286.627082][ T5678] gspca_sn9c2028: read1 error 0 [ 286.645476][ T5678] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 286.709848][ T29] audit: type=1400 audit(1785717164.919:2329): avc: denied { write } for pid=10618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.915584][ T188] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 286.945566][ T2159] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 286.970868][ T2159] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 287.090295][ T188] usb 8-1: unable to get BOS descriptor or descriptor too short [ 287.111820][ T188] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.139956][ T188] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.160994][ T188] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 287.178389][ T188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.187190][ T188] usb 8-1: Product: syz [ 287.191384][ T188] usb 8-1: Manufacturer: syz [ 287.196369][ T188] usb 8-1: SerialNumber: syz [ 287.209627][ T188] usb 8-1: selecting invalid altsetting 1 [ 287.216892][ T188] usb 8-1: unit 6 not found! [ 287.309247][ T5678] usb 2-1: USB disconnect, device number 23 [ 287.315524][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 287.406267][ T2159] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 287.586614][ T2159] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.600041][ T2159] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.609784][ T2159] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.624389][ T2159] usb 10-1: config 0 descriptor?? [ 287.624664][ T188] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2) [ 287.706036][ T188] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 287.769143][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.847285][ T2159] usbhid 10-1:0.0: can't add hid device: -71 [ 287.873830][ T2159] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 287.906793][ T2159] usb 10-1: USB disconnect, device number 17 [ 288.311502][T10717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.822'. [ 288.385130][ T2159] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 288.401570][T10723] netlink: 'syz.6.823': attribute type 10 has an invalid length. [ 288.446553][T10723] netlink: 14 bytes leftover after parsing attributes in process `syz.6.823'. [ 288.481286][ T188] usb 4-1: USB disconnect, device number 21 [ 288.561752][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 288.561770][ T29] audit: type=1400 audit(1785717166.769:2342): avc: denied { connect } for pid=10722 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.606336][ T2159] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.629415][ T2159] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 288.660270][ T2159] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.683699][ T2159] usb 10-1: config 0 descriptor?? [ 288.748125][T10740] random: crng reseeded on system resumption [ 288.800097][ T29] audit: type=1400 audit(1785717167.009:2343): avc: denied { bind } for pid=10733 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 288.902951][T10742] netlink: 280 bytes leftover after parsing attributes in process `syz.3.828'. [ 289.327244][ T29] audit: type=1400 audit(1785717167.539:2344): avc: denied { write } for pid=10721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.392527][ T29] audit: type=1400 audit(1785717167.539:2345): avc: denied { setopt } for pid=10744 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.521204][ T29] audit: type=1400 audit(1785717167.729:2346): avc: denied { write } for pid=10753 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.547080][ T2159] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 289.587457][ T2159] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input45 [ 289.615940][ T5787] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 289.692291][ T5678] usb 8-1: USB disconnect, device number 17 [ 289.816914][ T5787] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 289.892018][ T5787] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.969729][ T5787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.979966][ T188] usb 10-1: USB disconnect, device number 18 [ 289.979974][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 290.037985][ T5787] usb 7-1: Product: syz [ 290.462113][ T2159] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 290.507795][ T5787] usb 7-1: Manufacturer: syz [ 290.530902][ T5787] usb 7-1: SerialNumber: syz [ 290.575546][ T29] audit: type=1400 audit(1785717168.779:2347): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 290.605518][ T2159] usb 4-1: device descriptor read/64, error -71 [ 290.707092][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 290.776988][ T29] audit: type=1400 audit(1785717168.989:2348): avc: denied { write } for pid=10777 comm="syz.1.834" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 290.779907][T10779] 9p: Bad value for 'rfdno' [ 290.886956][ T2159] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 290.910214][ T29] audit: type=1400 audit(1785717168.989:2349): avc: denied { read } for pid=10777 comm="syz.1.834" dev="sockfs" ino=32420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.947290][ T29] audit: type=1400 audit(1785717169.039:2350): avc: denied { write } for pid=10758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.981817][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.012243][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.031933][ T29] audit: type=1400 audit(1785717169.239:2351): avc: denied { write } for pid=10784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.055529][ T2159] usb 4-1: device descriptor read/64, error -71 [ 291.103975][ T188] usb 7-1: USB disconnect, device number 32 [ 291.196560][ T2159] usb usb4-port1: attempt power cycle [ 291.555129][ T2159] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 291.605890][ T2159] usb 4-1: device descriptor read/8, error -71 [ 291.843053][ T5787] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 291.855256][ T2159] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 291.875125][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 291.886036][ T10] ath9k_htc: Failed to initialize the device [ 291.888258][ T2159] usb 4-1: device descriptor read/8, error -71 [ 291.917110][ T188] usb 7-1: ath9k_htc: USB layer deinitialized [ 292.015380][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 292.015423][ T2159] usb usb4-port1: unable to enumerate USB device [ 292.029557][ T5787] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 292.058407][ T5787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.094230][ T5787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.128762][ T5787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.150187][ T5787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.176760][ T5787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.200432][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.245677][ T188] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 292.395063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 292.493895][ T188] usb 7-1: Using ep0 maxpacket: 32 [ 292.587773][ T5787] usb 2-1: usb_control_msg returned -32 [ 292.681128][ T5787] usbtmc 2-1:16.0: can't read capabilities [ 292.970897][ T188] usb 7-1: device descriptor read/all, error -71 [ 293.392675][T10866] netlink: 280 bytes leftover after parsing attributes in process `syz.7.852'. [ 293.753823][T10871] netlink: 280 bytes leftover after parsing attributes in process `syz.3.853'. [ 293.758338][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.792678][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.183759][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.215268][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.288836][ T188] usb 2-1: USB disconnect, device number 24 [ 294.676998][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 294.677009][ T29] audit: type=1400 audit(1785717172.889:2360): avc: denied { write } for pid=10875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.719419][ T2159] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 294.869748][ T29] audit: type=1400 audit(1785717173.079:2361): avc: denied { write } for pid=10901 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.902252][ T2159] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 294.920636][ T2159] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 294.955167][ T2159] usb 8-1: config 220 has no interface number 2 [ 294.974263][ T2159] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 294.997267][ T2159] usb 8-1: config 220 interface 0 has no altsetting 0 [ 295.022333][ T2159] usb 8-1: config 220 interface 76 has no altsetting 0 [ 295.033217][ T2159] usb 8-1: config 220 interface 1 has no altsetting 0 [ 295.071500][ T2159] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 295.101387][ T2159] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.153054][ T2159] usb 8-1: Product: syz [ 295.170664][ T2159] usb 8-1: Manufacturer: syz [ 295.272506][ T2159] usb 8-1: SerialNumber: syz [ 295.553755][ T2159] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 295.617418][ T2159] uvcvideo 8-1:220.0: No valid video chain found. [ 295.640038][ T2159] usb 8-1: selecting invalid altsetting 0 [ 295.679233][ T2159] usb 8-1: selecting invalid altsetting 0 [ 295.687374][T10924] netlink: 168 bytes leftover after parsing attributes in process `syz.1.864'. [ 295.708337][ T2159] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 295.749344][ T2159] usb 8-1: USB disconnect, device number 18 [ 295.839940][T10929] IPVS: set_ctl: invalid protocol: 18 0.0.0.0:0 [ 295.888839][ T29] audit: type=1400 audit(1785717174.099:2362): avc: denied { write } for pid=10904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.985116][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 295.989082][ T29] audit: type=1400 audit(1785717174.199:2363): avc: denied { write } for pid=10934 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.105485][ T5697] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 296.175096][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 296.199770][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 296.229148][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 296.243621][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.258024][ T10] usb 2-1: Product: syz [ 296.265482][ T10] usb 2-1: Manufacturer: syz [ 296.285159][ T10] usb 2-1: SerialNumber: syz [ 296.305113][ T5697] usb 7-1: Using ep0 maxpacket: 32 [ 296.306513][ T10] usb 2-1: config 0 descriptor?? [ 296.344003][T10924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.345451][ T5697] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 296.351463][ T5711] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 296.410497][ T5697] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.421499][T10952] netlink: 80 bytes leftover after parsing attributes in process `syz.9.869'. [ 296.422130][ T10] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 296.449628][ T5697] usb 7-1: config 0 has no interface number 0 [ 296.478712][ T5697] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 296.545708][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 296.559693][ T5697] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 296.642739][ T5697] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 296.724239][ T5697] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 296.848594][ T5697] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 296.967336][ T5697] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 297.055319][ T5697] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 297.170373][ T5697] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.233356][ T5697] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 297.478113][ T5697] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 297.563105][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.628714][ T5697] usb 7-1: Product: syz [ 297.684799][ T5697] usb 7-1: Manufacturer: syz [ 297.726283][ T5697] usb 7-1: SerialNumber: syz [ 297.783018][ T5711] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 297.845130][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 297.853283][ T5711] usb 4-1: Product: syz [ 297.857541][ T5711] usb 4-1: Manufacturer: syz [ 297.862166][ T5711] usb 4-1: SerialNumber: syz [ 297.871026][ T5697] usb 7-1: config 0 descriptor?? [ 297.907569][ T5711] usb 4-1: config 0 descriptor?? [ 297.907795][T10929] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 297.923630][ T5711] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 297.928553][ T5697] usb 7-1: will this work? Command EP is not usually 12 [ 297.938571][ T5697] usb 7-1: will this work? Response EP is not usually 3 [ 297.945711][ T5697] usb 7-1: will this work? Image data EP is not usually 2 [ 297.990100][ T5697] scsi host1: microtekX6 [ 298.001246][ T29] audit: type=1400 audit(1785717176.199:2364): avc: denied { write } for pid=10941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.032104][ T3346] usb 7-1: error -90 submitting URB [ 298.066667][ T1685] usb 7-1: error -90 submitting URB [ 298.082355][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 298.088530][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 298.092391][ T5697] usb 2-1: USB disconnect, device number 25 [ 298.106566][ T1685] usb 7-1: error -90 submitting URB [ 298.110430][ T5697] mcba_usb 2-1:0.0 can0: device disconnected [ 298.126931][ T5711] gspca_sn9c2028: read1 error -32 [ 298.147800][ T1685] usb 7-1: error -90 submitting URB [ 298.181506][ T5711] gspca_sn9c2028: read1 error -32 [ 298.195966][ T5711] gspca_sn9c2028: read1 error 0 [ 298.203407][ T5711] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 298.262759][ T29] audit: type=1400 audit(1785717176.469:2365): avc: denied { wake_alarm } for pid=10962 comm="syz.7.870" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 298.304904][T10968] comedi comedi3: dt2801: I/O base address or length out of range [ 298.328664][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.343235][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.374865][ T29] audit: type=1400 audit(1785717176.499:2366): avc: denied { write } for pid=10971 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.505729][ T5711] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 298.693931][ T5711] usb 8-1: Using ep0 maxpacket: 32 [ 298.712492][ T5711] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 298.723033][ T5711] usb 8-1: config 0 has no interface number 0 [ 298.735733][ T5711] usb 8-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 298.764911][ T5711] usb 8-1: config 0 interface 89 has no altsetting 0 [ 298.775216][ T5678] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 298.794806][ T5711] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 298.819593][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.836534][ T5711] usb 8-1: Product: syz [ 298.845172][ T5711] usb 8-1: Manufacturer: syz [ 298.853623][ T5711] usb 8-1: SerialNumber: syz [ 298.874661][ T5711] usb 8-1: config 0 descriptor?? [ 298.880566][T10972] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 298.897759][ T5711] hub 8-1:0.89: bad descriptor, ignoring hub [ 298.905685][ T5711] hub 8-1:0.89: probe with driver hub failed with error -5 [ 298.918453][ T5711] option 8-1:0.89: GSM modem (1-port) converter detected [ 298.939693][ T5678] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.941218][ T5711] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 298.961856][ T5678] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.980398][ T5697] usb 7-1: USB disconnect, device number 35 [ 299.004825][ T5678] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.019578][ T5678] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.031759][ T5678] usb 10-1: config 0 descriptor?? [ 299.209690][T10963] kernel read not supported for file /bus (pid: 10963 comm: syz.7.870) [ 299.219430][ T29] audit: type=1800 audit(1785717177.429:2367): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.870" name="bus" dev="mqueue" ino=34349 res=0 errno=0 [ 299.686896][ T5697] usb 4-1: USB disconnect, device number 26 [ 299.890663][ T5678] usbhid 10-1:0.0: can't add hid device: -71 [ 299.905305][ T5678] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 299.929823][ T5678] usb 10-1: USB disconnect, device number 19 [ 299.965954][ T5727] usb 8-1: USB disconnect, device number 19 [ 300.145533][ T5697] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 300.479948][ T5697] usb 4-1: device descriptor read/64, error -71 [ 300.602663][ T5727] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 300.617884][ T5727] option 8-1:0.89: device disconnected [ 300.759031][ T29] audit: type=1400 audit(1785717178.969:2368): avc: denied { append } for pid=11021 comm="syz.7.883" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.191888][ T5697] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 301.348034][ T5697] usb 4-1: device descriptor read/64, error -71 [ 301.407593][ T29] audit: type=1400 audit(1785717179.609:2369): avc: denied { unmount } for pid=8418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 301.536490][ T5697] usb usb4-port1: attempt power cycle [ 301.677758][ T29] audit: type=1400 audit(1785717179.879:2370): avc: denied { watch watch_reads } for pid=11032 comm="syz.9.886" path="pipe:[23975]" dev="pipefs" ino=23975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 301.709116][ T29] audit: type=1400 audit(1785717179.879:2371): avc: denied { mount } for pid=11032 comm="syz.9.886" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 301.846680][ T29] audit: type=1400 audit(1785717179.999:2372): avc: denied { unmount } for pid=8418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 301.929093][ T29] audit: type=1400 audit(1785717180.139:2373): avc: denied { bind } for pid=11043 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.004618][ T5697] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 302.028576][ T29] audit: type=1400 audit(1785717180.159:2374): avc: denied { connect } for pid=11043 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.058026][ T5697] usb 4-1: device descriptor read/8, error -71 [ 302.065966][ T29] audit: type=1400 audit(1785717180.259:2375): avc: denied { accept } for pid=11043 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.086504][ T29] audit: type=1400 audit(1785717180.259:2376): avc: denied { write } for pid=11043 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.127831][ T29] audit: type=1400 audit(1785717180.339:2377): avc: denied { read } for pid=11043 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.357442][ T5727] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 302.425423][ T5697] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 302.447644][ T5697] usb 4-1: device descriptor read/8, error -71 [ 302.565470][ T5697] usb usb4-port1: unable to enumerate USB device [ 302.895695][ T5727] usb 10-1: Using ep0 maxpacket: 8 [ 302.924179][ T5727] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 303.031138][ T5727] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 303.137858][ T5727] usb 10-1: Product: syz [ 303.199955][ T5727] usb 10-1: Manufacturer: syz [ 303.259899][ T5727] usb 10-1: SerialNumber: syz [ 303.611380][ T5727] usb 10-1: config 0 descriptor?? [ 303.759463][ T5727] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 303.830890][T11065] netlink: 168 bytes leftover after parsing attributes in process `syz.3.895'. [ 303.901895][T11069] netlink: Invalid conntrack timeout [ 303.908286][T11069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.918362][ T5727] gspca_sn9c2028: read1 error -32 [ 303.974238][ T5727] gspca_sn9c2028: read1 error -32 [ 303.987946][ T5727] gspca_sn9c2028: read1 error 0 [ 304.000783][ T5727] sn9c2028 10-1:0.0: probe with driver sn9c2028 failed with error -5 [ 304.095438][ T5697] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 304.184850][T11081] netlink: 'syz.7.900': attribute type 11 has an invalid length. [ 304.284427][T11084] netlink: 27 bytes leftover after parsing attributes in process `syz.7.900'. [ 304.460423][T11091] netlink: 'syz.6.899': attribute type 1 has an invalid length. [ 304.468206][T11091] netlink: 756 bytes leftover after parsing attributes in process `syz.6.899'. [ 304.778978][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 304.789101][ T5697] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 304.814657][ T5697] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 304.824110][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.832646][ T5697] usb 4-1: Product: syz [ 304.837458][ T5697] usb 4-1: Manufacturer: syz [ 304.842098][ T5697] usb 4-1: SerialNumber: syz [ 304.850229][ T5697] usb 4-1: config 0 descriptor?? [ 304.856998][T11065] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.882157][ T5697] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 305.116754][ T5678] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 305.877368][ T5727] usb 10-1: USB disconnect, device number 20 [ 306.020856][ T5678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.044283][ T5678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.054757][ T5678] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 306.075141][ T5678] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.119028][ T5678] usb 8-1: config 0 descriptor?? [ 306.138044][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 306.138077][ T29] audit: type=1400 audit(1785717184.349:2383): avc: denied { map } for pid=11106 comm="syz.1.906" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 306.726967][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 306.762929][T11118] netlink: 'syz.1.907': attribute type 7 has an invalid length. [ 306.783940][T11118] netlink: 'syz.1.907': attribute type 8 has an invalid length. [ 306.803195][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 306.948645][ T5678] hid_parser_main: 28 callbacks suppressed [ 306.948687][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 306.951060][ T29] audit: type=1400 audit(1785717185.159:2384): avc: denied { write } for pid=11100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.030550][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 307.054748][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 307.071052][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 307.081968][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 307.096191][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 307.130465][ T5678] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 307.581503][ T29] audit: type=1400 audit(1785717185.779:2385): avc: denied { write } for pid=11080 comm="syz.7.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.670023][ T5678] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.7-1/input0 [ 307.685107][ T29] audit: type=1400 audit(1785717185.839:2386): avc: denied { write } for pid=11126 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.747330][ T5259] mcba_usb 4-1:0.0 can0: bit-timing not yet defined [ 307.790300][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 307.790555][ T10] usb 4-1: USB disconnect, device number 31 [ 307.796513][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 307.918372][ T10] mcba_usb 4-1:0.0 can0: device disconnected [ 308.042579][ T9314] usb 8-1: USB disconnect, device number 20 [ 308.555096][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 308.596092][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 308.638332][ T29] audit: type=1400 audit(1785717186.849:2387): avc: denied { mount } for pid=11146 comm="syz.9.914" name="/" dev="hugetlbfs" ino=34750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 308.721466][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 308.786276][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 308.819938][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.852437][ T10] usb 4-1: Product: syz [ 308.872723][ T29] audit: type=1400 audit(1785717187.069:2388): avc: denied { ioctl } for pid=11157 comm="syz.7.916" path="socket:[35866]" dev="sockfs" ino=35866 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 308.897821][ T10] usb 4-1: Manufacturer: syz [ 308.908236][ T10] usb 4-1: SerialNumber: syz [ 309.201757][T11136] loop9: detected capacity change from 0 to 2640 [ 309.842642][ T29] audit: type=1400 audit(1785717188.049:2389): avc: denied { write } for pid=11139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.879061][T11136] buffer_io_error: 518 callbacks suppressed [ 309.879077][T11136] Buffer I/O error on dev loop9, logical block 0, async page read [ 309.915295][T11136] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.034133][T11180] tipc: Cannot configure node identity twice [ 310.598220][T11173] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 310.633983][T11178] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 310.653820][T11136] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 310.663906][T11136] loop9: partition table partially beyond EOD, truncated [ 310.680115][T11178] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 310.700319][T11136] loop9: p1 size 1237888941 extends beyond EOD, truncated [ 310.713917][T11178] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 310.740055][T11178] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 310.759247][T11178] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 310.815341][ T29] audit: type=1400 audit(1785717189.019:2390): avc: denied { write } for pid=11181 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.868626][T11178] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 310.927040][T11178] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 310.947719][ T29] audit: type=1400 audit(1785717189.089:2391): avc: denied { unmount } for pid=8418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 310.996942][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 311.015181][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 311.034773][ T29] audit: type=1400 audit(1785717189.099:2392): avc: denied { map } for pid=11182 comm="syz.1.921" path="socket:[35393]" dev="sockfs" ino=35393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.190669][ T5607] udevd[5607]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 311.216462][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 311.216477][ T29] audit: type=1400 audit(1785717189.429:2394): avc: denied { name_bind } for pid=11182 comm="syz.1.921" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 311.254695][ T10] usb 4-1: USB disconnect, device number 32 [ 311.308641][ T29] audit: type=1400 audit(1785717189.479:2395): avc: denied { write } for pid=11193 comm="syz.9.924" name="dbroot" dev="configfs" ino=35415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 311.368346][ T29] audit: type=1400 audit(1785717189.489:2396): avc: denied { open } for pid=11193 comm="syz.9.924" path="/85/my_configfs/target/dbroot" dev="configfs" ino=35415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 311.420467][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.537554][T11202] netlink: 'syz.9.926': attribute type 10 has an invalid length. [ 311.545695][T11200] netlink: 'syz.9.926': attribute type 10 has an invalid length. [ 311.558193][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.584399][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.9.926'. [ 311.623868][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz.9.926'. [ 311.726434][T11202] A link change request failed with some changes committed already. Interface eth2 may have been left with an inconsistent configuration, please check. [ 311.795599][T11200] A link change request failed with some changes committed already. Interface eth2 may have been left with an inconsistent configuration, please check. [ 311.930071][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 312.190192][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.244436][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'. [ 312.273768][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.315685][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.348382][ T10] usb 7-1: config 0 descriptor?? [ 312.452792][T11228] syzkaller0: entered promiscuous mode [ 312.465993][T11228] syzkaller0: entered allmulticast mode [ 312.493133][ T29] audit: type=1400 audit(1785717190.699:2397): avc: denied { call } for pid=11232 comm="syz.7.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 312.514470][T11233] binder_alloc: 11232: binder_alloc_buf, no vma [ 312.540684][ T29] audit: type=1400 audit(1785717190.699:2398): avc: denied { transfer } for pid=11232 comm="syz.7.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 312.592646][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.604898][ T29] audit: type=1400 audit(1785717190.709:2399): avc: denied { write } for pid=11209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.627096][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.686780][ T5678] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 312.701542][ T29] audit: type=1400 audit(1785717190.889:2400): avc: denied { write } for pid=11237 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.848712][ T5678] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 35821, setting to 1024 [ 312.871066][ T5678] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 312.894373][ T29] audit: type=1400 audit(1785717191.099:2401): avc: denied { connect } for pid=11243 comm="syz.7.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.953209][ T5678] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 312.977309][ T5678] usb 10-1: New USB device strings: Mfr=174, Product=209, SerialNumber=253 [ 312.995357][ T29] audit: type=1400 audit(1785717191.199:2402): avc: denied { watch watch_reads } for pid=11243 comm="syz.7.937" path="/87" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 313.023683][ T5678] usb 10-1: Product: syz [ 313.030418][ T5678] usb 10-1: Manufacturer: syz [ 313.043077][ T5678] usb 10-1: SerialNumber: syz [ 313.062634][T11231] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 313.069599][ T188] kernel write not supported for file /input/event2 (pid: 188 comm: kworker/0:2) [ 313.075076][ T29] audit: type=1400 audit(1785717191.269:2403): avc: denied { write } for pid=11243 comm="syz.7.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.217750][T11256] netlink: 'syz.3.939': attribute type 12 has an invalid length. [ 313.234322][T11256] netlink: 'syz.3.939': attribute type 29 has an invalid length. [ 313.260723][T11256] netlink: 148 bytes leftover after parsing attributes in process `syz.3.939'. [ 313.283553][T11256] netlink: 59 bytes leftover after parsing attributes in process `syz.3.939'. [ 313.325191][ T5678] usb 10-1: USB disconnect, device number 21 [ 313.504606][T11265] syzkaller0: entered promiscuous mode [ 313.522660][T11265] syzkaller0: entered allmulticast mode [ 313.834121][T11281] /dev/sg0: Can't lookup blockdev [ 313.893803][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 314.995045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 315.075047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 315.478333][T11302] netlink: 84 bytes leftover after parsing attributes in process `syz.3.950'. [ 315.574029][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 315.582025][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 315.609701][ T10] usb 7-1: USB disconnect, device number 36 [ 315.903348][T11324] netlink: 44 bytes leftover after parsing attributes in process `syz.7.956'. [ 315.934554][T11324] x_tables: duplicate underflow at hook 1 [ 316.207650][T11331] netlink: 'syz.9.955': attribute type 1 has an invalid length. [ 316.215953][T11331] netlink: 756 bytes leftover after parsing attributes in process `syz.9.955'. [ 316.670268][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 316.670283][ T29] audit: type=1400 audit(1785717194.879:2411): avc: denied { module_load } for pid=11332 comm="syz.6.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 316.706206][T11333] Invalid ELF header type: 2 != 1 [ 317.191898][T11341] netlink: 32 bytes leftover after parsing attributes in process `syz.6.960'. [ 317.711459][T11354] autofs: Unknown parameter '/dev/dlm-monitor' [ 318.418957][ T29] audit: type=1400 audit(1785717196.629:2412): avc: denied { append } for pid=11365 comm="syz.1.967" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 319.515721][ T2159] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 319.516073][ T188] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 319.561959][ T29] audit: type=1400 audit(1785717197.769:2413): avc: denied { bind } for pid=11378 comm="syz.7.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 319.685292][ T188] usb 2-1: device descriptor read/64, error -71 [ 319.742112][ T2159] usb 4-1: device descriptor read/64, error -71 [ 319.914419][ T29] audit: type=1400 audit(1785717198.119:2414): avc: denied { setopt } for pid=11384 comm="syz.6.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 319.936238][ T188] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 320.006529][ T2159] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 320.065205][ T188] usb 2-1: device descriptor read/64, error -71 [ 320.136098][ T2159] usb 4-1: device descriptor read/64, error -71 [ 320.145804][ T29] audit: type=1400 audit(1785717198.359:2415): avc: denied { append } for pid=11391 comm="syz.6.976" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.171478][ T29] audit: type=1400 audit(1785717198.359:2416): avc: denied { map } for pid=11391 comm="syz.6.976" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.198063][ T188] usb usb2-port1: attempt power cycle [ 320.204936][ T29] audit: type=1400 audit(1785717198.359:2417): avc: denied { execute } for pid=11391 comm="syz.6.976" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.249723][ T2159] usb usb4-port1: attempt power cycle [ 320.535146][ T188] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 320.565604][ T188] usb 2-1: device descriptor read/8, error -71 [ 320.595138][ T2159] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 320.657110][ T2159] usb 4-1: device descriptor read/8, error -71 [ 320.965499][ T2159] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 321.296060][ T2159] usb 4-1: device descriptor read/8, error -71 [ 321.315194][ T188] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 321.346003][ T188] usb 2-1: device descriptor read/8, error -71 [ 321.415596][ T2159] usb usb4-port1: unable to enumerate USB device [ 321.480066][ T188] usb usb2-port1: unable to enumerate USB device [ 321.741587][T11416] smpboot: CPU 1 is now offline [ 321.768567][ T29] audit: type=1400 audit(1785717199.979:2418): avc: denied { setattr } for pid=11419 comm="syz.3.985" path="pipe:[36535]" dev="pipefs" ino=36535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 322.024744][T11421] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 322.063822][T11398] ------------[ cut here ]------------ [ 322.065269][T11398] [ 322.065273][T11398] ====================================================== [ 322.065277][T11398] WARNING: possible circular locking dependency detected [ 322.065283][T11398] syzkaller #0 Tainted: G L [ 322.065289][T11398] ------------------------------------------------------ [ 322.065293][T11398] syz.6.978/11398 is trying to acquire lock: [ 322.065298][T11398] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 322.065394][T11398] [ 322.065394][T11398] but task is already holding lock: [ 322.065397][T11398] ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 322.065424][T11398] [ 322.065424][T11398] which lock already depends on the new lock. [ 322.065424][T11398] [ 322.065427][T11398] [ 322.065427][T11398] the existing dependency chain (in reverse order) is: [ 322.065431][T11398] [ 322.065431][T11398] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 322.065444][T11398] lock_acquire+0x1b9/0x370 [ 322.065456][T11398] _raw_spin_lock_nested+0x31/0x40 [ 322.065468][T11398] raw_spin_rq_lock_nested+0x2c/0x140 [ 322.065482][T11398] _task_rq_lock+0xcf/0x500 [ 322.065496][T11398] cgroup_move_task+0x81/0x320 [ 322.065506][T11398] css_set_move_task+0x285/0x600 [ 322.065520][T11398] cgroup_post_fork+0x1f9/0x9a0 [ 322.065531][T11398] copy_process+0x6b7a/0x8030 [ 322.065545][T11398] kernel_clone+0x176/0x9d0 [ 322.065558][T11398] user_mode_thread+0xcc/0x110 [ 322.065571][T11398] rest_init+0x21/0x260 [ 322.065585][T11398] start_kernel+0x48e/0x490 [ 322.065600][T11398] x86_64_start_reservations+0x24/0x30 [ 322.065616][T11398] x86_64_start_kernel+0x12b/0x130 [ 322.065631][T11398] common_startup_64+0x13e/0x158 [ 322.065640][T11398] [ 322.065640][T11398] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 322.065653][T11398] lock_acquire+0x1b9/0x370 [ 322.065664][T11398] _raw_spin_lock_irqsave+0x3a/0x60 [ 322.065675][T11398] try_to_wake_up+0xbd/0x1c90 [ 322.065688][T11398] __wake_up_common+0x135/0x1f0 [ 322.065699][T11398] __wake_up+0x31/0x60 [ 322.065708][T11398] tty_port_default_wakeup+0x47/0x60 [ 322.065721][T11398] serial8250_tx_chars+0x68f/0x860 [ 322.065734][T11398] serial8250_handle_irq_locked+0x770/0x9a0 [ 322.065748][T11398] serial8250_handle_irq.part.0+0xb4/0x530 [ 322.065761][T11398] serial8250_default_handle_irq+0xc2/0x280 [ 322.065774][T11398] serial8250_interrupt+0xf8/0x1b0 [ 322.065788][T11398] __handle_irq_event_percpu+0x232/0x880 [ 322.065804][T11398] handle_irq_event+0xab/0x1e0 [ 322.065821][T11398] handle_edge_irq+0x34c/0x950 [ 322.065835][T11398] __common_interrupt+0xd8/0x2f0 [ 322.065847][T11398] common_interrupt+0xb9/0xe0 [ 322.065855][T11398] asm_common_interrupt+0x26/0x40 [ 322.065865][T11398] write_comp_data+0x0/0x90 [ 322.065875][T11398] smp_call_function_many_cond+0x5b2/0x1870 [ 322.065888][T11398] on_each_cpu_cond_mask+0x40/0x90 [ 322.065900][T11398] flush_tlb_mm_range+0x45f/0x16f0 [ 322.065914][T11398] ptep_clear_flush+0x148/0x170 [ 322.065925][T11398] do_wp_page+0x12a4/0x4350 [ 322.065939][T11398] __handle_mm_fault+0x1ab6/0x2a00 [ 322.065947][T11398] handle_mm_fault+0x37b/0xa30 [ 322.065955][T11398] do_user_addr_fault+0x5a3/0x12f0 [ 322.065971][T11398] exc_page_fault+0x6f/0xd0 [ 322.065982][T11398] asm_exc_page_fault+0x26/0x30 [ 322.065992][T11398] [ 322.065992][T11398] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 322.066005][T11398] lock_acquire+0x1b9/0x370 [ 322.066016][T11398] _raw_spin_lock_irqsave+0x3a/0x60 [ 322.066026][T11398] __wake_up+0x1c/0x60 [ 322.066035][T11398] tty_port_default_wakeup+0x47/0x60 [ 322.066048][T11398] serial8250_tx_chars+0x68f/0x860 [ 322.066060][T11398] serial8250_handle_irq_locked+0x770/0x9a0 [ 322.066073][T11398] serial8250_handle_irq.part.0+0xb4/0x530 [ 322.066086][T11398] serial8250_default_handle_irq+0xc2/0x280 [ 322.066100][T11398] serial8250_interrupt+0xf8/0x1b0 [ 322.066114][T11398] __handle_irq_event_percpu+0x232/0x880 [ 322.066130][T11398] handle_irq_event+0xab/0x1e0 [ 322.066144][T11398] handle_edge_irq+0x34c/0x950 [ 322.066158][T11398] __common_interrupt+0xd8/0x2f0 [ 322.066169][T11398] common_interrupt+0xb9/0xe0 [ 322.066177][T11398] asm_common_interrupt+0x26/0x40 [ 322.066187][T11398] pv_native_safe_halt+0xf/0x20 [ 322.066198][T11398] default_idle+0x9/0x10 [ 322.066212][T11398] default_idle_call+0x6c/0xb0 [ 322.066225][T11398] do_idle+0x3a7/0x5b0 [ 322.066238][T11398] cpu_startup_entry+0x4f/0x60 [ 322.066252][T11398] start_secondary+0x21d/0x2d0 [ 322.066265][T11398] common_startup_64+0x13e/0x158 [ 322.066274][T11398] [ 322.066274][T11398] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 322.066286][T11398] lock_acquire+0x1b9/0x370 [ 322.066298][T11398] _raw_spin_lock_irqsave+0x3a/0x60 [ 322.066308][T11398] serial8250_console_write+0x177/0x1a50 [ 322.066328][T11398] console_flush_one_record+0x790/0xe50 [ 322.066344][T11398] console_unlock+0x103/0x260 [ 322.066358][T11398] vprintk_emit+0x407/0x6b0 [ 322.066366][T11398] _printk+0xcf/0x110 [ 322.066375][T11398] register_console.cold+0xc0/0x248 [ 322.066385][T11398] univ8250_console_init+0x6f/0x80 [ 322.066398][T11398] console_init+0x3d5/0x5b0 [ 322.066408][T11398] start_kernel+0x314/0x490 [ 322.066422][T11398] x86_64_start_reservations+0x24/0x30 [ 322.066438][T11398] x86_64_start_kernel+0x12b/0x130 [ 322.066453][T11398] common_startup_64+0x13e/0x158 [ 322.066461][T11398] [ 322.066461][T11398] -> #0 (console_owner){-.-.}-{0:0}: [ 322.066474][T11398] check_prev_add+0xeb/0xe60 [ 322.066485][T11398] __lock_acquire+0x136c/0x1a40 [ 322.066497][T11398] lock_acquire+0x1b9/0x370 [ 322.066508][T11398] console_lock_spinning_enable+0x72/0x80 [ 322.066523][T11398] console_flush_one_record+0x739/0xe50 [ 322.066538][T11398] console_unlock+0x103/0x260 [ 322.066552][T11398] vprintk_emit+0x407/0x6b0 [ 322.066560][T11398] _printk+0xcf/0x110 [ 322.066569][T11398] __report_bug.cold+0x34/0x141 [ 322.066579][T11398] report_bug+0xb2/0x220 [ 322.066592][T11398] handle_bug+0x16a/0x2a0 [ 322.066605][T11398] exc_invalid_op+0x17/0x50 [ 322.066619][T11398] asm_exc_invalid_op+0x1a/0x20 [ 322.066628][T11398] update_rq_clock+0x40a/0xd20 [ 322.066642][T11398] __schedule+0x1e2d/0x6730 [ 322.066652][T11398] preempt_schedule_irq+0x50/0x90 [ 322.066663][T11398] irqentry_exit+0x205/0xa00 [ 322.066676][T11398] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.066686][T11398] __sanitizer_cov_trace_pc+0x39/0x70 [ 322.066697][T11398] ____sys_recvmsg+0x5ae/0x670 [ 322.066713][T11398] ___sys_recvmsg+0x16a/0x1a0 [ 322.066721][T11398] do_recvmmsg+0x2f3/0x740 [ 322.066730][T11398] __x64_sys_recvmmsg+0x22a/0x280 [ 322.066743][T11398] do_syscall_64+0x115/0x870 [ 322.066755][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.066765][T11398] [ 322.066765][T11398] other info that might help us debug this: [ 322.066765][T11398] [ 322.066768][T11398] Chain exists of: [ 322.066768][T11398] console_owner --> &p->pi_lock --> &rq->__lock [ 322.066768][T11398] [ 322.066782][T11398] Possible unsafe locking scenario: [ 322.066782][T11398] [ 322.066785][T11398] CPU0 CPU1 [ 322.066788][T11398] ---- ---- [ 322.066790][T11398] lock(&rq->__lock); [ 322.066796][T11398] lock(&p->pi_lock); [ 322.066803][T11398] lock(&rq->__lock); [ 322.066810][T11398] lock(console_owner); [ 322.066818][T11398] [ 322.066818][T11398] *** DEADLOCK *** [ 322.066818][T11398] [ 322.066820][T11398] 3 locks held by syz.6.978/11398: [ 322.066826][T11398] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 322.066853][T11398] #1: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 322.066875][T11398] #2: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 322.066903][T11398] [ 322.066903][T11398] stack backtrace: [ 322.066910][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.6.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.066925][T11398] Tainted: [L]=SOFTLOCKUP [ 322.066929][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 322.066935][T11398] Call Trace: [ 322.066939][T11398] [ 322.066943][T11398] dump_stack_lvl+0x100/0x190 [ 322.066956][T11398] print_circular_bug.cold+0x178/0x1c7 [ 322.066972][T11398] check_noncircular+0x146/0x160 [ 322.066986][T11398] check_prev_add+0xeb/0xe60 [ 322.066999][T11398] __lock_acquire+0x136c/0x1a40 [ 322.067014][T11398] lock_acquire+0x1b9/0x370 [ 322.067025][T11398] ? console_lock_spinning_enable+0x61/0x80 [ 322.067042][T11398] ? console_lock_spinning_enable+0x4a/0x80 [ 322.067058][T11398] console_lock_spinning_enable+0x72/0x80 [ 322.067074][T11398] ? console_lock_spinning_enable+0x61/0x80 [ 322.067089][T11398] console_flush_one_record+0x739/0xe50 [ 322.067108][T11398] ? __pfx_console_flush_one_record+0x10/0x10 [ 322.067126][T11398] ? is_printk_cpu_sync_owner+0x32/0x40 [ 322.067138][T11398] console_unlock+0x103/0x260 [ 322.067153][T11398] ? __pfx_console_unlock+0x10/0x10 [ 322.067169][T11398] ? do_raw_spin_unlock+0x145/0x1e0 [ 322.067184][T11398] ? _printk+0xcf/0x110 [ 322.067194][T11398] vprintk_emit+0x407/0x6b0 [ 322.067203][T11398] ? __pfx_vprintk_emit+0x10/0x10 [ 322.067213][T11398] ? page_table_check_set+0x30f/0x580 [ 322.067226][T11398] ? page_table_check_set+0x30f/0x580 [ 322.067240][T11398] _printk+0xcf/0x110 [ 322.067250][T11398] ? __pfx__printk+0x10/0x10 [ 322.067261][T11398] ? __report_bug.cold+0x24/0x141 [ 322.067273][T11398] __report_bug.cold+0x34/0x141 [ 322.067284][T11398] ? update_rq_clock+0x40a/0xd20 [ 322.067299][T11398] ? __pfx___report_bug+0x10/0x10 [ 322.067316][T11398] ? pick_eevdf+0x229/0x860 [ 322.067328][T11398] ? update_rq_clock+0x40a/0xd20 [ 322.067342][T11398] report_bug+0xb2/0x220 [ 322.067355][T11398] ? update_rq_clock+0x40a/0xd20 [ 322.067370][T11398] handle_bug+0x16a/0x2a0 [ 322.067384][T11398] exc_invalid_op+0x17/0x50 [ 322.067399][T11398] asm_exc_invalid_op+0x1a/0x20 [ 322.067409][T11398] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 322.067425][T11398] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 322.067435][T11398] RSP: 0018:ffffc900107bf730 EFLAGS: 00010046 [ 322.067443][T11398] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001 [ 322.067449][T11398] RDX: 0000000000000046 RSI: ffffffff8e183008 RDI: ffffffff8c400380 [ 322.067456][T11398] RBP: ffffc900107bf8d8 R08: 0000000000000001 R09: 0000000000000001 [ 322.067462][T11398] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9121c5a4 [ 322.067468][T11398] R13: ffff8880b853c3a0 R14: ffff88805ca98000 R15: ffff8880b843c058 [ 322.067479][T11398] __schedule+0x1e2d/0x6730 [ 322.067494][T11398] ? __pfx___schedule+0x10/0x10 [ 322.067506][T11398] ? rcu_is_watching+0x12/0xc0 [ 322.067522][T11398] preempt_schedule_irq+0x50/0x90 [ 322.067534][T11398] irqentry_exit+0x205/0xa00 [ 322.067549][T11398] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.067564][T11398] RIP: 0010:__sanitizer_cov_trace_pc+0x39/0x70 [ 322.067577][T11398] Code: 65 48 8b 15 21 db 58 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 51 8f b3 09 8b 82 24 17 00 00 85 c0 74 f1 <8b> 82 f8 16 00 00 83 f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 [ 322.067587][T11398] RSP: 0018:ffffc900107bf9f8 EFLAGS: 00000246 [ 322.067594][T11398] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc90011e70000 [ 322.067601][T11398] RDX: ffff888035742540 RSI: ffffffff897ff3de RDI: ffffc900107bfdb0 [ 322.067607][T11398] RBP: ffffc900107bfd88 R08: 0000000000000005 R09: 0000000000000000 [ 322.067613][T11398] R10: 000000000000f87e R11: 0000000000000000 R12: ffff88807492b9c0 [ 322.067619][T11398] R13: ffffffff8a5f7620 R14: ffffc900107bfdcc R15: 0000000000000002 [ 322.067627][T11398] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 322.067645][T11398] ? ____sys_recvmsg+0x5ae/0x670 [ 322.067661][T11398] ____sys_recvmsg+0x5ae/0x670 [ 322.067680][T11398] ? __pfx_____sys_recvmsg+0x10/0x10 [ 322.067700][T11398] ? rcu_is_watching+0x12/0xc0 [ 322.067715][T11398] ? ___sys_recvmsg+0x177/0x1a0 [ 322.067724][T11398] ? kfree+0x1e5/0x6c0 [ 322.067734][T11398] ___sys_recvmsg+0x16a/0x1a0 [ 322.067744][T11398] ? __pfx____sys_recvmsg+0x10/0x10 [ 322.067756][T11398] ? __pfx___might_resched+0x10/0x10 [ 322.067770][T11398] do_recvmmsg+0x2f3/0x740 [ 322.067780][T11398] ? __pfx_do_recvmmsg+0x10/0x10 [ 322.067791][T11398] ? do_futex+0x190/0x440 [ 322.067809][T11398] ? __x64_sys_futex+0x34f/0x4d0 [ 322.067826][T11398] __x64_sys_recvmmsg+0x22a/0x280 [ 322.067840][T11398] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 322.067855][T11398] do_syscall_64+0x115/0x870 [ 322.067868][T11398] ? clear_bhb_loop+0x70/0xc0 [ 322.067880][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.067890][T11398] RIP: 0033:0x7f58b859e0d9 [ 322.067899][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.067908][T11398] RSP: 002b:00007f58b94f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 322.067917][T11398] RAX: ffffffffffffffda RBX: 00007f58b8826090 RCX: 00007f58b859e0d9 [ 322.067924][T11398] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 322.067930][T11398] RBP: 00007f58b8635024 R08: 0000000000000000 R09: 0000000000000000 [ 322.067936][T11398] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 322.067942][T11398] R13: 00007f58b8826128 R14: 00007f58b8826090 R15: 00007ffcb860fc18 [ 322.067951][T11398] [ 323.402705][T11398] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 323.402715][T11398] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.6.978/11398 [ 323.420537][T11398] Modules linked in: [ 323.424408][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.6.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.435240][T11398] Tainted: [L]=SOFTLOCKUP [ 323.439552][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 323.449595][T11398] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 323.455151][T11398] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 323.474735][T11398] RSP: 0018:ffffc900107bf730 EFLAGS: 00010046 [ 323.480776][T11398] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001 [ 323.488728][T11398] RDX: 0000000000000046 RSI: ffffffff8e183008 RDI: ffffffff8c400380 [ 323.496683][T11398] RBP: ffffc900107bf8d8 R08: 0000000000000001 R09: 0000000000000001 [ 323.504635][T11398] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9121c5a4 [ 323.512588][T11398] R13: ffff8880b853c3a0 R14: ffff88805ca98000 R15: ffff8880b843c058 [ 323.520539][T11398] FS: 00007f58b94f96c0(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 323.529451][T11398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.536011][T11398] CR2: 00002000003e2030 CR3: 00000000359dc000 CR4: 00000000003526f0 [ 323.543954][T11398] Call Trace: [ 323.547219][T11398] [ 323.550138][T11398] __schedule+0x1e2d/0x6730 [ 323.554623][T11398] ? __pfx___schedule+0x10/0x10 [ 323.559446][T11398] ? rcu_is_watching+0x12/0xc0 [ 323.564201][T11398] preempt_schedule_irq+0x50/0x90 [ 323.569199][T11398] irqentry_exit+0x205/0xa00 [ 323.573772][T11398] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.579723][T11398] RIP: 0010:__sanitizer_cov_trace_pc+0x39/0x70 [ 323.585848][T11398] Code: 65 48 8b 15 21 db 58 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 51 8f b3 09 8b 82 24 17 00 00 85 c0 74 f1 <8b> 82 f8 16 00 00 83 f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 [ 323.605425][T11398] RSP: 0018:ffffc900107bf9f8 EFLAGS: 00000246 [ 323.611471][T11398] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc90011e70000 [ 323.619428][T11398] RDX: ffff888035742540 RSI: ffffffff897ff3de RDI: ffffc900107bfdb0 [ 323.627379][T11398] RBP: ffffc900107bfd88 R08: 0000000000000005 R09: 0000000000000000 [ 323.635328][T11398] R10: 000000000000f87e R11: 0000000000000000 R12: ffff88807492b9c0 [ 323.643275][T11398] R13: ffffffff8a5f7620 R14: ffffc900107bfdcc R15: 0000000000000002 [ 323.651225][T11398] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 323.656752][T11398] ? ____sys_recvmsg+0x5ae/0x670 [ 323.661673][T11398] ____sys_recvmsg+0x5ae/0x670 [ 323.666514][T11398] ? __pfx_____sys_recvmsg+0x10/0x10 [ 323.671785][T11398] ? rcu_is_watching+0x12/0xc0 [ 323.676527][T11398] ? ___sys_recvmsg+0x177/0x1a0 [ 323.681348][T11398] ? kfree+0x1e5/0x6c0 [ 323.685395][T11398] ___sys_recvmsg+0x16a/0x1a0 [ 323.690050][T11398] ? __pfx____sys_recvmsg+0x10/0x10 [ 323.695221][T11398] ? __pfx___might_resched+0x10/0x10 [ 323.700496][T11398] do_recvmmsg+0x2f3/0x740 [ 323.704888][T11398] ? __pfx_do_recvmmsg+0x10/0x10 [ 323.709806][T11398] ? do_futex+0x190/0x440 [ 323.714125][T11398] ? __x64_sys_futex+0x34f/0x4d0 [ 323.719067][T11398] __x64_sys_recvmmsg+0x22a/0x280 [ 323.724084][T11398] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 323.729617][T11398] do_syscall_64+0x115/0x870 [ 323.734194][T11398] ? clear_bhb_loop+0x70/0xc0 [ 323.738844][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.744719][T11398] RIP: 0033:0x7f58b859e0d9 [ 323.749114][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.768703][T11398] RSP: 002b:00007f58b94f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.777106][T11398] RAX: ffffffffffffffda RBX: 00007f58b8826090 RCX: 00007f58b859e0d9 [ 323.785060][T11398] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 323.793021][T11398] RBP: 00007f58b8635024 R08: 0000000000000000 R09: 0000000000000000 [ 323.800965][T11398] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 323.808907][T11398] R13: 00007f58b8826128 R14: 00007f58b8826090 R15: 00007ffcb860fc18 [ 323.816855][T11398] [ 323.819848][T11398] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.827109][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.6.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.837929][T11398] Tainted: [L]=SOFTLOCKUP [ 323.842221][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 323.852256][T11398] Call Trace: [ 323.855524][T11398] [ 323.858430][T11398] dump_stack_lvl+0x100/0x190 [ 323.863109][T11398] vpanic+0x552/0x970 [ 323.867091][T11398] ? __pfx_vpanic+0x10/0x10 [ 323.871574][T11398] ? lock_release+0x24d/0x310 [ 323.876254][T11398] panic+0xd1/0xe0 [ 323.879988][T11398] ? __pfx_panic+0x10/0x10 [ 323.884389][T11398] check_panic_on_warn.cold+0x19/0x34 [ 323.889737][T11398] ? update_rq_clock+0x40a/0xd20 [ 323.894663][T11398] __warn.cold+0x191/0x318 [ 323.899061][T11398] __report_bug+0x30f/0x440 [ 323.903537][T11398] ? update_rq_clock+0x40a/0xd20 [ 323.908450][T11398] ? __pfx___report_bug+0x10/0x10 [ 323.913448][T11398] ? pick_eevdf+0x229/0x860 [ 323.917929][T11398] ? update_rq_clock+0x40a/0xd20 [ 323.922845][T11398] report_bug+0xb2/0x220 [ 323.927065][T11398] ? update_rq_clock+0x40a/0xd20 [ 323.931977][T11398] handle_bug+0x16a/0x2a0 [ 323.936307][T11398] exc_invalid_op+0x17/0x50 [ 323.940792][T11398] asm_exc_invalid_op+0x1a/0x20 [ 323.945611][T11398] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 323.951133][T11398] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 323.970812][T11398] RSP: 0018:ffffc900107bf730 EFLAGS: 00010046 [ 323.976865][T11398] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001 [ 323.984810][T11398] RDX: 0000000000000046 RSI: ffffffff8e183008 RDI: ffffffff8c400380 [ 323.992753][T11398] RBP: ffffc900107bf8d8 R08: 0000000000000001 R09: 0000000000000001 [ 324.000705][T11398] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9121c5a4 [ 324.008648][T11398] R13: ffff8880b853c3a0 R14: ffff88805ca98000 R15: ffff8880b843c058 [ 324.016615][T11398] __schedule+0x1e2d/0x6730 [ 324.021100][T11398] ? __pfx___schedule+0x10/0x10 [ 324.025924][T11398] ? rcu_is_watching+0x12/0xc0 [ 324.030667][T11398] preempt_schedule_irq+0x50/0x90 [ 324.035668][T11398] irqentry_exit+0x205/0xa00 [ 324.040233][T11398] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.046186][T11398] RIP: 0010:__sanitizer_cov_trace_pc+0x39/0x70 [ 324.052322][T11398] Code: 65 48 8b 15 21 db 58 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 51 8f b3 09 8b 82 24 17 00 00 85 c0 74 f1 <8b> 82 f8 16 00 00 83 f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 [ 324.071902][T11398] RSP: 0018:ffffc900107bf9f8 EFLAGS: 00000246 [ 324.077945][T11398] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc90011e70000 [ 324.085886][T11398] RDX: ffff888035742540 RSI: ffffffff897ff3de RDI: ffffc900107bfdb0 [ 324.093833][T11398] RBP: ffffc900107bfd88 R08: 0000000000000005 R09: 0000000000000000 [ 324.101774][T11398] R10: 000000000000f87e R11: 0000000000000000 R12: ffff88807492b9c0